last executing test programs: 5m34.721896819s ago: executing program 3 (id=4): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x1, r1}, 0x10) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 2m34.177952004s ago: executing program 4 (id=538): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 2m33.86218419s ago: executing program 33 (id=538): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m31.676096256s ago: executing program 5 (id=1210): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x10bc01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x5, 0x7, 0x4000000000000e52, 0x100, 0x81, 0x1043, 0x200100000006, 0x5, 0x1, 0xfffffffffffffffe, 0x9, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0xdddd1000, 0x142790}) ioctl$KVM_RUN(r3, 0xae80, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m31.011509071s ago: executing program 5 (id=1222): r0 = userfaultfd(0x80001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) 1m30.573145791s ago: executing program 5 (id=1232): socket$inet_tcp(0x2, 0x1, 0x0) r0 = msgget$private(0x0, 0x384) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgrcv(r0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r0, 0x0, 0x8, 0x8fa2496c381b7ad5) 1m29.504156011s ago: executing program 5 (id=1251): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m29.222500748s ago: executing program 5 (id=1257): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000001c0)={r1, 0x0, 0x0}) 1m27.330146852s ago: executing program 5 (id=1285): r0 = socket(0x2, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000008b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="189772100048f5c56a6aeb00ffffffff0bd87cc6", 0x14}], 0x1, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x13}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}], 0x5, 0x0, 0x0, 0x1800}}], 0x2, 0x20000000) 1m26.785049186s ago: executing program 34 (id=1285): r0 = socket(0x2, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000008b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="189772100048f5c56a6aeb00ffffffff0bd87cc6", 0x14}], 0x1, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x13}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}], 0x5, 0x0, 0x0, 0x1800}}], 0x2, 0x20000000) 56.264188532s ago: executing program 0 (id=1734): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/210, 0xd2}], 0x1, 0x10000, 0x58c6, 0x16) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) 56.143993568s ago: executing program 7 (id=1290): syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x8047) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8000000000000, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x6}, &(0x7f0000000000)={0x1f, 0xfffffffffffffffd, 0x0, 0x48, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 55.816155774s ago: executing program 7 (id=1739): syz_open_dev$dvb_demux(0x0, 0x0, 0x700) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 55.399760962s ago: executing program 7 (id=1744): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 55.071463917s ago: executing program 7 (id=1747): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/210, 0xd2}], 0x1, 0x10000, 0x58c6, 0x16) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) 53.67332744s ago: executing program 7 (id=1764): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) 53.094946906s ago: executing program 35 (id=1764): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) 8.462665232s ago: executing program 1 (id=2327): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001780)) 8.021767698s ago: executing program 1 (id=2330): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) 7.558680256s ago: executing program 0 (id=1737): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x1, r1}, 0x10) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) mq_open(&(0x7f0000000100)='\x00', 0x80, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x20040000) 7.391395119s ago: executing program 1 (id=2333): socket$inet6_sctp(0xa, 0x2, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x80000000000000a, 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1a0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x1, 0x800, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES8, @ANYBLOB="0000000000000000140012800b000100647600000400028008000a000000000017e508d9eed779970beeac2d2a66927d745c7fe705ef0a275f16c3ce38e6a2eb551d0ebc5a5452246314f9cca7ac", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) dup3(r2, r7, 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f00000007c0)={0x9, 0x3132564e, 0x2, @discrete={0x1, 0x5}}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xfd, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 7.165460654s ago: executing program 1 (id=2336): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd26, 0x1}, 0x18}, 0x1, 0xfe0f0000, 0x0, 0x2000c844}, 0x20000110) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(0xffffffffffffffff, &(0x7f0000000280)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6.924811219s ago: executing program 1 (id=2339): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x10bc01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x5, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0xffffffff, 0x1, 0xfffffffffffffffe, 0x9, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x142790}) ioctl$KVM_RUN(r3, 0xae80, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.673892208s ago: executing program 1 (id=2342): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x800009, 0xfffffffb}}, 0x44) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x2) 6.662360916s ago: executing program 8 (id=1767): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, 0x0, 0x5}, 0x80, 0x0}, 0x20008110) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.173933519s ago: executing program 0 (id=2346): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd26, 0x1}, 0x18}, 0x1, 0xfe0f0000, 0x0, 0x2000c844}, 0x20000110) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.172821329s ago: executing program 8 (id=2348): r0 = socket$inet(0x2, 0xa, 0x8) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) 5.804142018s ago: executing program 8 (id=2352): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d010140000102030109025f0003010380f40904"], 0x0) r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000109030000000000008000000100000608000640000000000900010073797a30150000000c0004800800014007f000000900010073797a3100000000100002000c00028005000100110000000c0004800800014000010001"], 0x5c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e27", 0x56, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r7 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r7, r8, r9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r10, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0xbc, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x0, 0x6}, 0x7, 0x40}}}) syz_usb_disconnect(r0) 2.887896252s ago: executing program 0 (id=2365): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001780)) 2.511749168s ago: executing program 0 (id=2369): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xa, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.901192736s ago: executing program 2 (id=2372): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000001ff0000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff020000000000000000000000000001000000000000000001"], 0xa8}}, 0x0) 1.898400596s ago: executing program 6 (id=2373): stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r0, &(0x7f0000000100)={0x6, 0x39, 0x1, 0xa013abda6fcf7674}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1580, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24008040) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c2c2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x3ff, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r3) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.624081984s ago: executing program 0 (id=2374): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd26, 0x1}, 0x18}, 0x1, 0xfe0f0000, 0x0, 0x2000c844}, 0x20000110) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.533299951s ago: executing program 2 (id=2375): stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r0, &(0x7f0000000100)={0x6, 0x39, 0x1, 0xa013abda6fcf7674}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1580, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24008040) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c2c2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x3ff, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_disconnect(r5) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, 0x0, 0x0) syz_usb_disconnect(r6) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.491432249s ago: executing program 6 (id=2376): r0 = socket(0x10, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socket(0x840000000002, 0x3, 0xff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000340)=0x10001, 0x4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0xfffffffffffffffd}) socket(0x11, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000020601020000000500000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e657400000000050005000a0000000500010006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x4800) 1.17568404s ago: executing program 6 (id=2377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), &(0x7f0000002940)=""/4083, 0xff3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000000a0000030900010073797a31000000000c00054000000000000000050c00038008000240000000810900020073797a30000000000c0003800800014000000000090002"], 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x80ed, 0x40, 0x0, 0x1000000}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 1.175340525s ago: executing program 2 (id=2378): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x20) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x51, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @local, 0x9}, 0x1c) 1.009624456s ago: executing program 6 (id=2379): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd26, 0x1}, 0x18}, 0x1, 0xfe0f0000, 0x0, 0x2000c844}, 0x20000110) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000280)='./cgroup\x00', r3, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 974.567997ms ago: executing program 2 (id=2380): stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r0, &(0x7f0000000100)={0x6, 0x39, 0x1, 0xa013abda6fcf7674}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1580, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24008040) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c2c2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x3ff, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x8}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(r4) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, 0x0, 0x0) syz_usb_disconnect(r5) 620.796367ms ago: executing program 6 (id=2381): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x0, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 583.195501ms ago: executing program 2 (id=2382): syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x759, 0x7, 0x7d, 0x7, 0x8000, 0x4, 0x2}, 0x0, &(0x7f0000000080)={0x3fc, 0x6, 0xffffffffffffffff, 0x2000000000000003, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 48.514586ms ago: executing program 2 (id=2383): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xa, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 6 (id=2384): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000001ff0000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff02000000000000000000000000000100000000000000000100"], 0xa8}}, 0x0) kernel console output (not intermixed with test programs): 514][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.925606][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.063827][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.079126][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.085691][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.086327][ T1521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.086346][ T1521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.176207][ T152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.217400][ T152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.300005][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.360404][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.400673][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.422521][ T152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.488140][ T5595] veth0_macvtap: entered promiscuous mode [ 120.529216][ T1289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.529245][ T1289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.732508][ T5595] veth1_macvtap: entered promiscuous mode [ 121.504210][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.357060][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.370892][ T1289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.370916][ T1289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.495840][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.495867][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.336781][ T1289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.384115][ T1289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.398069][ T1289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.506583][ T1289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.386041][ T1521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.386078][ T1521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.081529][ T1290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.081555][ T1290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.082388][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.082406][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.568156][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.568318][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.756928][ T5821] securityfs: Unknown parameter '' [ 136.761883][ T5834] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 138.520377][ T5840] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 138.520653][ T5840] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 138.523735][ T5840] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 140.267324][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.267442][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.394184][ T5852] Zero length message leads to an empty skb [ 141.199089][ T5864] binder: 5855:5864 ioctl 541b 0 returned -22 [ 146.453504][ T5863] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 146.453549][ T5863] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 146.453570][ T5863] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 147.561725][ T5872] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 149.047736][ T5856] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 150.774444][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 153.061219][ T5856] usb 1-1: device descriptor read/all, error -71 [ 153.773732][ T5890] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 153.773860][ T5890] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 153.773941][ T5890] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 155.308229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.361127][ T5892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22'. [ 155.361181][ T5892] netlink: 44 bytes leftover after parsing attributes in process `syz.4.22'. [ 157.546543][ T5907] securityfs: Unknown parameter '' [ 157.595592][ T5907] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 162.723483][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.776871][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.780762][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.793477][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.805055][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.877588][ T5927] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 163.877620][ T5927] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 163.877650][ T5927] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 164.149817][ T5932] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 164.888494][ T5607] Bluetooth: hci5: command tx timeout [ 165.409243][ T819] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.632009][ T819] usb 5-1: Using ep0 maxpacket: 16 [ 165.751405][ T819] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 165.751441][ T819] usb 5-1: config 0 has no interface number 0 [ 165.751495][ T819] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 165.751523][ T819] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 165.785399][ T819] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 165.785531][ T819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.785581][ T819] usb 5-1: Product: syz [ 165.785619][ T819] usb 5-1: Manufacturer: syz [ 165.785670][ T819] usb 5-1: SerialNumber: syz [ 166.541524][ T819] usb 5-1: config 0 descriptor?? [ 166.585357][ T5936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.589070][ T5936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.968355][ T5607] Bluetooth: hci5: command tx timeout [ 167.190200][ T5936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.191009][ T5936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.402485][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'. [ 167.408845][ T5952] netlink: 44 bytes leftover after parsing attributes in process `syz.1.36'. [ 168.200691][ T819] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 168.237783][ T819] asix 5-1:0.34: probe with driver asix failed with error -32 [ 171.687420][ T5607] Bluetooth: hci5: command tx timeout [ 172.157737][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.499937][ T5712] usb 5-1: USB disconnect, device number 2 [ 172.846381][ T5980] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 172.846501][ T5980] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 172.846524][ T5980] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 173.579487][ T5991] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 173.691072][ T5607] Bluetooth: hci5: command tx timeout [ 175.127130][ T6001] usb usb8: usbfs: process 6001 (syz.2.45) did not claim interface 0 before use [ 175.776089][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 175.776140][ T6003] netlink: 44 bytes leftover after parsing attributes in process `syz.1.46'. [ 175.798809][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.975960][ T5999] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 175.976006][ T5999] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 175.976028][ T5999] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 176.541513][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.005472][ T6037] securityfs: Unknown parameter '' [ 179.215347][ T6036] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 179.215395][ T6036] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 179.215417][ T6036] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 183.061405][ T6059] binder: 6055:6059 ioctl 541b 0 returned -22 [ 183.804522][ T6064] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 183.839684][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.710297][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.72'. [ 185.710346][ T6083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.72'. [ 194.191332][ T6118] binder: 6110:6118 ioctl 541b 0 returned -22 [ 197.123707][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.86'. [ 197.123756][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.86'. [ 198.354863][ T67] bridge_slave_1: left allmulticast mode [ 198.355069][ T67] bridge_slave_1: left promiscuous mode [ 198.538227][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.966454][ T67] bridge_slave_0: left allmulticast mode [ 198.966492][ T67] bridge_slave_0: left promiscuous mode [ 198.966946][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.159890][ T5606] IPVS: starting estimator thread 0... [ 201.251797][ T6182] IPVS: using max 8 ests per chain, 19200 per kthread [ 201.698121][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.707424][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.292187][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.400521][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.452081][ T67] bond0 (unregistering): Released all slaves [ 202.559026][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 202.580022][ T6163] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 202.580070][ T6163] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 202.580097][ T6163] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 208.248803][ T819] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 208.406642][ T819] usb 2-1: Using ep0 maxpacket: 32 [ 208.683153][ T6280] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 208.705864][ T819] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.705945][ T819] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.833247][ T819] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 208.833283][ T819] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 208.833308][ T819] usb 2-1: Product: syz [ 208.833383][ T819] usb 2-1: Manufacturer: syz [ 211.813531][ T819] hub 2-1:4.0: USB hub found [ 211.829759][ T819] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 211.917815][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.920015][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.924548][ T5909] bridge_slave_0: entered allmulticast mode [ 211.999645][ T6259] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 211.999678][ T6259] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 211.999695][ T6259] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 212.067989][ T5909] bridge_slave_0: entered promiscuous mode [ 212.174519][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 212.204456][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.204585][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.204844][ T5909] bridge_slave_1: entered allmulticast mode [ 212.329829][ T5909] bridge_slave_1: entered promiscuous mode [ 212.417782][ T819] usb 2-1: USB disconnect, device number 2 [ 216.525023][ T6320] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 218.846137][ T5732] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 219.115766][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.180055][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.185946][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.188482][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 219.190826][ T5732] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.190849][ T5732] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.193509][ T5732] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 219.193531][ T5732] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 219.193546][ T5732] usb 3-1: Product: syz [ 219.193557][ T5732] usb 3-1: Manufacturer: syz [ 219.208116][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.221528][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.480900][ T5732] hub 3-1:4.0: USB hub found [ 219.905301][ T5732] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 220.380635][ T6341] securityfs: Unknown parameter '' [ 220.427704][ T6341] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 221.378006][ T5607] Bluetooth: hci4: command tx timeout [ 223.425491][ T10] usb 3-1: USB disconnect, device number 2 [ 223.449761][ T5607] Bluetooth: hci4: command tx timeout [ 225.662883][ T5607] Bluetooth: hci4: command tx timeout [ 226.308248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.348238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 227.848392][ T5615] Bluetooth: hci4: command tx timeout [ 227.955621][ T6361] securityfs: Unknown parameter '' [ 227.980771][ T6361] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 229.768421][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 229.768468][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 229.788394][ T5601] Bluetooth: hci3: command 0x0406 tx timeout [ 229.788441][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 234.725701][ T6399] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 234.759728][ T6401] securityfs: Unknown parameter '' [ 234.782250][ T6401] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 238.705282][ T67] hsr_slave_0: left promiscuous mode [ 238.808354][ T67] hsr_slave_1: left promiscuous mode [ 238.809780][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.857304][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.947890][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.947922][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.898304][ T5790] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.060122][ T5790] usb 5-1: Using ep0 maxpacket: 16 [ 240.062834][ T5790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.062901][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.062940][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.062968][ T5790] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 240.063001][ T5790] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.064580][ T5790] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.064623][ T5790] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.064649][ T5790] usb 5-1: Manufacturer: syz [ 240.207234][ T5790] usb 5-1: config 0 descriptor?? [ 240.870416][ T5790] rc_core: IR keymap rc-hauppauge not found [ 240.870452][ T5790] Registered IR keymap rc-empty [ 240.911865][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.931144][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.100330][ T5790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 241.154776][ T5790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 241.221149][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.246531][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.259335][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.278470][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.298484][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.318469][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.338481][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.359587][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.382806][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.409347][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.522438][ T5790] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.522475][ T5790] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.612522][ T5790] usb 5-1: USB disconnect, device number 3 [ 242.824263][ T6455] securityfs: Unknown parameter '' [ 242.851415][ T6455] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 243.198834][ T6464] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 243.198869][ T6464] netlink: 224 bytes leftover after parsing attributes in process `syz.1.185'. [ 244.399264][ T67] veth1_macvtap: left promiscuous mode [ 244.433220][ T67] veth0_macvtap: left promiscuous mode [ 244.433586][ T67] veth1_vlan: left promiscuous mode [ 244.434034][ T67] veth0_vlan: left promiscuous mode [ 251.620020][ T67] team0 (unregistering): Port device team_slave_1 removed [ 251.946560][ T67] team0 (unregistering): Port device team_slave_0 removed [ 252.882295][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 253.988346][ T5600] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 255.205139][ T5600] usb 5-1: Using ep0 maxpacket: 16 [ 256.339641][ T5600] usb 5-1: device descriptor read/all, error -71 [ 256.859257][ T5711] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 257.023326][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 257.029767][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.029921][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.030016][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 257.030081][ T5711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 257.030156][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.033134][ T5711] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 257.033256][ T5711] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 257.033314][ T5711] usb 3-1: Manufacturer: syz [ 257.149026][ T5711] usb 3-1: config 0 descriptor?? [ 257.179589][ T5600] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 257.328311][ T5600] usb 5-1: Using ep0 maxpacket: 32 [ 257.331007][ T5600] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.331044][ T5600] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.333437][ T5600] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 257.333466][ T5600] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 257.333488][ T5600] usb 5-1: Product: syz [ 257.333502][ T5600] usb 5-1: Manufacturer: syz [ 257.532262][ T5600] hub 5-1:4.0: USB hub found [ 257.729471][ T5711] rc_core: IR keymap rc-hauppauge not found [ 257.729497][ T5711] Registered IR keymap rc-empty [ 257.729669][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 257.761500][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 257.782511][ T5711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 257.857452][ T5600] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 257.904312][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 258.121064][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.142864][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.168761][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.191001][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.208547][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.238889][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.314556][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.339115][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.374391][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.391260][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 258.425661][ T6603] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 258.462445][ T5711] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 258.462482][ T5711] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 258.609319][ T5711] usb 3-1: USB disconnect, device number 4 [ 261.285069][ T5713] usb 5-1: USB disconnect, device number 5 [ 261.671161][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 263.504463][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.508300][ T5790] IPVS: starting estimator thread 0... [ 263.508467][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.609532][ T6645] IPVS: using max 10 ests per chain, 24000 per kthread [ 263.775690][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.776346][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.776552][ T6333] bridge_slave_0: entered allmulticast mode [ 264.874792][ T6333] bridge_slave_0: entered promiscuous mode [ 264.926997][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.941312][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.943724][ T6333] bridge_slave_1: entered allmulticast mode [ 264.970935][ T6333] bridge_slave_1: entered promiscuous mode [ 265.429620][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.578900][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.388312][ T5600] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 267.481036][ T67] bridge_slave_1: left allmulticast mode [ 267.481079][ T67] bridge_slave_1: left promiscuous mode [ 267.481383][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.558348][ T5600] usb 2-1: device descriptor read/64, error -71 [ 267.828348][ T5600] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 267.958446][ T5600] usb 2-1: device descriptor read/64, error -71 [ 268.068982][ T5600] usb usb2-port1: attempt power cycle [ 268.437435][ T5600] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 268.461829][ T5600] usb 2-1: device descriptor read/8, error -71 [ 268.637145][ T67] bridge_slave_0: left allmulticast mode [ 268.637181][ T67] bridge_slave_0: left promiscuous mode [ 268.674520][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.747240][ T5600] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 268.782643][ T5600] usb 2-1: device descriptor read/8, error -71 [ 268.889462][ T5600] usb usb2-port1: unable to enumerate USB device [ 269.266411][ T67] bond0 (unregistering): Released all slaves [ 269.599196][ T6333] team0: Port device team_slave_0 added [ 269.645043][ T6333] team0: Port device team_slave_1 added [ 271.164255][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.164271][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.164291][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.319553][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.319567][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.319588][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.560290][ T6731] syz.2.272 uses obsolete (PF_INET,SOCK_PACKET) [ 272.475126][ T6748] netlink: 'syz.4.281': attribute type 10 has an invalid length. [ 273.038283][ T36] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 273.197495][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 273.217377][ T36] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 273.217415][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.283682][ T36] usb 2-1: config 0 descriptor?? [ 273.625454][ T36] as10x_usb: device has been detected [ 273.634267][ T36] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 273.826331][ T6731] dummy0: entered allmulticast mode [ 274.313514][ T36] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 274.457512][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.477036][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.526906][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.527486][ T6748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.556659][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.556811][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.864446][ T6748] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 274.906348][ T6757] netlink: 'syz.1.284': attribute type 46 has an invalid length. [ 275.256877][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.303062][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.312371][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.353622][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.395731][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.341054][ T36] as10x_usb: error during firmware upload part1 [ 276.365416][ T36] Registered device nBox DVB-T Dongle [ 277.068336][ T5711] usb 2-1: USB disconnect, device number 7 [ 277.611623][ T5711] Unregistered device nBox DVB-T Dongle [ 277.641696][ T5711] as10x_usb: device has been disconnected [ 277.694806][ T4912] Bluetooth: hci5: command tx timeout [ 278.240351][ T67] bridge_slave_1: left allmulticast mode [ 278.240406][ T67] bridge_slave_1: left promiscuous mode [ 278.240729][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.248574][ T5711] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 278.345809][ T67] bridge_slave_0: left allmulticast mode [ 278.345855][ T67] bridge_slave_0: left promiscuous mode [ 278.346156][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.418279][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 278.422637][ T5711] usb 2-1: unable to get BOS descriptor or descriptor too short [ 278.424276][ T5711] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 278.427385][ T5711] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 278.427417][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.427440][ T5711] usb 2-1: Product: syz [ 278.427456][ T5711] usb 2-1: Manufacturer: syz [ 278.427471][ T5711] usb 2-1: SerialNumber: syz [ 278.578376][ T5790] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 278.752610][ T5790] usb 5-1: Using ep0 maxpacket: 16 [ 278.757026][ T5790] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 278.757063][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 278.806324][ T5790] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 278.806360][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.806383][ T5790] usb 5-1: Product: syz [ 278.806411][ T5790] usb 5-1: Manufacturer: syz [ 278.806427][ T5790] usb 5-1: SerialNumber: syz [ 278.918398][ T5790] usb 5-1: config 0 descriptor?? [ 278.926100][ T5711] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 279.005752][ T5790] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 279.005799][ T5790] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 279.079390][ T5711] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 279.542434][ T5790] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 279.543504][ T5790] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 279.543945][ T5790] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 279.543968][ T5790] em28xx 5-1:0.0: No AC97 audio processor [ 279.706760][ T5790] usb 5-1: USB disconnect, device number 6 [ 279.768317][ T4912] Bluetooth: hci5: command tx timeout [ 279.772159][ T5790] em28xx 5-1:0.0: Disconnecting em28xx [ 280.180313][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.270337][ T5711] usb 2-1: USB disconnect, device number 8 [ 280.303635][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.449017][ T67] bond0 (unregistering): Released all slaves [ 280.495615][ T5790] em28xx 5-1:0.0: Freeing device [ 281.030302][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.348366][ T5711] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 281.356336][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.467013][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.549713][ T5711] usb 2-1: config 0 has no interfaces? [ 281.549756][ T5711] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 281.549779][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.600131][ T5711] usb 2-1: config 0 descriptor?? [ 281.800699][ T67] team0 (unregistering): Port device team_slave_1 removed [ 281.848349][ T4912] Bluetooth: hci5: command tx timeout [ 281.857154][ T6858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.886220][ T6858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.909137][ T36] usb 2-1: USB disconnect, device number 9 [ 281.964524][ T67] team0 (unregistering): Port device team_slave_0 removed [ 282.468314][ T36] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 282.640386][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.640455][ T36] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.640502][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.794486][ T36] usb 2-1: config 0 descriptor?? [ 282.943071][ T6921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.340'. [ 283.131896][ T5600] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 283.540666][ T5600] usb 3-1: Using ep0 maxpacket: 32 [ 283.543933][ T5600] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 283.543966][ T5600] usb 3-1: config 0 has no interface number 0 [ 283.544098][ T5600] usb 3-1: config 0 interface 12 has no altsetting 0 [ 283.557833][ T5600] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 283.557886][ T5600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.565988][ T5600] usb 3-1: Product: syz [ 283.566265][ T5600] usb 3-1: Manufacturer: syz [ 283.566310][ T5600] usb 3-1: SerialNumber: syz [ 283.807749][ T5600] usb 3-1: config 0 descriptor?? [ 283.941454][ T4912] Bluetooth: hci5: command tx timeout [ 284.568544][ T5713] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 284.740625][ T5713] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.740672][ T5713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.740700][ T5713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.740797][ T5713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.743017][ T5713] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.743055][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.743086][ T5713] usb 5-1: Product: syz [ 284.743107][ T5713] usb 5-1: Manufacturer: syz [ 284.863222][ T5600] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 284.863379][ T5600] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 284.863411][ T5600] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 284.863591][ T5600] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 284.964329][ T5713] cdc_wdm 5-1:1.0: skipping garbage [ 284.964359][ T5713] cdc_wdm 5-1:1.0: skipping garbage [ 285.034791][ T5713] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 285.034832][ T5713] cdc_wdm 5-1:1.0: Unknown control protocol [ 285.102088][ T5713] usb 5-1: USB disconnect, device number 7 [ 285.189484][ T36] usbhid 2-1:0.0: can't add hid device: -71 [ 285.189635][ T36] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 285.380421][ T36] usb 2-1: USB disconnect, device number 10 [ 285.519660][ T5600] usb 3-1: USB disconnect, device number 5 [ 285.719046][ T5713] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 285.900504][ T5713] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.900541][ T5713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.900563][ T5713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.900617][ T5713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.904010][ T5713] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.904058][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.904080][ T5713] usb 5-1: Product: syz [ 285.904108][ T5713] usb 5-1: Manufacturer: syz [ 285.991977][ T5713] cdc_wdm 5-1:1.0: skipping garbage [ 285.992006][ T5713] cdc_wdm 5-1:1.0: skipping garbage [ 286.141789][ T5713] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 286.141871][ T5713] cdc_wdm 5-1:1.0: Unknown control protocol [ 286.145732][ T6963] process 'syz.2.353' launched './file2' with NULL argv: empty string added [ 288.372808][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 288.372974][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 288.373236][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 288.373256][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 288.373488][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 288.373508][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 288.373748][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 288.373795][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 288.374024][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 288.374044][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 288.374271][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 288.374299][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 288.374450][ T5600] usb 5-1: USB disconnect, device number 8 [ 288.374529][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 288.374548][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 288.374564][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 289.221657][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.228058][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.245605][ T6787] bridge_slave_0: entered allmulticast mode [ 289.268717][ T6787] bridge_slave_0: entered promiscuous mode [ 289.310477][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.310639][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.310939][ T6787] bridge_slave_1: entered allmulticast mode [ 289.315110][ T6787] bridge_slave_1: entered promiscuous mode [ 289.629967][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.667068][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.013082][ T6787] team0: Port device team_slave_0 added [ 290.034062][ T6787] team0: Port device team_slave_1 added [ 290.101614][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.101632][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.101654][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.104328][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.104346][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.104374][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.328370][ T37] audit: type=1326 audit(1777630977.876:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f26139adbc9 code=0x7ffc0000 [ 290.328431][ T37] audit: type=1326 audit(1777630977.916:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26139acdd9 code=0x7ffc0000 [ 290.328486][ T37] audit: type=1326 audit(1777630977.936:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26139acdd9 code=0x7ffc0000 [ 290.383210][ T37] audit: type=1326 audit(1777630977.976:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2613969b3b code=0x7ffc0000 [ 290.383438][ T37] audit: type=1326 audit(1777630977.976:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26139acdd9 code=0x7ffc0000 [ 290.383562][ T37] audit: type=1326 audit(1777630977.976:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f261396922c code=0x7ffc0000 [ 290.383686][ T37] audit: type=1326 audit(1777630977.976:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f261396928e code=0x7ffc0000 [ 290.383828][ T37] audit: type=1326 audit(1777630977.976:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26139aca6b code=0x7ffc0000 [ 290.390506][ T37] audit: type=1326 audit(1777630977.976:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26139acdd9 code=0x7ffc0000 [ 290.390674][ T37] audit: type=1326 audit(1777630977.976:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f26139acdd9 code=0x7ffc0000 [ 290.880012][ T6787] hsr_slave_0: entered promiscuous mode [ 290.934570][ T6787] hsr_slave_1: entered promiscuous mode [ 290.936942][ T6787] debugfs: 'hsr0' already exists in 'hsr' [ 290.951779][ T6787] Cannot create hsr debugfs directory [ 294.158360][ T6787] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 294.326846][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.367745][ T6787] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 294.414767][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.428053][ T6787] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 294.494395][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.496019][ T6787] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.731421][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.425594][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 296.072791][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.311953][ T6787] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.405273][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.407256][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.600828][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.600977][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.928410][ T5808] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 298.081208][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.081250][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.081276][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.081322][ T5808] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.081348][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.168652][ T5808] usb 3-1: config 0 descriptor?? [ 300.492681][ T5808] usbhid 3-1:0.0: can't add hid device: -71 [ 300.492833][ T5808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 300.534759][ T5808] usb 3-1: USB disconnect, device number 6 [ 300.558048][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.785146][ T6787] veth0_vlan: entered promiscuous mode [ 301.830919][ T6787] veth1_vlan: entered promiscuous mode [ 301.918877][ T6787] veth0_macvtap: entered promiscuous mode [ 301.942058][ T6787] veth1_macvtap: entered promiscuous mode [ 302.021738][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.027293][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.332009][ T2263] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.332604][ T2263] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.334490][ T2263] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.336369][ T2263] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.028947][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.067193][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.077878][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.112493][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.131527][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.198765][ T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.498945][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.498980][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.563570][ T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.274125][ T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.368284][ T4912] Bluetooth: hci2: command tx timeout [ 307.480334][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.480370][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.093824][ T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.718178][ T4912] Bluetooth: hci2: command tx timeout [ 310.618357][ T5732] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 310.772611][ T5732] usb 6-1: Using ep0 maxpacket: 32 [ 310.788749][ T5732] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.788787][ T5732] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.792293][ T5732] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 310.792327][ T5732] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 310.792349][ T5732] usb 6-1: Product: syz [ 310.792364][ T5732] usb 6-1: Manufacturer: syz [ 310.968886][ T5732] hub 6-1:4.0: USB hub found [ 311.102963][ T5732] hub 6-1:4.0: 2 ports detected [ 311.520253][ T5732] hub 6-1:4.0: set hub depth failed [ 311.653268][ T36] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 311.741966][ T69] bridge_slave_1: left allmulticast mode [ 311.742009][ T69] bridge_slave_1: left promiscuous mode [ 311.742309][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.780406][ T4912] Bluetooth: hci2: command tx timeout [ 311.781301][ T5732] usb 6-1: Failed to suspend device, error -71 [ 311.785895][ T5732] usb 6-1: USB disconnect, device number 2 [ 311.996591][ T69] bridge_slave_0: left allmulticast mode [ 311.996632][ T69] bridge_slave_0: left promiscuous mode [ 312.027009][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.867479][ T4912] Bluetooth: hci2: command tx timeout [ 314.686179][ T5808] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 314.868019][ T5808] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 314.868061][ T5808] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 314.868091][ T5808] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.902312][ T5808] usb 6-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 314.902347][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.970663][ T5808] usb 6-1: config 0 descriptor?? [ 314.975369][ T7651] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 315.384820][ T69] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 315.673162][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.673216][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.695645][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.695699][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.695725][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.695760][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.695788][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.695815][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.695840][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.695867][ T5808] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 315.826984][ T5808] lg-g15 0003:046D:0A07.0001: hidraw0: USB HID v0.07 Device [HID 046d:0a07] on usb-dummy_hcd.5-1/input0 [ 315.872112][ T5808] usb 6-1: USB disconnect, device number 3 [ 316.164387][ T7683] fido_id[7683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 316.351026][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.774870][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.872800][ T69] bond0 (unregistering): Released all slaves [ 317.037338][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 317.367629][ T5808] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 317.539667][ T5808] usb 6-1: Using ep0 maxpacket: 16 [ 317.542893][ T5808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.542954][ T5808] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 317.544474][ T5808] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.544505][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 317.544527][ T5808] usb 6-1: SerialNumber: syz [ 317.923176][ T5606] usb 6-1: USB disconnect, device number 4 [ 320.563212][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 320.761659][ T69] hsr_slave_0: left promiscuous mode [ 320.819607][ T69] hsr_slave_1: left promiscuous mode [ 320.820823][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.820853][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.890212][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.890247][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.021721][ T69] veth1_macvtap: left promiscuous mode [ 321.021846][ T69] veth0_macvtap: left promiscuous mode [ 321.022104][ T69] veth1_vlan: left promiscuous mode [ 321.022282][ T69] veth0_vlan: left promiscuous mode [ 323.286815][ T69] team0 (unregistering): Port device team_slave_1 removed [ 323.403665][ T69] team0 (unregistering): Port device team_slave_0 removed [ 324.281386][ T7422] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.281544][ T7422] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.281857][ T7422] bridge_slave_0: entered allmulticast mode [ 324.297542][ T7422] bridge_slave_0: entered promiscuous mode [ 324.387232][ T7422] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.387379][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.387688][ T7422] bridge_slave_1: entered allmulticast mode [ 324.488414][ T7422] bridge_slave_1: entered promiscuous mode [ 324.581177][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.581254][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.873498][ T7422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.895935][ T7422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.264426][ T7931] netlink: 40 bytes leftover after parsing attributes in process `syz.5.758'. [ 325.337312][ T7422] team0: Port device team_slave_0 added [ 325.445292][ T7422] team0: Port device team_slave_1 added [ 326.239661][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.239684][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.239712][ T7422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.298530][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.298551][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.298581][ T7422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.648679][ T7422] hsr_slave_0: entered promiscuous mode [ 326.665769][ T7422] hsr_slave_1: entered promiscuous mode [ 326.676423][ T7422] debugfs: 'hsr0' already exists in 'hsr' [ 326.676454][ T7422] Cannot create hsr debugfs directory [ 327.418645][ T5713] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 327.608372][ T5713] usb 6-1: Using ep0 maxpacket: 32 [ 327.615773][ T5713] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 327.615807][ T5713] usb 6-1: config 0 has no interface number 0 [ 327.615856][ T5713] usb 6-1: config 0 interface 12 has no altsetting 0 [ 327.659024][ T5713] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 327.659052][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.659067][ T5713] usb 6-1: Product: syz [ 327.659078][ T5713] usb 6-1: Manufacturer: syz [ 327.659101][ T5713] usb 6-1: SerialNumber: syz [ 327.767187][ T5713] usb 6-1: config 0 descriptor?? [ 328.545917][ T5713] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 328.545977][ T5713] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 328.545995][ T5713] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 328.546090][ T5713] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 328.607548][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 328.701043][ T5713] usb 6-1: USB disconnect, device number 5 [ 331.154309][ T7422] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.296863][ T7422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.320669][ T7422] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 331.409784][ T7422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.411014][ T7422] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.697314][ T7422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.717387][ T7422] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.814937][ T7422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.720708][ T7422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.735855][ T36] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 332.868626][ T7422] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.921830][ T36] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.921853][ T36] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.921867][ T36] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.921903][ T36] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.979540][ T36] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.979563][ T36] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.979578][ T36] usb 6-1: Product: syz [ 332.979589][ T36] usb 6-1: Manufacturer: syz [ 333.057920][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.058069][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.166070][ T36] cdc_wdm 6-1:1.0: skipping garbage [ 333.166086][ T36] cdc_wdm 6-1:1.0: skipping garbage [ 333.230863][ T36] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 333.230887][ T36] cdc_wdm 6-1:1.0: Unknown control protocol [ 333.305030][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.305249][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.335356][ T36] usb 6-1: USB disconnect, device number 6 [ 333.635088][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 333.878337][ T5606] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 334.043659][ T5606] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.043698][ T5606] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.043718][ T5606] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.043805][ T5606] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.048449][ T5606] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.048487][ T5606] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.048511][ T5606] usb 6-1: Product: syz [ 334.048526][ T5606] usb 6-1: Manufacturer: syz [ 334.172651][ T5606] cdc_wdm 6-1:1.0: skipping garbage [ 334.172678][ T5606] cdc_wdm 6-1:1.0: skipping garbage [ 334.202486][ T5606] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 334.202513][ T5606] cdc_wdm 6-1:1.0: Unknown control protocol [ 336.260611][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.260644][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.260910][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.260931][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.261200][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.261220][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.261477][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.261500][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.261746][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.261766][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.262007][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.262030][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.262283][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.262304][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.262556][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.262576][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.262822][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.262842][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.263094][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.263116][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.537958][ T8156] syzkaller0: entered promiscuous mode [ 336.537988][ T8156] syzkaller0: entered allmulticast mode [ 336.621369][ T5856] usb 6-1: USB disconnect, device number 7 [ 336.621462][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 337.588322][ T5790] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 337.653620][ T7422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.750308][ T5790] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.751566][ T5790] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 337.751594][ T5790] usb 6-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 337.751614][ T5790] usb 6-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config [ 337.751635][ T5790] usb 6-1: config 63 has no interface number 0 [ 337.751689][ T5790] usb 6-1: config 63 interface 66 has no altsetting 0 [ 337.754155][ T5790] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 337.754185][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.754209][ T5790] usb 6-1: Product: syz [ 337.754235][ T5790] usb 6-1: Manufacturer: syz [ 337.754252][ T5790] usb 6-1: SerialNumber: syz [ 339.442172][ T7422] veth0_vlan: entered promiscuous mode [ 339.570333][ T7422] veth1_vlan: entered promiscuous mode [ 340.073332][ T5790] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 340.073449][ T5790] uvcvideo 6-1:63.66: No valid video chain found. [ 340.095001][ T5790] usb 6-1: USB disconnect, device number 8 [ 340.907227][ T7422] veth0_macvtap: entered promiscuous mode [ 340.967615][ T7422] veth1_macvtap: entered promiscuous mode [ 340.994789][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.008964][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.427556][ T1017] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.450737][ T1017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.451079][ T1017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.451335][ T1017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.643327][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.643356][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.009384][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.009407][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.438267][ T5606] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 345.641804][ T5606] usb 6-1: unable to get BOS descriptor or descriptor too short [ 345.647546][ T5606] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 345.647589][ T5606] usb 6-1: can't read configurations, error -71 [ 346.608244][ T5808] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 346.760446][ T5606] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 346.829775][ T5808] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 346.829812][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.829832][ T5808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 346.829895][ T5808] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.831802][ T5808] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 346.831836][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 346.831868][ T5808] usb 3-1: Product: syz [ 346.831882][ T5808] usb 3-1: Manufacturer: syz [ 346.929100][ T5606] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.929147][ T5606] usb 6-1: config 0 has no interfaces? [ 346.929182][ T5606] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 346.929209][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.971975][ T5808] cdc_wdm 3-1:1.0: skipping garbage [ 346.972051][ T5808] cdc_wdm 3-1:1.0: skipping garbage [ 346.985922][ T5606] usb 6-1: config 0 descriptor?? [ 347.026574][ T5808] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 347.026620][ T5808] cdc_wdm 3-1:1.0: Unknown control protocol [ 347.146652][ T5606] usb 3-1: USB disconnect, device number 7 [ 347.353364][ T5790] usb 6-1: USB disconnect, device number 10 [ 347.688620][ T5606] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 347.840860][ T5606] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.840894][ T5606] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.840916][ T5606] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.840971][ T5606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.861127][ T5606] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.861163][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.861186][ T5606] usb 3-1: Product: syz [ 347.861202][ T5606] usb 3-1: Manufacturer: syz [ 347.993262][ T5606] cdc_wdm 3-1:1.0: skipping garbage [ 347.993286][ T5606] cdc_wdm 3-1:1.0: skipping garbage [ 347.997197][ T5606] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 347.997222][ T5606] cdc_wdm 3-1:1.0: Unknown control protocol [ 348.906410][ C1] wdm_int_callback: 967 callbacks suppressed [ 348.906489][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.906580][ C1] wdm_int_callback: 967 callbacks suppressed [ 348.906616][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.910919][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.910946][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.911186][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.911207][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.911469][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.911491][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.911732][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.911752][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.911982][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.912001][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.912227][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.912244][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.912485][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.912504][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.912731][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.912751][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.912981][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.913005][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 349.098881][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 349.100457][ T5606] usb 3-1: USB disconnect, device number 8 [ 349.139754][ T5732] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 349.294880][ T5732] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.294918][ T5732] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.294939][ T5732] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 349.294995][ T5732] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.323691][ T5732] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.323743][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.323765][ T5732] usb 6-1: Product: syz [ 349.323780][ T5732] usb 6-1: Manufacturer: syz [ 349.437550][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 349.437575][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 349.493723][ T5732] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 349.493753][ T5732] cdc_wdm 6-1:1.0: Unknown control protocol [ 349.665231][ T5732] usb 6-1: USB disconnect, device number 11 [ 350.279691][ T5732] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 350.300393][ T5600] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 350.431283][ T5732] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.431318][ T5732] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.431340][ T5732] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.431394][ T5732] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.433792][ T5732] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.433824][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.433847][ T5732] usb 6-1: Product: syz [ 350.433863][ T5732] usb 6-1: Manufacturer: syz [ 350.522485][ T5600] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.522517][ T5600] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.522537][ T5600] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.522591][ T5600] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.530571][ T5600] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.530604][ T5600] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.530626][ T5600] usb 7-1: Product: syz [ 350.530642][ T5600] usb 7-1: Manufacturer: syz [ 350.616830][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 350.616854][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 350.691039][ T5732] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 350.691126][ T5732] cdc_wdm 6-1:1.0: Unknown control protocol [ 350.730463][ T5600] cdc_wdm 7-1:1.0: skipping garbage [ 350.730490][ T5600] cdc_wdm 7-1:1.0: skipping garbage [ 350.733817][ T5600] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 350.733841][ T5600] cdc_wdm 7-1:1.0: Unknown control protocol [ 350.934884][ T5732] usb 7-1: USB disconnect, device number 2 [ 351.418277][ T5732] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 351.472785][ T5600] usb 6-1: USB disconnect, device number 12 [ 351.472878][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 351.571566][ T5732] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 351.571603][ T5732] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.571624][ T5732] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 351.571678][ T5732] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.576798][ T5732] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 351.576834][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 351.576857][ T5732] usb 7-1: Product: syz [ 351.576873][ T5732] usb 7-1: Manufacturer: syz [ 351.744732][ T5732] cdc_wdm 7-1:1.0: skipping garbage [ 351.744785][ T5732] cdc_wdm 7-1:1.0: skipping garbage [ 351.793536][ T5732] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 351.793586][ T5732] cdc_wdm 7-1:1.0: Unknown control protocol [ 352.878385][ T5732] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 353.031237][ T5732] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.031278][ T5732] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.031299][ T5732] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.031355][ T5732] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.034462][ T5732] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.034498][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.034522][ T5732] usb 6-1: Product: syz [ 353.034538][ T5732] usb 6-1: Manufacturer: syz [ 353.140984][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 353.141012][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 353.166914][ T5732] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 353.166939][ T5732] cdc_wdm 6-1:1.0: Unknown control protocol [ 353.358822][ T5732] usb 6-1: USB disconnect, device number 13 [ 353.427520][ T5923] udevd[5923]: setting mode of /dev/cdc-wdm1 to 020600 failed: No such file or directory [ 353.444628][ T5923] udevd[5923]: setting owner of /dev/cdc-wdm1 to uid=0, gid=0 failed: No such file or directory [ 353.841262][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 353.842340][ T5711] usb 7-1: USB disconnect, device number 3 [ 354.009606][ T5732] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 354.195823][ T5732] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 354.195860][ T5732] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.195880][ T5732] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 354.195933][ T5732] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.248917][ T5732] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.248953][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.248975][ T5732] usb 6-1: Product: syz [ 354.248992][ T5732] usb 6-1: Manufacturer: syz [ 354.305028][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 354.305068][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 354.319404][ T5732] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 354.319430][ T5732] cdc_wdm 6-1:1.0: Unknown control protocol [ 355.227144][ C0] wdm_int_callback: 795 callbacks suppressed [ 355.227177][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.227198][ C0] wdm_int_callback: 795 callbacks suppressed [ 355.227215][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.227673][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.227688][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.238858][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.238888][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.239160][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.239174][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.239392][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.239405][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.239641][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.239666][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.239885][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.239898][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.240198][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.240213][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.240641][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.240714][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.241189][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 355.241264][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 355.554747][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 355.555964][ T10] usb 6-1: USB disconnect, device number 14 [ 357.059621][ T5732] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 357.233972][ T5732] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 357.234010][ T5732] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.234031][ T5732] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 357.234086][ T5732] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.237333][ T5732] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 357.237356][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 357.237371][ T5732] usb 6-1: Product: syz [ 357.237382][ T5732] usb 6-1: Manufacturer: syz [ 357.340536][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 357.340555][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 357.362450][ T5732] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 357.363065][ T5732] cdc_wdm 6-1:1.0: Unknown control protocol [ 357.558143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 357.560608][ T5732] usb 6-1: USB disconnect, device number 15 [ 358.078464][ T5732] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 358.233820][ T5732] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 358.233847][ T5732] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.233861][ T5732] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 358.233929][ T5732] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.237013][ T5732] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 358.237046][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 358.237067][ T5732] usb 6-1: Product: syz [ 358.237095][ T5732] usb 6-1: Manufacturer: syz [ 358.354199][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 358.354219][ T5732] cdc_wdm 6-1:1.0: skipping garbage [ 358.375255][ T5732] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 358.375273][ T5732] cdc_wdm 6-1:1.0: Unknown control protocol [ 359.335980][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 359.350228][ T5606] usb 6-1: USB disconnect, device number 16 [ 359.720598][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 360.229860][ T5732] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 360.434835][ T5732] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.434866][ T5732] usb 3-1: config 0 has no interface number 0 [ 360.441126][ T5732] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 360.441244][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.441301][ T5732] usb 3-1: Product: syz [ 360.441343][ T5732] usb 3-1: Manufacturer: syz [ 360.441389][ T5732] usb 3-1: SerialNumber: syz [ 360.522200][ T5732] usb 3-1: config 0 descriptor?? [ 360.546483][ T5732] usb 3-1: selecting invalid altsetting 1 [ 360.634098][ T5732] dvb_ttusb_budget: ttusb_init_controller: error [ 360.634128][ T5732] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 361.140711][ T5732] DVB: Unable to find symbol stv0299_attach() [ 361.330667][ T5732] DVB: Unable to find symbol tda8083_attach() [ 361.330693][ T5732] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 361.340358][ T5732] usb 3-1: USB disconnect, device number 9 [ 361.550756][ T5790] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 361.711386][ T5790] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.711422][ T5790] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.711443][ T5790] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.711575][ T5790] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.716236][ T5790] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.716270][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.716292][ T5790] usb 6-1: Product: syz [ 361.716308][ T5790] usb 6-1: Manufacturer: syz [ 362.037058][ T5790] cdc_wdm 6-1:1.0: skipping garbage [ 362.042306][ T5790] cdc_wdm 6-1:1.0: skipping garbage [ 362.103523][ T5790] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 362.103544][ T5790] cdc_wdm 6-1:1.0: Unknown control protocol [ 362.251498][ T5790] usb 6-1: USB disconnect, device number 17 [ 362.688332][ T5790] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 362.712554][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 362.842373][ T5790] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 362.842408][ T5790] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.842428][ T5790] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.842505][ T5790] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.844915][ T5790] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.844947][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.844970][ T5790] usb 6-1: Product: syz [ 362.844986][ T5790] usb 6-1: Manufacturer: syz [ 362.912214][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 362.912304][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.912363][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.912510][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.972776][ T5790] cdc_wdm 6-1:1.0: skipping garbage [ 362.972798][ T5790] cdc_wdm 6-1:1.0: skipping garbage [ 362.975423][ T5790] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 362.975443][ T5790] cdc_wdm 6-1:1.0: Unknown control protocol [ 363.009300][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.009324][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.009339][ T10] usb 3-1: Product: syz [ 363.009362][ T10] usb 3-1: Manufacturer: syz [ 363.128769][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 363.128798][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 363.136446][ T10] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 363.140314][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 363.310540][ T5790] usb 3-1: USB disconnect, device number 10 [ 363.617600][ C1] wdm_int_callback: 1136 callbacks suppressed [ 363.617628][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.617648][ C1] wdm_int_callback: 1136 callbacks suppressed [ 363.617665][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.623313][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.623323][ T5856] usb 6-1: USB disconnect, device number 18 [ 363.623345][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.623361][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 363.938249][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 364.120572][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 364.120616][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.120641][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 364.120679][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.124601][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.124638][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.124653][ T10] usb 3-1: Product: syz [ 364.124664][ T10] usb 3-1: Manufacturer: syz [ 364.283489][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 364.283508][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 364.379774][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 364.379803][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 366.297354][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 366.297392][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 366.297635][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 366.297655][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 366.297894][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 366.297913][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 366.298308][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 366.298330][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 366.298567][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 366.298588][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 366.298836][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 366.298856][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 366.299083][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 366.299102][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 366.299339][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 366.299359][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 366.300187][ T5856] usb 3-1: USB disconnect, device number 11 [ 366.300246][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 367.858315][ T5711] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 368.011490][ T5711] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.011531][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.011553][ T5711] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.011606][ T5711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.057422][ T5711] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.057520][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.057581][ T5711] usb 3-1: Product: syz [ 368.057626][ T5711] usb 3-1: Manufacturer: syz [ 368.189372][ T5711] cdc_wdm 3-1:1.0: skipping garbage [ 368.189390][ T5711] cdc_wdm 3-1:1.0: skipping garbage [ 368.212544][ T5711] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 368.212570][ T5711] cdc_wdm 3-1:1.0: Unknown control protocol [ 368.373561][ T5732] usb 3-1: USB disconnect, device number 12 [ 368.844755][ T5732] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 369.020735][ T5732] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.020768][ T5732] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.020787][ T5732] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.020840][ T5732] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.026268][ T5732] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.026303][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.026324][ T5732] usb 3-1: Product: syz [ 369.026340][ T5732] usb 3-1: Manufacturer: syz [ 369.238889][ T5732] cdc_wdm 3-1:1.0: skipping garbage [ 369.238911][ T5732] cdc_wdm 3-1:1.0: skipping garbage [ 369.280324][ T5732] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 369.280348][ T5732] cdc_wdm 3-1:1.0: Unknown control protocol [ 369.842460][ C0] wdm_int_callback: 4 callbacks suppressed [ 369.842486][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.842504][ C0] wdm_int_callback: 4 callbacks suppressed [ 369.842518][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 369.846186][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.846210][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 369.847667][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.847686][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 369.851799][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.851819][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 369.852662][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.852684][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 369.852912][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.852932][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 369.853152][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.853167][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 369.853852][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.853874][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 369.854403][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.854458][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 369.854856][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 369.854930][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 370.033450][ T5732] usb 3-1: USB disconnect, device number 13 [ 370.033501][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 371.502474][ T1321] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.014896][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.049610][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.055092][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.087280][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.096873][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.890194][ T1321] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.803142][ T1321] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.332682][ T4912] Bluetooth: hci4: command tx timeout [ 374.466812][ T1321] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.408320][ T4912] Bluetooth: hci4: command tx timeout [ 377.830316][ T1321] bridge_slave_1: left allmulticast mode [ 377.830359][ T1321] bridge_slave_1: left promiscuous mode [ 377.830670][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.038976][ T5732] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 378.044105][ T1321] bridge_slave_0: left allmulticast mode [ 378.044145][ T1321] bridge_slave_0: left promiscuous mode [ 378.044406][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.302252][ T5732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.302287][ T5732] usb 3-1: config 0 has no interfaces? [ 378.302322][ T5732] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 378.302347][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.344118][ T5732] usb 3-1: config 0 descriptor?? [ 378.490084][ T4912] Bluetooth: hci4: command tx timeout [ 378.591497][ T5856] usb 3-1: USB disconnect, device number 14 [ 380.568322][ T4912] Bluetooth: hci4: command tx timeout [ 380.611781][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.696858][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.924828][ T1321] bond0 (unregistering): Released all slaves [ 381.061295][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 381.428666][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.428801][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.429052][ T9184] bridge_slave_0: entered allmulticast mode [ 381.563265][ T9184] bridge_slave_0: entered promiscuous mode [ 381.651035][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.651166][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.651445][ T9184] bridge_slave_1: entered allmulticast mode [ 381.690209][ T9184] bridge_slave_1: entered promiscuous mode [ 382.711646][ T9184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.805827][ T9184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.159316][ T9184] team0: Port device team_slave_0 added [ 383.183025][ T9184] team0: Port device team_slave_1 added [ 384.281421][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 384.286441][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.286462][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.286492][ T9184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.344168][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.344187][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.344217][ T9184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.518424][ T1321] hsr_slave_0: left promiscuous mode [ 384.559532][ T1321] hsr_slave_1: left promiscuous mode [ 384.562072][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.562100][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.634739][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.634763][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.927341][ T1321] veth1_macvtap: left promiscuous mode [ 384.927454][ T1321] veth0_macvtap: left promiscuous mode [ 384.927713][ T1321] veth1_vlan: left promiscuous mode [ 384.927894][ T1321] veth0_vlan: left promiscuous mode [ 386.023295][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.023373][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.399791][ T1321] team0 (unregistering): Port device team_slave_1 removed [ 387.539446][ T1321] team0 (unregistering): Port device team_slave_0 removed [ 388.695211][ T9184] hsr_slave_0: entered promiscuous mode [ 388.703287][ T9184] hsr_slave_1: entered promiscuous mode [ 388.711211][ T9184] debugfs: 'hsr0' already exists in 'hsr' [ 388.711242][ T9184] Cannot create hsr debugfs directory [ 392.694450][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 393.523767][ T9184] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 393.649223][ T9184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.777009][ T9184] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 393.846784][ T9184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.848014][ T9184] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 393.999659][ T9184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.018342][ T9184] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 394.279760][ T9184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.421604][ T9184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.757165][ T9184] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.947011][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.947219][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.067892][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.068028][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.224083][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 398.593061][ T9184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.543214][ T9184] veth0_vlan: entered promiscuous mode [ 399.623325][ T9184] veth1_vlan: entered promiscuous mode [ 399.745223][ T9184] veth0_macvtap: entered promiscuous mode [ 399.770601][ T9184] veth1_macvtap: entered promiscuous mode [ 399.876751][ T9184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.935118][ T9184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.967380][ T5867] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.983107][ T5867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.985140][ T5867] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.985389][ T5867] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.077137][ T5807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.077162][ T5807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.362434][ T5807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.362459][ T5807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.178230][ T5856] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 402.308246][ T5856] usb 3-1: device descriptor read/64, error -71 [ 402.569059][ T5856] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 402.698228][ T5856] usb 3-1: device descriptor read/64, error -71 [ 402.875836][ T5856] usb usb3-port1: attempt power cycle [ 402.942980][T10207] fuse: Bad value for 'fd' [ 403.243136][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 403.246579][ T5856] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 403.247264][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 403.297090][ T5856] usb 3-1: device descriptor read/8, error -71 [ 403.300772][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 403.312509][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 403.313605][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 403.672817][ T5856] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 403.702577][ T5856] usb 3-1: device descriptor read/8, error -71 [ 403.808952][ T5856] usb usb3-port1: unable to enumerate USB device [ 405.540874][ T60] Bluetooth: hci5: command tx timeout [ 405.573897][ T5807] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.795733][ T4912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.823064][ T4912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.838922][ T4912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.870289][ T4912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.871238][ T4912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.378252][ T5711] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 406.520148][ T5711] usb 3-1: device descriptor read/64, error -71 [ 406.779417][ T5711] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 406.908236][ T5711] usb 3-1: device descriptor read/64, error -71 [ 406.911393][ T5807] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.020303][ T5711] usb usb3-port1: attempt power cycle [ 407.368327][ T5711] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 407.389047][ T5711] usb 3-1: device descriptor read/8, error -71 [ 407.445912][ T5807] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.608373][ T60] Bluetooth: hci5: command tx timeout [ 407.638304][ T5711] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 407.659140][ T5711] usb 3-1: device descriptor read/8, error -71 [ 407.825082][ T5711] usb usb3-port1: unable to enumerate USB device [ 407.940374][ T5807] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.010788][ T60] Bluetooth: hci1: command tx timeout [ 409.690003][ T60] Bluetooth: hci5: command tx timeout [ 410.088258][ T60] Bluetooth: hci1: command tx timeout [ 410.863965][ T5807] bridge_slave_1: left allmulticast mode [ 410.864010][ T5807] bridge_slave_1: left promiscuous mode [ 410.864458][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.037540][ T5807] bridge_slave_0: left allmulticast mode [ 411.037582][ T5807] bridge_slave_0: left promiscuous mode [ 411.037847][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.768410][ T60] Bluetooth: hci5: command tx timeout [ 412.168266][ T60] Bluetooth: hci1: command tx timeout [ 413.117382][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.238907][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.302074][ T5807] bond0 (unregistering): Released all slaves [ 413.611260][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.611369][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.611623][T10213] bridge_slave_0: entered allmulticast mode [ 413.652956][T10213] bridge_slave_0: entered promiscuous mode [ 413.685653][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.685744][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.685967][T10213] bridge_slave_1: entered allmulticast mode [ 413.737819][T10213] bridge_slave_1: entered promiscuous mode [ 413.898124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 414.240922][T10213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.248317][ T60] Bluetooth: hci1: command tx timeout [ 414.876837][T10213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.449807][T10213] team0: Port device team_slave_0 added [ 415.945133][T10213] team0: Port device team_slave_1 added [ 416.636955][T10213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.636979][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.637008][T10213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.882614][ T5807] hsr_slave_0: left promiscuous mode [ 416.933465][ T5807] hsr_slave_1: left promiscuous mode [ 416.934836][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.993782][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.110470][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.110514][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.384266][ T5807] veth1_macvtap: left promiscuous mode [ 417.384385][ T5807] veth0_macvtap: left promiscuous mode [ 417.384662][ T5807] veth1_vlan: left promiscuous mode [ 417.384844][ T5807] veth0_vlan: left promiscuous mode [ 419.169100][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 419.250629][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 419.814119][T10213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.814143][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.814172][T10213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.433616][T10213] hsr_slave_0: entered promiscuous mode [ 420.436761][T10213] hsr_slave_1: entered promiscuous mode [ 420.450998][T10213] debugfs: 'hsr0' already exists in 'hsr' [ 420.451027][T10213] Cannot create hsr debugfs directory [ 420.859324][ T5856] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 421.058331][ T5856] usb 3-1: Using ep0 maxpacket: 16 [ 421.060789][ T5856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.063632][ T5856] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.063664][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 421.063703][ T5856] usb 3-1: SerialNumber: syz [ 421.422103][ T819] usb 3-1: USB disconnect, device number 23 [ 421.703427][T10274] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.703561][T10274] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.703884][T10274] bridge_slave_0: entered allmulticast mode [ 421.706737][T10274] bridge_slave_0: entered promiscuous mode [ 421.803665][T10274] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.803822][T10274] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.804071][T10274] bridge_slave_1: entered allmulticast mode [ 421.896653][T10274] bridge_slave_1: entered promiscuous mode [ 422.118499][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'. [ 422.427410][T10274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.668500][T10274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.962019][T10274] team0: Port device team_slave_0 added [ 423.038314][T10274] team0: Port device team_slave_1 added [ 423.158304][ T5856] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 423.328442][ T5856] usb 3-1: Using ep0 maxpacket: 16 [ 423.330825][ T5856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.330882][ T5856] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 423.332848][ T5856] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.332879][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 423.332902][ T5856] usb 3-1: SerialNumber: syz [ 423.452255][ T5856] cdc_acm 3-1:1.0: Zero length descriptor references [ 423.452315][ T5856] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 423.669573][ T5600] usb 3-1: USB disconnect, device number 24 [ 423.954387][ T5807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.262628][T10274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.262650][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.262681][T10274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.525227][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 424.536600][T10274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.536618][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.536643][T10274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.875460][T10274] hsr_slave_0: entered promiscuous mode [ 424.877799][T10274] hsr_slave_1: entered promiscuous mode [ 424.893856][T10274] debugfs: 'hsr0' already exists in 'hsr' [ 424.893891][T10274] Cannot create hsr debugfs directory [ 424.978467][ T5600] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 425.129164][ T5600] usb 3-1: Using ep0 maxpacket: 16 [ 425.131957][ T5600] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.131997][ T5600] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 425.132028][ T5600] usb 3-1: config 0 interface 0 has no altsetting 0 [ 425.132067][ T5600] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 425.132094][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.208865][ T5600] usb 3-1: config 0 descriptor?? [ 425.574046][ T5807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.797218][ T5807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.064737][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 427.915019][ T5807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.008318][ T5600] usbhid 3-1:0.0: can't add hid device: -71 [ 428.008478][ T5600] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 428.119385][ T5600] usb 3-1: USB disconnect, device number 25 [ 429.051500][ T4912] Bluetooth: hci2: command 0x0406 tx timeout [ 429.752877][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 429.778654][ T5807] bridge_slave_1: left allmulticast mode [ 429.778699][ T5807] bridge_slave_1: left promiscuous mode [ 429.779016][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.876216][ T5807] bridge_slave_0: left allmulticast mode [ 429.876261][ T5807] bridge_slave_0: left promiscuous mode [ 429.876567][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.299122][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.379248][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.421512][ T5807] bond0 (unregistering): Released all slaves [ 431.497292][T10988] geneve2: entered promiscuous mode [ 431.497322][T10988] geneve2: entered allmulticast mode [ 431.551485][ T5257] 8021q: adding VLAN 0 to HW filter on device eth15 [ 432.120819][ T1017] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 432.167089][ T1017] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 432.175225][ T1017] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 432.176529][ T1017] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 432.605796][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 432.677901][T11091] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.695865][T11091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.695889][T11091] IPv6: NLM_F_CREATE should be set when creating new route [ 432.696076][T11091] IPv6: NLM_F_CREATE should be set when creating new route [ 432.696110][T11091] IPv6: NLM_F_CREATE should be set when creating new route [ 432.998252][ T5856] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 433.227272][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 433.227316][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.227360][ T5856] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 433.227386][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.255926][ T5856] usb 3-1: config 0 descriptor?? [ 433.779305][ T5856] hid_parser_main: 470 callbacks suppressed [ 433.779348][ T5856] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 433.779388][ T5856] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 433.779416][ T5856] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 433.779443][ T5856] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 433.779469][ T5856] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 433.782263][ T5856] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 433.877841][ T5856] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 433.968787][T11091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.969517][T11091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.003828][T11091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2110'. [ 434.060394][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 434.552046][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 434.755094][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.757155][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 434.787458][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.051818][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.072680][ T5257] 8021q: adding VLAN 0 to HW filter on device eth16 [ 435.073202][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.279740][ T5807] hsr_slave_0: left promiscuous mode [ 435.368189][ T5807] hsr_slave_1: left promiscuous mode [ 435.369568][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.369601][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.421212][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.421248][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.536421][ T5807] veth1_macvtap: left promiscuous mode [ 435.536566][ T5807] veth0_macvtap: left promiscuous mode [ 435.536898][ T5807] veth1_vlan: left promiscuous mode [ 435.537075][ T5807] veth0_vlan: left promiscuous mode [ 435.566949][ T5713] usb 3-1: USB disconnect, device number 26 [ 436.178302][ T5713] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 436.399896][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 436.406660][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.406693][ T5713] usb 3-1: config 0 has no interfaces? [ 436.406731][ T5713] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 436.406750][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.458687][ T5713] usb 3-1: config 0 descriptor?? [ 436.673819][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.674398][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.955162][ T819] usb 3-1: USB disconnect, device number 27 [ 437.280203][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 437.340411][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 437.655971][T11255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.948700][ T819] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 438.102677][ T819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.102718][ T819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.102759][ T819] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 438.102784][ T819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.153404][ T819] usb 3-1: config 0 descriptor?? [ 438.804658][ T819] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 438.804693][ T819] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 438.804716][ T819] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 438.804738][ T819] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 438.804759][ T819] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 438.805645][ T819] elan 0003:04F3:0755.0003: failed to start in urb: -90 [ 438.897342][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.934156][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.937421][T11255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2182'. [ 438.943276][T11255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2182'. [ 439.033002][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 439.035619][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 439.246621][ T819] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 439.755003][ T5711] usb 3-1: USB disconnect, device number 28 [ 440.813529][T10274] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 440.945623][T10274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.967908][T10274] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 441.236616][T10274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.241980][T10274] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 441.366538][T10274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.466124][T10274] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 441.492880][T10274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.808246][ T819] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 441.960866][ T819] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 441.960899][ T819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.960925][ T819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 441.960978][ T819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.963163][ T819] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 441.963200][ T819] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 441.963228][ T819] usb 3-1: Product: syz [ 441.963247][ T819] usb 3-1: Manufacturer: syz [ 442.070517][T10213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.076179][ T819] cdc_wdm 3-1:1.0: skipping garbage [ 442.076204][ T819] cdc_wdm 3-1:1.0: skipping garbage [ 442.104741][ T819] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 442.104768][ T819] cdc_wdm 3-1:1.0: Unknown control protocol [ 442.195844][T10213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.258884][T10213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.267969][ T5606] usb 3-1: USB disconnect, device number 29 [ 442.397110][T10213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.415477][T10213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.456806][T10213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.468414][T10213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.523161][T10213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.716068][T10274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.793421][ T5606] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 442.866160][T10274] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.933097][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.933343][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.959765][ T5606] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.959799][ T5606] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.959821][ T5606] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.959884][ T5606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.009618][ T5606] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 443.009658][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 443.009680][ T5606] usb 3-1: Product: syz [ 443.009695][ T5606] usb 3-1: Manufacturer: syz [ 443.071093][ T5606] cdc_wdm 3-1:1.0: skipping garbage [ 443.071122][ T5606] cdc_wdm 3-1:1.0: skipping garbage [ 443.076381][ T5606] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 443.076407][ T5606] cdc_wdm 3-1:1.0: Unknown control protocol [ 443.175018][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.175307][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.479368][T10213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.747589][T10213] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.776426][ C0] wdm_int_callback: 495 callbacks suppressed [ 443.776459][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.776479][ C0] wdm_int_callback: 495 callbacks suppressed [ 443.776495][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.776743][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.776764][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.778556][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.778580][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.780158][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.780182][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.780423][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.780444][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.780847][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.780902][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.781365][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.781407][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.781772][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.781831][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.782326][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.782354][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.782753][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 443.782793][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 443.971838][ T36] usb 3-1: USB disconnect, device number 30 [ 443.971945][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 444.045818][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.045954][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.100846][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.103272][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.968834][T10274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.438541][T10213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.755218][T10213] veth0_vlan: entered promiscuous mode [ 446.810841][T10213] veth1_vlan: entered promiscuous mode [ 446.977775][T10213] veth0_macvtap: entered promiscuous mode [ 447.058895][T10213] veth1_macvtap: entered promiscuous mode [ 447.325876][T10213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.419221][T10213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.445269][T10274] veth0_vlan: entered promiscuous mode [ 447.454692][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.454772][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.540774][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.595611][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.606254][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.678671][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.683342][T10274] veth1_vlan: entered promiscuous mode [ 448.152558][T10274] veth0_macvtap: entered promiscuous mode [ 448.315069][T10274] veth1_macvtap: entered promiscuous mode [ 448.826374][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.826400][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.922916][T10274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.985103][T10274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.204125][ T5866] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.205911][ T5866] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.205964][ T5866] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.206005][ T5866] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.293031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.293054][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.369449][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.369476][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.985714][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.985742][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.638322][ T5790] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 452.821637][ T5790] usb 1-1: Using ep0 maxpacket: 16 [ 452.845501][ T5790] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.845543][ T5790] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 452.845574][ T5790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 452.845613][ T5790] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 452.845639][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.939142][ T5732] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 452.975958][ T5790] usb 1-1: config 0 descriptor?? [ 453.092995][ T5732] usb 9-1: unable to get BOS descriptor or descriptor too short [ 453.144756][ T5732] usb 9-1: config 63 has an invalid interface number: 66 but max is 0 [ 453.144866][ T5732] usb 9-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 453.144893][ T5732] usb 9-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config [ 453.144916][ T5732] usb 9-1: config 63 has no interface number 0 [ 453.144952][ T5732] usb 9-1: config 63 interface 66 has no altsetting 0 [ 453.220655][ T5732] usb 9-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 453.220917][ T5732] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.220956][ T5732] usb 9-1: Product: syz [ 453.220973][ T5732] usb 9-1: Manufacturer: syz [ 453.220990][ T5732] usb 9-1: SerialNumber: syz [ 453.577910][ T4912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 453.622658][ T4912] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.624220][ T4912] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.649427][ T4912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 453.661924][ T4912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.073754][T11691] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 454.542220][ T5790] usbhid 1-1:0.0: can't add hid device: -71 [ 454.542420][ T5790] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 454.794571][ T5790] usb 1-1: USB disconnect, device number 4 [ 455.108595][ T5732] uvcvideo 9-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 455.108693][ T5732] uvcvideo 9-1:63.66: No valid video chain found. [ 455.132342][ T5732] usb 9-1: USB disconnect, device number 2 [ 455.928259][ T60] Bluetooth: hci4: command tx timeout [ 457.079588][ T1242] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 457.261560][ T1242] usb 1-1: Using ep0 maxpacket: 16 [ 457.266259][ T1242] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.266298][ T1242] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 457.266331][ T1242] usb 1-1: config 0 interface 0 has no altsetting 0 [ 457.266370][ T1242] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 457.266396][ T1242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.369862][ T1242] usb 1-1: config 0 descriptor?? [ 458.008264][ T60] Bluetooth: hci4: command tx timeout [ 458.148749][T11764] [ 458.148769][T11764] ============================================ [ 458.148784][T11764] WARNING: possible recursive locking detected [ 458.148813][T11764] syzkaller #0 Not tainted [ 458.148834][T11764] -------------------------------------------- [ 458.148852][T11764] syz.0.2374/11764 is trying to acquire lock: [ 458.148869][T11764] ffffffff8e950268 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf10 [ 458.148945][T11764] [ 458.148945][T11764] but task is already holding lock: [ 458.148952][T11764] ffffffff8e950268 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf10 [ 458.149000][T11764] [ 458.149000][T11764] other info that might help us debug this: [ 458.149007][T11764] Possible unsafe locking scenario: [ 458.149007][T11764] [ 458.149020][T11764] CPU0 [ 458.149030][T11764] ---- [ 458.149040][T11764] lock(qp_broker_list.mutex); [ 458.149060][T11764] lock(qp_broker_list.mutex); [ 458.149079][T11764] [ 458.149079][T11764] *** DEADLOCK *** [ 458.149079][T11764] [ 458.149089][T11764] May be due to missing lo[ 458.149089][T11764] May be due to missing lock nesting notation [ 458.149089][T11764] [ 458.149101][T11764] 1 lock held by syz.0.2374/11764: [ 458.149118][T11764] #0: ffffffff8e950268 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf10 [ 458.149171][T11764] [ 458.149171][T11764] stack backtrace: [ 458.149229][T11764] CPU: 0 UID: 0 PID: 11764 Comm: syz.0.2374 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 458.149260][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 458.149283][T11764] Call Trace: [ 458.149302][T11764] [ 458.149315][T11764] dump_stack_lvl+0xe8/0x150 [ 458.149354][T11764] print_deadlock_bug+0x279/0x290 [ 458.149397][T11764] __lock_acquire+0x253f/0x2cf0 [ 458.149428][T11764] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.149458][T11764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 458.149482][T11764] ? stack_depot_save_flags+0x3f3/0x810 [ 458.149526][T11764] ? kasan_save_track+0x4f/0x80 [ 458.149551][T11764] ? kasan_save_track+0x3e/0x80 [ 458.149570][T11764] ? kasan_save_free_info+0x46/0x50 [ 458.149598][T11764] ? __kasan_slab_free+0x5c/0x80 [ 458.149621][T11764] ? vmci_qp_broker_detach+0x117/0xf10 [ 458.149640][T11764] lock_acquire+0x106/0x350 [ 458.149668][T11764] ? vmci_qp_broker_detach+0x117/0xf10 [ 458.149692][T11764] ? vmci_qp_broker_detach+0x117/0xf10 [ 458.149713][T11764] ? vmci_qp_broker_detach+0x117/0xf10 [ 458.149733][T11764] mutex_lock_nested+0x5a/0x1d0 [ 458.149761][T11764] ? vmci_qp_broker_detach+0x117/0xf10 [ 458.149785][T11764] vmci_qp_broker_detach+0x117/0xf10 [ 458.149814][T11764] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 458.149835][T11764] ? kasan_quarantine_put+0xbb/0x1f0 [ 458.149855][T11764] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.149877][T11764] ? kfree+0x1c5/0x6c0 [ 458.149897][T11764] ? vmci_ctx_put+0x5ef/0xc40 [ 458.149920][T11764] ? vmci_ctx_put+0x141/0xc40 [ 458.149947][T11764] vmci_ctx_put+0x64e/0xc40 [ 458.149972][T11764] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 458.149995][T11764] ? vmci_ctx_put+0x141/0xc40 [ 458.150022][T11764] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 458.150053][T11764] ? __pfx_vmci_ctx_put+0x10/0x10 [ 458.150080][T11764] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 458.150116][T11764] ? rt_spin_unlock+0x160/0x200 [ 458.150146][T11764] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 458.150179][T11764] vmci_datagram_dispatch+0x450/0xc60 [ 458.150208][T11764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 458.150241][T11764] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 458.150271][T11764] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 458.150305][T11764] vmci_qp_broker_detach+0x8d4/0xf10 [ 458.150341][T11764] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 458.150362][T11764] ? kasan_quarantine_put+0xbb/0x1f0 [ 458.150385][T11764] ? kfree+0x1c5/0x6c0 [ 458.150405][T11764] ? vmci_ctx_put+0x5ef/0xc40 [ 458.150432][T11764] vmci_ctx_put+0x64e/0xc40 [ 458.150458][T11764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 458.150482][T11764] ? vmci_ctx_put+0x141/0xc40 [ 458.150510][T11764] ? __pfx_vmci_ctx_put+0x10/0x10 [ 458.150544][T11764] vmci_host_close+0x9b/0x160 [ 458.150577][T11764] ? __pfx_vmci_host_close+0x10/0x10 [ 458.150611][T11764] __fput+0x461/0xa70 [ 458.150649][T11764] task_work_run+0x1d9/0x270 [ 458.150684][T11764] ? __pfx_task_work_run+0x10/0x10 [ 458.150717][T11764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.150742][T11764] exit_to_user_mode_loop+0xed/0x480 [ 458.150772][T11764] ? rcu_is_watching+0x15/0xb0 [ 458.150806][T11764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.150829][T11764] do_syscall_64+0x33e/0xf80 [ 458.150852][T11764] ? clear_bhb_loop+0x40/0x90 [ 458.150876][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.150904][T11764] RIP: 0033:0x7f752e82cdd9 [ 458.150939][T11764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.150962][T11764] RSP: 002b:00007f752ca44028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 458.150997][T11764] RAX: 0000000000000000 RBX: 00007f752eaa6180 RCX: 00007f752e82cdd9 [ 458.151013][T11764] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 458.151027][T11764] RBP: 00007f752e8c2d69 R08: 0000000000000000 R09: 0000000000000000 [ 458.151041][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.151054][T11764] R13: 00007f752eaa6218 R14: 00007f752eaa6180 R15: 00007ffff3c7de68 [ 458.151079][T11764] [ 458.260304][T11764] Oops: general protection fault, probably for non-canonical address 0xdffffc000000015b: 0000 [#1] SMP KASAN PTI [ 458.260353][T11764] KASAN: null-ptr-deref in range [0x0000000000000ad8-0x0000000000000adf] [ 458.260421][T11764] CPU: 1 UID: 0 PID: 11764 Comm: syz.0.2374 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 458.260477][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 458.260492][T11764] RIP: 0010:do_raw_spin_lock+0x73/0x2f0 [ 458.260563][T11764] Code: c7 44 24 30 30 f6 a0 81 4c 8d 64 24 20 49 c1 ec 03 48 b8 f1 f1 f1 f1 f8 f3 f3 f3 49 89 04 14 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 f3 01 00 00 41 8b 06 3d ad 4e ad de 0f 85 [ 458.260619][T11764] RSP: 0018:ffffc9000643f300 EFLAGS: 00010003 [ 458.260642][T11764] RAX: 000000000000015b RBX: 0000000000000ad8 RCX: 0000000080000003 [ 458.260658][T11764] RDX: dffffc0000000000 RSI: ffffffff8ba74cc0 RDI: 0000000000000ad8 [ 458.260696][T11764] RBP: ffffc9000643f3c0 R08: 0000000000000001 R09: 0000000000000000 [ 458.260739][T11764] R10: dffffc0000000000 R11: fffffbfff1f11b7f R12: 1ffff92000c87e64 [ 458.260778][T11764] R13: ffffc9000643f4c0 R14: 0000000000000adc R15: 0000000000000ad8 [ 458.260793][T11764] FS: 00007f752ca446c0(0000) GS:ffff88812627a000(0000) knlGS:0000000000000000 [ 458.260821][T11764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.260875][T11764] CR2: 0000200000190030 CR3: 0000000038030000 CR4: 00000000003526f0 [ 458.260925][T11764] Call Trace: [ 458.260935][T11764] [ 458.260945][T11764] ? lock_acquire+0x5f/0x350 [ 458.261022][T11764] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 458.261054][T11764] remove_waiter+0x138/0xb10 [ 458.261083][T11764] ? rcu_is_watching+0x15/0xb0 [ 458.261153][T11764] ? rt_mutex_slowlock+0x1fd/0x780 [ 458.261240][T11764] rt_mutex_slowlock+0x72d/0x780 [ 458.261281][T11764] ? rt_mutex_slowlock+0x1fd/0x780 [ 458.261373][T11764] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 458.261420][T11764] ? lock_acquire+0x221/0x350 [ 458.261502][T11764] ? vmci_qp_broker_detach+0x117/0xf10 [ 458.261545][T11764] mutex_lock_nested+0x168/0x1d0 [ 458.261591][T11764] vmci_qp_broker_detach+0x117/0xf10 [ 458.261668][T11764] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 458.261697][T11764] ? kasan_quarantine_put+0xbb/0x1f0 [ 458.261728][T11764] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.261794][T11764] ? kfree+0x1c5/0x6c0 [ 458.261835][T11764] ? vmci_ctx_put+0x5ef/0xc40 [ 458.261862][T11764] ? vmci_ctx_put+0x141/0xc40 [ 458.261926][T11764] vmci_ctx_put+0x64e/0xc40 [ 458.261988][T11764] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 458.262012][T11764] ? vmci_ctx_put+0x141/0xc40 [ 458.262068][T11764] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 458.262142][T11764] ? __pfx_vmci_ctx_put+0x10/0x10 [ 458.262170][T11764] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 458.262262][T11764] ? rt_spin_unlock+0x160/0x200 [ 458.262308][T11764] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 458.262376][T11764] vmci_datagram_dispatch+0x450/0xc60 [ 458.262449][T11764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 458.262474][T11764] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 458.262540][T11764] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 458.262617][T11764] vmci_qp_broker_detach+0x8d4/0xf10 [ 458.262674][T11764] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 458.262745][T11764] ? kasan_quarantine_put+0xbb/0x1f0 [ 458.262770][T11764] ? kfree+0x1c5/0x6c0 [ 458.262805][T11764] ? vmci_ctx_put+0x5ef/0xc40 [ 458.262882][T11764] vmci_ctx_put+0x64e/0xc40 [ 458.262922][T11764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 458.262953][T11764] ? vmci_ctx_put+0x141/0xc40 [ 458.263029][T11764] ? __pfx_vmci_ctx_put+0x10/0x10 [ 458.263086][T11764] vmci_host_close+0x9b/0x160 [ 458.263159][T11764] ? __pfx_vmci_host_close+0x10/0x10 [ 458.263229][T11764] __fput+0x461/0xa70 [ 458.263318][T11764] task_work_run+0x1d9/0x270 [ 458.263388][T11764] ? __pfx_task_work_run+0x10/0x10 [ 458.263444][T11764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.263511][T11764] exit_to_user_mode_loop+0xed/0x480 [ 458.263554][T11764] ? rcu_is_watching+0x15/0xb0 [ 458.263626][T11764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.263691][T11764] do_syscall_64+0x33e/0xf80 [ 458.263716][T11764] ? clear_bhb_loop+0x40/0x90 [ 458.263763][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.263828][T11764] RIP: 0033:0x7f752e82cdd9 [ 458.263857][T11764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.263877][T11764] RSP: 002b:00007f752ca44028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 458.263944][T11764] RAX: 0000000000000000 RBX: 00007f752eaa6180 RCX: 00007f752e82cdd9 [ 458.264005][T11764] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 458.264020][T11764] RBP: 00007f752e8c2d69 R08: 0000000000000000 R09: 0000000000000000 [ 458.264035][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.264063][T11764] R13: 00007f752eaa6218 R14: 00007f752eaa6180 R15: 00007ffff3c7de68 [ 458.264149][T11764] [ 458.264169][T11764] Modules linked in: [ 458.264192][T11764] ---[ end trace 0000000000000000 ]--- [ 458.264226][T11764] RIP: 0010:do_raw_spin_lock+0x73/0x2f0 [ 458.264316][T11764] Code: c7 44 24 30 30 f6 a0 81 4c 8d 64 24 20 49 c1 ec 03 48 b8 f1 f1 f1 f1 f8 f3 f3 f3 49 89 04 14 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 f3 01 00 00 41 8b 06 3d ad 4e ad de 0f 85 [ 458.264336][T11764] RSP: 0018:ffffc9000643f300 EFLAGS: 00010003 [ 458.264363][T11764] RAX: 000000000000015b RBX: 0000000000000ad8 RCX: 0000000080000003 [ 458.264400][T11764] RDX: dffffc0000000000 RSI: ffffffff8ba74cc0 RDI: 0000000000000ad8 [ 458.264450][T11764] RBP: ffffc9000643f3c0 R08: 0000000000000001 R09: 0000000000000000 [ 458.264470][T11764] R10: dffffc0000000000 R11: fffffbfff1f11b7f R12: 1ffff92000c87e64 [ 458.264488][T11764] R13: ffffc9000643f4c0 R14: 0000000000000adc R15: 0000000000000ad8 [ 458.264504][T11764] FS: 00007f752ca446c0(0000) GS:ffff88812627a000(0000) knlGS:0000000000000000 [ 458.264558][T11764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.264595][T11764] CR2: 0000200000190030 CR3: 0000000038030000 CR4: 00000000003526f0 [ 458.264633][T11764] Kernel panic - not syncing: Fatal exception [ 458.265301][T11764] Kernel Offset: disabled