last executing test programs: 10m8.252089268s ago: executing program 3 (id=190): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) migrate_pages(0x0, 0x7000, 0x0, 0x0) 10m7.972190335s ago: executing program 3 (id=192): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 10m7.840374062s ago: executing program 3 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 10m7.615962758s ago: executing program 3 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 10m7.284527398s ago: executing program 3 (id=200): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x4) syz_io_uring_setup(0x25dc, &(0x7f00000000c0)={0x0, 0x8c5f, 0x2, 0x3, 0x8e, 0x0, r1}, &(0x7f0000000040), &(0x7f00000001c0)) 10m6.048206107s ago: executing program 3 (id=209): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) 10m4.499642046s ago: executing program 32 (id=209): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) 8m40.483504577s ago: executing program 2 (id=608): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) 8m40.16433247s ago: executing program 2 (id=611): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000080)=""/93, 0x5d}], 0x2}, 0x1009}], 0x1, 0x40012160, 0x0) 8m39.892114578s ago: executing program 2 (id=613): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 8m39.784821059s ago: executing program 2 (id=614): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 8m39.557999838s ago: executing program 2 (id=617): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0) 8m38.278268333s ago: executing program 2 (id=626): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a3220000000140000001400010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x2404c844) r3 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f00000004c0)=0x6e, 0x80800) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) sendmsg$unix(r5, 0x0, 0x4880) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="5800000010000104000000000000eb16b11913eb185fb8705cae060000000000000044592c3fa7d6d5181ae5628318e82f109846da1e66dad2fcecbf85a3b315bae5463141a8f1388b4b0c090d8e0621805f0be75d83fa51d566c18d2ee5edd7e2549b31e484ded5f23aae19bddf0a52d06c346cfdcb2c7d64ba10ea35f28392959b09c63aaf5f1de7d0d682a5c0ec7e1133cee7e5bc4726f89a1259c2bed7", @ANYRES32=0x0, @ANYBLOB="0208000000000000140003006970766c616e31000000000000000000140012800b0001006c6f7770616e00000400028008002e0004000000"], 0x50}}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 8m37.673832696s ago: executing program 33 (id=626): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a3220000000140000001400010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x2404c844) r3 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f00000004c0)=0x6e, 0x80800) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) sendmsg$unix(r5, 0x0, 0x4880) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="5800000010000104000000000000eb16b11913eb185fb8705cae060000000000000044592c3fa7d6d5181ae5628318e82f109846da1e66dad2fcecbf85a3b315bae5463141a8f1388b4b0c090d8e0621805f0be75d83fa51d566c18d2ee5edd7e2549b31e484ded5f23aae19bddf0a52d06c346cfdcb2c7d64ba10ea35f28392959b09c63aaf5f1de7d0d682a5c0ec7e1133cee7e5bc4726f89a1259c2bed7", @ANYRES32=0x0, @ANYBLOB="0208000000000000140003006970766c616e31000000000000000000140012800b0001006c6f7770616e00000400028008002e0004000000"], 0x50}}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 5.400053322s ago: executing program 1 (id=3880): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.401127021s ago: executing program 1 (id=3884): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 4.035933134s ago: executing program 1 (id=3888): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) 3.79369327s ago: executing program 1 (id=3891): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_usb_connect(0x5, 0xc9, &(0x7f0000000040)=ANY=[@ANYBLOB="120101029cf8cd08042348028c7c010203010902b70002020c508209049301039df99ab1052406000005240087000d240f01080000000e00800002022109050a10000205c2030725018102540007250180090000090505042000080001020f0905060000040508ca072501000a070007250183090100090490"], 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r5, &(0x7f0000000000), 0x10) dup3(r4, r5, 0x0) 2.786316151s ago: executing program 6 (id=3901): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)="1368c6546cff3f"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.679481363s ago: executing program 4 (id=3902): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = fanotify_init(0x8, 0x1000) fanotify_mark(r3, 0x5, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 2.669750435s ago: executing program 1 (id=3903): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(r3, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f739fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2", 0x51}, {0x0}, {&(0x7f0000000680)}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.440828208s ago: executing program 4 (id=3905): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05002abd7000fddbdf250100000034"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.294343029s ago: executing program 6 (id=3906): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) 2.285117215s ago: executing program 4 (id=3907): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.164686488s ago: executing program 4 (id=3908): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) 2.000013476s ago: executing program 1 (id=3910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r6, &(0x7f0000000140), 0x48) 1.936207087s ago: executing program 0 (id=3911): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) syz_io_uring_setup(0x5005, &(0x7f00000000c0)={0x0, 0x48cc, 0x40, 0x3, 0x13c, 0x0, r3}, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 1.885373517s ago: executing program 4 (id=3912): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0xfece, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.861432571s ago: executing program 5 (id=3913): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_usb_connect(0x5, 0xc9, &(0x7f0000000040)=ANY=[@ANYBLOB="120101029cf8cd08042348028c7c010203010902b70002020c508209049301039df99ab1052406000005240087000d240f01080000000e00800002022109050a10000205c2030725018102540007250180090000090505042000080001020f0905060000040508ca072501000a0700072501830901000904900005"], 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r5, &(0x7f0000000000), 0x10) dup3(r4, r5, 0x0) 1.632313089s ago: executing program 0 (id=3914): creat(&(0x7f0000000200)='./file0\x00', 0x100) 1.567608675s ago: executing program 0 (id=3915): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 1.395112392s ago: executing program 0 (id=3916): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)="1368c6546cff3f"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.331299262s ago: executing program 6 (id=3917): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05002abd7000fddbdf250100000034"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.154556947s ago: executing program 0 (id=3918): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) 1.15303133s ago: executing program 6 (id=3919): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x10140, 0x0) 936.032809ms ago: executing program 6 (id=3920): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(r3, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f739fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2", 0x51}, {0x0}, {&(0x7f0000000680)}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 899.220837ms ago: executing program 0 (id=3921): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000600)=[{0xff00, 0xc000, 0x0, 0x0}, {0x8, 0x1001, 0x0, 0x0}], 0x2}) 602.256033ms ago: executing program 5 (id=3922): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 465.616666ms ago: executing program 5 (id=3923): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 395.813148ms ago: executing program 6 (id=3924): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x0, 0x1, 0x0) 295.746464ms ago: executing program 5 (id=3925): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003140), 0x0, 0x8004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 86.098598ms ago: executing program 5 (id=3926): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 69.226972ms ago: executing program 4 (id=3927): r0 = socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, 0xffffffffffffffff, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) sendmsg$inet_sctp(r0, 0x0, 0x4000891) r6 = socket(0x10, 0x3, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x3, @empty, 0x7}}, 0x14000000, 0x2e, 0x7fff18ba, 0x3, 0x34c, 0x7fffffff, 0x1a}, 0x9c) 0s ago: executing program 5 (id=3928): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x37fe0) kernel console output (not intermixed with test programs): itialize intf0, err 0 [ 472.330962][ T5873] imon:imon_probe: failed to initialize context! [ 472.330975][ T5873] imon 1-1:0.0: unable to register, err -19 [ 472.368456][ T5873] usb 1-1: USB disconnect, device number 35 [ 472.391322][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 472.466686][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 472.482746][ T5892] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 472.533075][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.543374][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 472.543444][ T5892] usb 5-1: media controller created [ 472.547607][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 472.703114][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.906783][T11028] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 473.000657][ T5892] DVB: Unable to find symbol dib7000p_attach() [ 473.000680][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 473.056559][T11028] usb 1-1: Using ep0 maxpacket: 32 [ 473.059300][T11028] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 473.059336][T11028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.132900][T11028] usb 1-1: config 0 descriptor?? [ 473.198276][ T5892] rc_core: IR keymap rc-dib0700-rc5 not found [ 473.198359][ T5892] Registered IR keymap rc-empty [ 473.221250][ T5892] dvb-usb: could not initialize remote control. [ 473.221271][ T5892] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 473.352169][ T5892] usb 5-1: USB disconnect, device number 32 [ 473.446641][T11028] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 473.468323][T11028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.499075][T11028] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 473.499141][T11028] usb 1-1: media controller created [ 473.613253][T11028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.667646][ T5892] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 473.957730][T11028] DVB: Unable to find symbol dib7000p_attach() [ 473.957752][T11028] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 474.153286][T11028] rc_core: IR keymap rc-dib0700-rc5 not found [ 474.153311][T11028] Registered IR keymap rc-empty [ 474.153622][T11028] dvb-usb: could not initialize remote control. [ 474.153633][T11028] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 474.189296][T11028] usb 1-1: USB disconnect, device number 36 [ 474.407302][T11028] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 474.516722][ T5873] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 474.656742][T11406] fuse: Bad value for 'group_id' [ 474.656766][T11406] fuse: Bad value for 'group_id' [ 474.676692][ T5873] usb 7-1: Using ep0 maxpacket: 8 [ 474.707453][ T5873] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 474.707487][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.707507][ T5873] usb 7-1: Product: syz [ 474.707520][ T5873] usb 7-1: Manufacturer: syz [ 474.707533][ T5873] usb 7-1: SerialNumber: syz [ 474.714018][ T5873] usb 7-1: config 0 descriptor?? [ 474.929002][ T5873] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 476.403496][ T5873] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 476.417314][ T5873] usb 7-1: USB disconnect, device number 22 [ 477.165411][T11432] fuse: Bad value for 'group_id' [ 477.165435][T11432] fuse: Bad value for 'group_id' [ 478.126595][T11028] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 478.296545][T11028] usb 5-1: Using ep0 maxpacket: 16 [ 478.299067][T11028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.301828][T11028] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 478.301975][T11028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.301996][T11028] usb 5-1: Product: syz [ 478.302011][T11028] usb 5-1: Manufacturer: syz [ 478.302025][T11028] usb 5-1: SerialNumber: syz [ 478.446740][T11028] usb 5-1: config 0 descriptor?? [ 480.626713][ T5131] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 480.778888][ T5131] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 480.778922][ T5131] usb 1-1: config 0 has no interface number 0 [ 480.778958][ T5131] usb 1-1: config 0 interface 11 has no altsetting 0 [ 480.778995][ T5131] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 480.779020][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.784532][ T5131] usb 1-1: config 0 descriptor?? [ 480.835852][ T5131] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 480.846824][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 87 [ 480.846918][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 7 [ 480.876850][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 480.876940][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 480.877030][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 480.877111][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 480.877198][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 480.877286][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 480.925697][ T6014] usb 5-1: USB disconnect, device number 33 [ 480.952360][ T5131] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 480.999058][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 480.999164][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 480.999255][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 480.999341][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 480.999507][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 480.999607][ T5131] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 481.115666][ T5131] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 481.137310][ T5131] usb 1-1: USB disconnect, device number 37 [ 481.169296][ T5131] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 481.225261][ T5131] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 481.238870][ T5131] keyspan 1-1:0.11: device disconnected [ 481.838599][ T994] gspca_vicam: Failed to load "vicam/firmware.fw": -110 [ 481.838706][ T994] vicam 6-1:255.137: probe with driver vicam failed with error -110 [ 481.886371][ T994] usb 6-1: USB disconnect, device number 20 [ 482.725809][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 482.829458][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2239'. [ 483.116646][ T5131] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 483.271862][ T5131] usb 6-1: Using ep0 maxpacket: 32 [ 483.274322][ T5131] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 483.274355][ T5131] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 483.274377][ T5131] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 483.274398][ T5131] usb 6-1: config 1 has no interface number 0 [ 483.274447][ T5131] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 483.274470][ T5131] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 483.274514][ T5131] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 483.274537][ T5131] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.399186][ T5131] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 483.607822][ T5131] snd_usb_pod 6-1:1.1: invalid control EP [ 483.607850][ T5131] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 483.608204][ T5131] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 483.610424][ T5131] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 483.818328][ T994] usb 6-1: USB disconnect, device number 21 [ 484.479102][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.835055][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.936900][T11576] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 485.286748][ T5131] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 485.436592][ T5131] usb 7-1: Using ep0 maxpacket: 32 [ 485.439197][ T5131] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 485.439231][ T5131] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.445368][ T5131] usb 7-1: config 0 descriptor?? [ 485.484337][ T5131] gspca_main: sq930x-2.14.0 probing 041e:403c [ 485.546618][ T994] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 485.692137][ T5131] gspca_sq930x: reg_r 001f failed -32 [ 485.692256][ T5131] sq930x 7-1:0.0: probe with driver sq930x failed with error -32 [ 485.723290][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 485.727847][ T994] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.727885][ T994] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.727908][ T994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 485.727946][ T994] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 485.727970][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.745098][ T994] usb 5-1: config 0 descriptor?? [ 486.188057][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 486.197626][ T994] usbhid 5-1:0.0: can't add hid device: -71 [ 486.197773][ T994] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 486.210835][ T994] usb 5-1: USB disconnect, device number 34 [ 486.316620][ T6014] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 486.471645][ T6014] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.471719][ T6014] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 486.471834][ T6014] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 486.471861][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.487805][ T6014] usb 6-1: config 0 descriptor?? [ 486.527483][ T6014] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 487.534709][T11620] fuseblk: Bad value for 'fd' [ 488.091359][ T6014] usb 7-1: USB disconnect, device number 23 [ 488.256597][ T5131] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 488.418739][ T5131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.418780][ T5131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.418824][ T5131] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 488.418849][ T5131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.482827][ T5131] usb 2-1: config 0 descriptor?? [ 488.895588][ T5131] usbhid 2-1:0.0: can't add hid device: -71 [ 488.895712][ T5131] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 488.923621][ T5131] usb 2-1: USB disconnect, device number 31 [ 489.113420][ T5892] usb 6-1: USB disconnect, device number 22 [ 489.241503][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2286'. [ 490.236643][ T5892] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 490.406573][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 490.409098][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 490.411244][T11679] capability: warning: `syz.5.2297' uses deprecated v2 capabilities in a way that may be insecure [ 490.412673][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 490.412706][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.412726][ T5892] usb 5-1: Product: syz [ 490.412751][ T5892] usb 5-1: Manufacturer: syz [ 490.412767][ T5892] usb 5-1: SerialNumber: syz [ 490.424545][ T5892] usb 5-1: config 0 descriptor?? [ 490.492740][ T37] audit: type=1326 audit(1763396302.341:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11678 comm="syz.5.2297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcebce4f6c9 code=0x0 [ 490.495794][ T5892] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 490.495834][ T5892] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 491.076956][ T5892] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 491.176816][ T5892] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 491.176858][ T5892] em28xx 5-1:0.0: board has no eeprom [ 491.283422][ T5892] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 491.283460][ T5892] em28xx 5-1:0.0: dvb set to bulk mode. [ 491.285151][ T6014] em28xx 5-1:0.0: Binding DVB extension [ 491.330279][ T5892] usb 5-1: USB disconnect, device number 35 [ 491.332646][ T5892] em28xx 5-1:0.0: Disconnecting em28xx [ 491.417960][ T6014] em28xx 5-1:0.0: Registering input extension [ 491.426245][ T5892] em28xx 5-1:0.0: Closing input extension [ 491.597338][ T5892] em28xx 5-1:0.0: Freeing device [ 491.617404][ T994] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 491.787972][ T994] usb 7-1: Using ep0 maxpacket: 8 [ 491.805694][ T994] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 491.805731][ T994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.805751][ T994] usb 7-1: Product: syz [ 491.805767][ T994] usb 7-1: Manufacturer: syz [ 491.805782][ T994] usb 7-1: SerialNumber: syz [ 491.827360][ T5131] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 491.851475][ T994] usb 7-1: config 0 descriptor?? [ 491.976702][ T5131] usb 2-1: Using ep0 maxpacket: 32 [ 491.979103][ T5131] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 491.979135][ T5131] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 491.979157][ T5131] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 491.979177][ T5131] usb 2-1: config 1 has no interface number 0 [ 491.979226][ T5131] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.979253][ T5131] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 491.979277][ T5131] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 491.979320][ T5131] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 491.979344][ T5131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.134358][ T994] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 492.158752][ T5131] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 492.364098][ T5131] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 492.365716][ T5131] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 492.366296][ T5131] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 492.568330][ T5131] usb 2-1: USB disconnect, device number 32 [ 492.994325][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.133949][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.297300][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.580301][ T994] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 493.611255][ T994] usb 7-1: USB disconnect, device number 24 [ 494.782832][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2326'. [ 495.156573][ T994] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 495.296578][ T5131] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 495.319289][ T994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.319356][ T994] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 495.319406][ T994] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 495.319429][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.378378][ T994] usb 5-1: config 0 descriptor?? [ 495.402424][ T994] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 495.456818][ T5131] usb 6-1: Using ep0 maxpacket: 8 [ 495.463769][ T5131] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 495.463805][ T5131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.463825][ T5131] usb 6-1: Product: syz [ 495.463839][ T5131] usb 6-1: Manufacturer: syz [ 495.463854][ T5131] usb 6-1: SerialNumber: syz [ 495.480035][ T5131] usb 6-1: config 0 descriptor?? [ 495.539916][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2339'. [ 495.693151][ T5131] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 497.134588][ T5131] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 497.217225][ T5131] usb 6-1: USB disconnect, device number 23 [ 497.984998][ T994] usb 5-1: USB disconnect, device number 36 [ 499.464463][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2365'. [ 499.818389][T11841] netlink: 'syz.4.2368': attribute type 4 has an invalid length. [ 499.947514][T11843] netlink: 'syz.4.2368': attribute type 4 has an invalid length. [ 500.006706][ T994] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 500.166643][ T994] usb 2-1: Using ep0 maxpacket: 32 [ 500.184300][ T994] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.184341][ T994] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.184367][ T994] usb 2-1: config 0 interface 0 has no altsetting 0 [ 500.184405][ T994] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 500.184429][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.266279][ T994] usb 2-1: config 0 descriptor?? [ 500.697329][ T994] usbhid 2-1:0.0: can't add hid device: -71 [ 500.697477][ T994] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 500.732319][ T994] usb 2-1: USB disconnect, device number 33 [ 502.348129][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.348210][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.613030][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 505.066810][T11910] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2391'. [ 505.915384][T11913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 505.915755][T11913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 505.916086][T11913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.916364][T11913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 505.920788][T11913] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 506.485058][ T37] audit: type=1326 audit(1763396318.411:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11924 comm="syz.4.2402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4baf14f6c9 code=0x0 [ 507.266638][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 507.388315][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2408'. [ 507.986776][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 507.986814][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 507.986828][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 507.986850][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 509.466700][ T6014] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 509.654371][ T6014] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 509.654405][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.654424][ T6014] usb 5-1: Product: syz [ 509.654438][ T6014] usb 5-1: Manufacturer: syz [ 509.654453][ T6014] usb 5-1: SerialNumber: syz [ 509.665757][ T6014] usb 5-1: config 0 descriptor?? [ 510.089029][ T6014] mos7840 5-1:0.0: required endpoints missing [ 510.112965][ T6014] usb 5-1: USB disconnect, device number 37 [ 510.128597][T11981] netlink: 'syz.6.2428': attribute type 4 has an invalid length. [ 511.094338][T11983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.094621][T11983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.096025][T11983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.096334][T11983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.099296][T11983] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 512.396756][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 512.470040][T12020] netlink: 'syz.1.2442': attribute type 4 has an invalid length. [ 513.108916][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 513.108947][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 513.108965][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 513.108978][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 514.218750][T12041] bridge1: entered allmulticast mode [ 515.096568][ T5131] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 515.257153][ T5131] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 515.257190][ T5131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.257212][ T5131] usb 1-1: Product: syz [ 515.257227][ T5131] usb 1-1: Manufacturer: syz [ 515.257242][ T5131] usb 1-1: SerialNumber: syz [ 515.392979][ T5131] usb 1-1: config 0 descriptor?? [ 515.858755][ T5131] mos7840 1-1:0.0: required endpoints missing [ 515.876746][ T5131] usb 1-1: USB disconnect, device number 38 [ 516.425851][T12081] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2468'. [ 517.648912][ T6014] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 517.853530][ T6014] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 517.853567][ T6014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.853588][ T6014] usb 2-1: Product: syz [ 517.853604][ T6014] usb 2-1: Manufacturer: syz [ 517.853618][ T6014] usb 2-1: SerialNumber: syz [ 517.879035][ T6014] usb 2-1: config 0 descriptor?? [ 518.351629][ T6014] mos7840 2-1:0.0: required endpoints missing [ 518.372424][ T6014] usb 2-1: USB disconnect, device number 34 [ 519.348663][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2504'. [ 520.078183][T12170] netlink: 'syz.1.2509': attribute type 4 has an invalid length. [ 520.078212][T12170] netlink: 'syz.1.2509': attribute type 5 has an invalid length. [ 520.078227][T12170] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2509'. [ 520.624357][T12194] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2519'. [ 521.546685][ T5131] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 521.696545][ T5131] usb 2-1: Using ep0 maxpacket: 8 [ 521.701559][ T5131] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 521.701581][ T5131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.701593][ T5131] usb 2-1: Product: syz [ 521.701601][ T5131] usb 2-1: Manufacturer: syz [ 521.701609][ T5131] usb 2-1: SerialNumber: syz [ 521.745187][ T5131] usb 2-1: config 0 descriptor?? [ 521.970899][ T5131] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 522.582067][ T5131] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 523.086629][ T37] audit: type=1326 audit(1763396334.981:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12236 comm="syz.5.2536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcebce4f6c9 code=0x0 [ 523.252623][T12242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 523.747403][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 524.385888][ T6014] usb 2-1: USB disconnect, device number 35 [ 525.112437][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 525.993241][ T6014] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 526.167989][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 526.229319][ T6014] usb 5-1: unable to get BOS descriptor or descriptor too short [ 526.230402][ T6014] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 526.230442][ T6014] usb 5-1: can't read configurations, error -71 [ 526.344101][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2579'. [ 526.476429][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2582'. [ 527.109213][T12354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.440287][T12384] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 531.976594][ T6014] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 532.130661][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 532.130722][ T6014] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 532.130749][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.165851][ T6014] usb 5-1: config 0 descriptor?? [ 532.166918][T12442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 532.350063][T12452] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2629'. [ 532.401040][ T6014] usbhid 5-1:0.0: can't add hid device: -71 [ 532.401188][ T6014] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 532.468202][ T6014] usb 5-1: USB disconnect, device number 40 [ 534.842706][T12493] netlink: 'syz.6.2646': attribute type 4 has an invalid length. [ 534.842734][T12493] netlink: 'syz.6.2646': attribute type 5 has an invalid length. [ 534.842824][T12493] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2646'. [ 537.377990][T12519] fuse: Unknown parameter '&' [ 537.595126][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 538.557648][ T5873] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 538.706723][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 538.733770][ T5873] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 538.733809][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.733834][ T5873] usb 2-1: Product: syz [ 538.733850][ T5873] usb 2-1: Manufacturer: syz [ 538.733865][ T5873] usb 2-1: SerialNumber: syz [ 538.779636][ T5873] usb 2-1: config 0 descriptor?? [ 539.004568][ T5873] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 539.624567][ T5873] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 541.236617][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2688'. [ 541.438466][ T6014] usb 2-1: USB disconnect, device number 36 [ 541.476533][ T994] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 541.626694][ T994] usb 7-1: Using ep0 maxpacket: 32 [ 541.635712][ T994] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 541.635748][ T994] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 541.635771][ T994] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 541.635803][ T994] usb 7-1: config 1 has no interface number 0 [ 541.635858][ T994] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.635889][ T994] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 541.635939][ T994] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 541.635964][ T994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.693231][ T994] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 541.986265][ T994] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 542.345873][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2685'. [ 542.360506][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2685'. [ 542.408682][ T5873] usb 7-1: USB disconnect, device number 25 [ 542.410359][ T5873] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 543.556741][ T5873] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 543.716069][ T5873] usb 7-1: Using ep0 maxpacket: 8 [ 543.722276][ T5873] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 543.722298][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.722309][ T5873] usb 7-1: Product: syz [ 543.722318][ T5873] usb 7-1: Manufacturer: syz [ 543.722326][ T5873] usb 7-1: SerialNumber: syz [ 543.725738][ T5873] usb 7-1: config 0 descriptor?? [ 543.934769][ T5873] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 544.581640][ T5873] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 544.756892][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2704'. [ 546.136854][ T994] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 546.337887][ T6014] usb 7-1: USB disconnect, device number 26 [ 546.347513][ T994] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 546.347548][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.347567][ T994] usb 5-1: Product: syz [ 546.347582][ T994] usb 5-1: Manufacturer: syz [ 546.347596][ T994] usb 5-1: SerialNumber: syz [ 546.696796][T11028] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 546.870191][T11028] usb 1-1: Using ep0 maxpacket: 32 [ 546.886435][T11028] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 546.886468][T11028] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 546.886552][T11028] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 546.886575][T11028] usb 1-1: config 1 has no interface number 0 [ 546.886632][T11028] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 546.886704][T11028] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 546.886745][T11028] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 546.886765][T11028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.096325][T11028] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 547.323861][T11028] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 547.716681][ T5873] usb 1-1: USB disconnect, device number 39 [ 547.719709][ T5873] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 547.757004][ T994] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 547.757084][ T994] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 547.815478][T12672] netlink: 'syz.6.2720': attribute type 4 has an invalid length. [ 547.826008][ T994] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 547.852921][ T994] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 547.880258][ T994] usb 5-1: USB disconnect, device number 41 [ 548.856522][T11028] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 549.006801][T11028] usb 2-1: Using ep0 maxpacket: 16 [ 549.012739][T11028] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.012801][T11028] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.012832][T11028] usb 2-1: config 0 interface 0 has no altsetting 0 [ 549.012871][T11028] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 549.012895][T11028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.080910][T11028] usb 2-1: config 0 descriptor?? [ 549.100555][T11028] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 549.806596][T11028] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 549.956505][T11028] usb 1-1: Using ep0 maxpacket: 16 [ 549.958959][T11028] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.958989][T11028] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 549.959030][T11028] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 549.959057][T11028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.017804][T11028] usb 1-1: config 0 descriptor?? [ 550.024352][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.114244][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.129503][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.130995][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.134884][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.144658][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.081727][T12694] chnl_net:caif_netlink_parms(): no params data found [ 551.560810][T12694] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.561038][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.561319][T12694] bridge_slave_0: entered allmulticast mode [ 551.567977][T12694] bridge_slave_0: entered promiscuous mode [ 551.572225][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.572548][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.572801][T12694] bridge_slave_1: entered allmulticast mode [ 551.583795][T12694] bridge_slave_1: entered promiscuous mode [ 551.661562][ T5873] usb 2-1: USB disconnect, device number 37 [ 551.852388][T12694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.868441][T12694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.026948][ T5873] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 552.111122][T12694] team0: Port device team_slave_0 added [ 552.119014][T12694] team0: Port device team_slave_1 added [ 552.184829][ T5873] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 552.184865][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.184895][ T5873] usb 2-1: Product: syz [ 552.184910][ T5873] usb 2-1: Manufacturer: syz [ 552.184930][ T5873] usb 2-1: SerialNumber: syz [ 552.206297][ T5873] usb 2-1: config 0 descriptor?? [ 552.317139][ T5817] Bluetooth: hci1: command tx timeout [ 552.628970][ T5873] mos7840 2-1:0.0: required endpoints missing [ 552.631950][T12694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.631976][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.632005][T12694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.672695][ T5873] usb 2-1: USB disconnect, device number 38 [ 552.761884][ T49] usb 1-1: USB disconnect, device number 40 [ 552.883110][T12694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.883130][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.883155][T12694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.245772][T12694] hsr_slave_0: entered promiscuous mode [ 553.259805][T12694] hsr_slave_1: entered promiscuous mode [ 553.261300][T12694] debugfs: 'hsr0' already exists in 'hsr' [ 553.261330][T12694] Cannot create hsr debugfs directory [ 554.250845][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.284945][T12694] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.312572][T12754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 554.312912][T12754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 554.313202][T12754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 554.314362][T12754] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 554.314873][T12754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 554.315112][T12754] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 554.420656][T12754] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 554.716979][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.795904][T12694] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.164095][T12694] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.495417][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.608341][T12694] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.666990][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 556.052970][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.386568][ T5817] Bluetooth: hci1: command 0x040f tx timeout [ 556.386726][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 556.386757][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 556.386787][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 556.594664][T12694] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 556.698535][T12694] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 556.740731][T12694] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 556.795991][T12694] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 556.913854][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2772'. [ 556.913882][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2772'. [ 557.225546][T12694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.292605][T12694] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.339763][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.340043][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.395663][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.395832][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.943978][T12694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.288903][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'. [ 558.367185][ T5892] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 558.396904][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2783'. [ 558.468176][ T5809] Bluetooth: hci1: command 0x040f tx timeout [ 558.496561][ T5892] usb 7-1: device descriptor read/64, error -71 [ 558.736644][ T5892] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 558.776317][T12694] veth0_vlan: entered promiscuous mode [ 558.793808][T12694] veth1_vlan: entered promiscuous mode [ 558.875191][T12694] veth0_macvtap: entered promiscuous mode [ 558.876744][ T5892] usb 7-1: device descriptor read/64, error -71 [ 558.894806][T12694] veth1_macvtap: entered promiscuous mode [ 558.925991][T12694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.953567][T12694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.980352][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.981641][ T152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.987762][ T5892] usb usb7-port1: attempt power cycle [ 558.995052][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.995296][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.150371][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2782'. [ 559.150397][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2782'. [ 559.340700][ T5892] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 559.365899][ T5892] usb 7-1: device descriptor read/8, error -71 [ 559.395177][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.395217][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.504422][T12855] fuse: Unknown parameter 'group_i' [ 559.587216][T12858] bond3: option all_slaves_active: invalid value (9) [ 559.614359][T12858] bond3 (unregistering): Released all slaves [ 559.625980][ T5892] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 559.657497][ T5892] usb 7-1: device descriptor read/8, error -71 [ 559.724629][ T9072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.724655][ T9072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.783541][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.790642][ T5892] usb usb7-port1: unable to enumerate USB device [ 560.253715][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'. [ 560.329953][T12860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.338604][T12860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 560.338964][T12860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.339236][T12860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 560.339492][T12860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.106552][T11028] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 561.283050][T11028] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 561.283084][T11028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.283104][T11028] usb 1-1: Product: syz [ 561.283118][T11028] usb 1-1: Manufacturer: syz [ 561.283132][T11028] usb 1-1: SerialNumber: syz [ 561.596460][T12883] fuse: Unknown parameter 'group_i' [ 561.910491][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 562.386702][ T5809] Bluetooth: hci1: command 0x040f tx timeout [ 562.386750][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 562.386779][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 562.386808][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 562.436759][ T5892] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 562.586548][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 562.610370][ T5892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.610442][ T5892] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.610531][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 562.610573][ T5892] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 562.610601][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.676586][ T5892] usb 7-1: config 0 descriptor?? [ 562.701432][ T5892] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 563.769921][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.772497][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.215858][T11028] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 564.215918][T11028] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 564.215937][T11028] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 564.321397][T11028] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 564.424194][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.429053][T11028] usb 1-1: USB disconnect, device number 41 [ 564.463145][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.464577][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.466206][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.474420][ T5809] Bluetooth: hci1: command 0x040f tx timeout [ 564.517978][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 565.447456][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2804'. [ 565.466684][ T5873] usb 7-1: USB disconnect, device number 31 [ 565.772502][T12891] chnl_net:caif_netlink_parms(): no params data found [ 565.946815][ T5873] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 566.101208][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.101231][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.101265][ T5873] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 566.101279][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.104956][ T5873] usb 7-1: config 0 descriptor?? [ 566.556900][ T5817] Bluetooth: hci1: command 0x040f tx timeout [ 566.626667][ T5817] Bluetooth: hci5: command tx timeout [ 566.726775][ T5873] usbhid 7-1:0.0: can't add hid device: -71 [ 566.726866][ T5873] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 566.782264][ T5873] usb 7-1: USB disconnect, device number 32 [ 567.609263][T12891] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.609415][T12891] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.609727][T12891] bridge_slave_0: entered allmulticast mode [ 567.617797][T12891] bridge_slave_0: entered promiscuous mode [ 567.638516][T12891] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.661880][T12891] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.662211][T12891] bridge_slave_1: entered allmulticast mode [ 567.665255][T12891] bridge_slave_1: entered promiscuous mode [ 567.715390][T12923] netlink: 'syz.0.2812': attribute type 4 has an invalid length. [ 567.715421][T12923] netlink: 'syz.0.2812': attribute type 5 has an invalid length. [ 567.715434][T12923] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2812'. [ 568.116586][ T5873] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 568.191309][ T9072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.292186][ T5873] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 568.292231][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.292253][ T5873] usb 6-1: Product: syz [ 568.292268][ T5873] usb 6-1: Manufacturer: syz [ 568.292284][ T5873] usb 6-1: SerialNumber: syz [ 568.334458][ T5873] usb 6-1: config 0 descriptor?? [ 568.529874][T12891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.706652][ T5817] Bluetooth: hci5: command tx timeout [ 568.979920][ T5873] mos7840 6-1:0.0: required endpoints missing [ 569.001059][ T5873] usb 6-1: USB disconnect, device number 24 [ 569.060085][ T9072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.205356][T12891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.864690][ T9072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.890066][T11028] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 569.951321][T12891] team0: Port device team_slave_0 added [ 569.965472][T12891] team0: Port device team_slave_1 added [ 570.039718][T11028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.039760][T11028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.039803][T11028] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 570.039826][T11028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.096740][T11028] usb 6-1: config 0 descriptor?? [ 570.259341][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2821'. [ 570.583858][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.607291][T11028] cp2112 0003:10C4:EA90.0011: item fetching failed at offset 5/7 [ 570.609488][T11028] cp2112 0003:10C4:EA90.0011: parse failed [ 570.609639][T11028] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -22 [ 570.670352][ T9072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.725931][T11028] usb 6-1: USB disconnect, device number 25 [ 570.799734][ T5817] Bluetooth: hci5: command tx timeout [ 570.833735][T12891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.833754][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.833783][T12891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.848256][T12891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.848277][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.848305][T12891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.294712][T12891] hsr_slave_0: entered promiscuous mode [ 571.296146][T12891] hsr_slave_1: entered promiscuous mode [ 571.303974][T12891] debugfs: 'hsr0' already exists in 'hsr' [ 571.304007][T12891] Cannot create hsr debugfs directory [ 571.979704][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2831'. [ 571.979735][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2831'. [ 572.259012][ T9072] bridge_slave_1: left allmulticast mode [ 572.259047][ T9072] bridge_slave_1: left promiscuous mode [ 572.259320][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.348476][ T9072] bridge_slave_0: left allmulticast mode [ 572.348512][ T9072] bridge_slave_0: left promiscuous mode [ 572.348817][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.866630][ T5817] Bluetooth: hci5: command tx timeout [ 572.976191][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.097553][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2842'. [ 573.097587][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2842'. [ 573.248288][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.319625][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.766393][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.837270][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.907953][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.965756][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.037238][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.113322][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.314752][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'. [ 574.413780][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.471328][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.592853][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.772649][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.831921][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.952550][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.060466][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.460360][ T9072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.517445][ T9072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.565111][ T9072] bond0 (unregistering): Released all slaves [ 576.645218][ T9072] bond1 (unregistering): Released all slaves [ 576.662291][ T9072] bond2 (unregistering): Released all slaves [ 577.313655][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 577.313688][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 577.750724][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2857'. [ 578.733755][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2865'. [ 578.733786][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2865'. [ 579.223863][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2869'. [ 579.668931][ T9072] macvlan0: left promiscuous mode [ 579.801006][ T9072] batadv0: left promiscuous mode [ 580.073197][ T9072] hsr_slave_0: left promiscuous mode [ 580.134303][ T9072] hsr_slave_1: left promiscuous mode [ 580.135490][ T9072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.135518][ T9072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.232723][ T9072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.232757][ T9072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.547964][ T9072] veth1_macvtap: left promiscuous mode [ 580.548081][ T9072] veth0_macvtap: left promiscuous mode [ 580.548343][ T9072] veth1_vlan: left allmulticast mode [ 580.548381][ T9072] veth1_vlan: left promiscuous mode [ 580.548560][ T9072] veth0_vlan: left promiscuous mode [ 580.889437][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2880'. [ 581.322621][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.456286][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.548228][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.584368][T13125] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2889'. [ 581.700705][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.820746][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.952524][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.233851][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.354849][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.542517][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.641835][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.802901][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.460938][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.556436][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.658942][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.749776][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.816340][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.935696][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.054734][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.259596][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.391797][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.466997][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.529579][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.607786][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.679850][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.753408][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.832758][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.910601][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.966708][T11028] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 585.979415][ T9072] team0 (unregistering): Port device team_slave_1 removed [ 586.024439][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.148869][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.169987][T11028] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 586.170022][T11028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.170042][T11028] usb 5-1: Product: syz [ 586.170057][T11028] usb 5-1: Manufacturer: syz [ 586.170072][T11028] usb 5-1: SerialNumber: syz [ 586.255512][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.332559][ T9072] team0 (unregistering): Port device team_slave_0 removed [ 586.384709][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.458155][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.553590][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.741596][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.888226][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.959278][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.973282][T11028] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 586.973346][T11028] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 586.973895][T11028] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 586.973950][T11028] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 587.024509][T11028] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 587.074073][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.083971][T11028] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 587.104734][T11028] usb 5-1: USB disconnect, device number 42 [ 587.158817][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.301279][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.367728][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.817336][T13106] bridge1: entered allmulticast mode [ 590.132061][T13201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2914'. [ 590.469092][T13214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2921'. [ 590.968542][T13219] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2922'. [ 591.291780][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2925'. [ 592.132014][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.308730][T12891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 592.352343][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.449782][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.476845][T12891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 592.546666][T11028] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 592.552998][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2932'. [ 592.592002][T12891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 592.657691][T12891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 592.718412][T11028] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 592.718441][T11028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.718457][T11028] usb 7-1: Product: syz [ 592.718469][T11028] usb 7-1: Manufacturer: syz [ 592.718480][T11028] usb 7-1: SerialNumber: syz [ 593.130377][T13260] bridge1: entered allmulticast mode [ 593.336027][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.374288][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.390512][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.399436][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.468694][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.468900][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.610645][T11028] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 593.610709][T11028] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 593.611179][T11028] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 593.612650][T11028] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 593.613485][T11028] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 593.678950][T11028] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 593.720457][T11028] usb 7-1: USB disconnect, device number 33 [ 594.178920][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.506838][T12891] veth0_vlan: entered promiscuous mode [ 594.564476][T12891] veth1_vlan: entered promiscuous mode [ 594.590712][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 594.663348][T12891] veth0_macvtap: entered promiscuous mode [ 594.690868][T12891] veth1_macvtap: entered promiscuous mode [ 594.759556][T12891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.802754][T12891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.875476][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.878820][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.879296][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.883111][ T152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.591275][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.591300][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.016568][ T5131] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 596.087690][ T9072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.087715][ T9072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.196537][ T5131] usb 1-1: Using ep0 maxpacket: 32 [ 596.199116][ T5131] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.199146][ T5131] usb 1-1: config 0 has no interfaces? [ 596.199178][ T5131] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 596.199202][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.204932][ T5131] usb 1-1: config 0 descriptor?? [ 596.944558][T13310] syzkaller0: entered promiscuous mode [ 596.944591][T13310] syzkaller0: entered allmulticast mode [ 597.499588][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.792247][ T5131] usb 1-1: USB disconnect, device number 42 [ 601.084531][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 601.302887][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2979'. [ 601.336741][T13379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2980'. [ 601.336772][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'. [ 602.317153][T11028] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 602.514468][T11028] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 602.514503][T11028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.514522][T11028] usb 1-1: Product: syz [ 602.514535][T11028] usb 1-1: Manufacturer: syz [ 602.514548][T11028] usb 1-1: SerialNumber: syz [ 602.863263][T11028] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 602.863322][T11028] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 602.864539][T11028] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 602.945533][T11028] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 603.041071][T11028] usb 1-1: USB disconnect, device number 43 [ 604.896684][ T6024] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 605.028120][ T6024] usb 5-1: device descriptor read/64, error -71 [ 605.266878][ T6024] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 605.386625][ T5892] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 605.396596][ T6024] usb 5-1: device descriptor read/64, error -71 [ 605.507112][ T6024] usb usb5-port1: attempt power cycle [ 605.540341][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 605.542142][ T5892] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 605.542162][ T5892] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 605.542175][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 605.542187][ T5892] usb 2-1: config 1 has no interface number 0 [ 605.542217][ T5892] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 605.542233][ T5892] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 605.542257][ T5892] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 605.542271][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.552810][ T5892] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 605.830758][ T5892] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 605.951119][ T6024] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 605.967264][ T6024] usb 5-1: device descriptor read/8, error -71 [ 606.208230][ T6024] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 606.237551][ T6024] usb 5-1: device descriptor read/8, error -71 [ 606.300739][ T5892] usb 2-1: USB disconnect, device number 39 [ 606.302357][ T5892] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 606.357446][ T6024] usb usb5-port1: unable to enumerate USB device [ 607.174366][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.329839][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.366257][T13459] syzkaller0: entered promiscuous mode [ 607.366289][T13459] syzkaller0: entered allmulticast mode [ 607.533069][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.717546][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.168257][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.874236][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3029'. [ 608.874266][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3029'. [ 609.149863][T13511] trusted_key: encrypted_key: insufficient parameters specified [ 610.195934][T13524] bridge1: entered allmulticast mode [ 610.400530][T13527] syzkaller0: entered promiscuous mode [ 610.400558][T13527] syzkaller0: entered allmulticast mode [ 610.905937][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3039'. [ 611.326254][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 612.474417][T13555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 612.477637][T13555] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 612.478938][T13555] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 612.479125][T13555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.479347][T13555] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 612.479424][T13555] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 612.627931][T13555] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 613.422037][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3065'. [ 613.422069][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3065'. [ 613.570926][ T5892] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 613.649308][T13577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 613.679100][T13577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 613.683627][T13577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 613.703340][T13577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 613.712372][T13577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.771618][ T5892] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 613.771655][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.771683][ T5892] usb 6-1: Product: syz [ 613.771697][ T5892] usb 6-1: Manufacturer: syz [ 613.771712][ T5892] usb 6-1: SerialNumber: syz [ 614.550530][T13577] Bluetooth: hci3: command 0x0406 tx timeout [ 614.550564][ T5817] Bluetooth: hci5: command 0x0c1a tx timeout [ 614.550578][T13577] Bluetooth: hci1: command 0x040f tx timeout [ 614.550607][T13577] Bluetooth: hci4: command 0x0406 tx timeout [ 614.556224][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 615.534246][ T3581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.673786][T13621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.674041][T13621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 615.674232][T13621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 615.674410][T13621] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 615.674634][T13621] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 615.674714][T13621] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 615.814285][T13621] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 616.088865][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 616.088933][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 616.089759][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 616.149068][ T5892] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 616.171306][ T5892] usb 6-1: USB disconnect, device number 26 [ 616.183565][ T3581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.669008][ T3581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.160510][ T3581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.267581][T13577] Bluetooth: hci3: command 0x0406 tx timeout [ 617.756629][T13577] Bluetooth: hci0: command 0x041b tx timeout [ 617.757440][T13577] Bluetooth: hci1: command 0x040f tx timeout [ 617.757480][T13577] Bluetooth: hci4: command 0x0406 tx timeout [ 617.757513][T13577] Bluetooth: hci5: command 0x0c1a tx timeout [ 617.824280][T13598] chnl_net:caif_netlink_parms(): no params data found [ 618.655644][ T3581] bridge_slave_1: left allmulticast mode [ 618.655680][ T3581] bridge_slave_1: left promiscuous mode [ 618.655957][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.758855][ T3581] bridge_slave_0: left allmulticast mode [ 618.758891][ T3581] bridge_slave_0: left promiscuous mode [ 618.759202][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.827731][ T5817] Bluetooth: hci5: command 0x0c1a tx timeout [ 619.827778][ T5817] Bluetooth: hci0: command 0x041b tx timeout [ 621.399972][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3106'. [ 621.932287][T13577] Bluetooth: hci0: command 0x041b tx timeout [ 623.568676][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.647663][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.691096][ T3581] bond0 (unregistering): Released all slaves [ 623.731151][ T3581] bond1 (unregistering): Released all slaves [ 623.816638][ T5892] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 624.007268][T13577] Bluetooth: hci0: command 0x041b tx timeout [ 624.011966][T13690] bridge2: entered allmulticast mode [ 624.020536][ T5892] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 624.020572][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.020592][ T5892] usb 2-1: Product: syz [ 624.020606][ T5892] usb 2-1: Manufacturer: syz [ 624.020621][ T5892] usb 2-1: SerialNumber: syz [ 624.070710][T13598] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.070864][T13598] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.071158][T13598] bridge_slave_0: entered allmulticast mode [ 624.099009][T13598] bridge_slave_0: entered promiscuous mode [ 624.166938][T13598] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.167117][T13598] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.167583][T13598] bridge_slave_1: entered allmulticast mode [ 624.175707][T13598] bridge_slave_1: entered promiscuous mode [ 624.848567][ T5892] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 624.848630][ T5892] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 624.849422][ T5892] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 624.927953][ T5892] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 624.989077][ T5892] usb 2-1: USB disconnect, device number 40 [ 625.197988][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.198052][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.334716][T13598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.401239][T13598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.742060][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3125'. [ 626.066696][T13577] Bluetooth: hci0: command 0x041b tx timeout [ 626.578099][T13598] team0: Port device team_slave_0 added [ 626.582275][T13598] team0: Port device team_slave_1 added [ 626.877634][ T3581] hsr_slave_0: left promiscuous mode [ 626.906647][ T3581] hsr_slave_1: left promiscuous mode [ 626.907757][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.907786][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.968585][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.968626][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.082103][ T3581] veth1_macvtap: left promiscuous mode [ 627.082224][ T3581] veth0_macvtap: left promiscuous mode [ 627.082491][ T3581] veth1_vlan: left promiscuous mode [ 627.082676][ T3581] veth0_vlan: left promiscuous mode [ 627.776580][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 627.932780][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 627.932817][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.932838][ T9] usb 2-1: Product: syz [ 627.932853][ T9] usb 2-1: Manufacturer: syz [ 627.932869][ T9] usb 2-1: SerialNumber: syz [ 628.150806][T13577] Bluetooth: hci0: command 0x041b tx timeout [ 628.929122][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 628.929205][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 628.929997][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 628.978775][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 629.004572][ T9] usb 2-1: USB disconnect, device number 41 [ 629.031234][T13170] udevd[13170]: setting owner of /dev/bus/usb/002/041 to uid=0, gid=0 failed: No such file or directory [ 629.726540][ T5892] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 629.899930][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 629.899990][ T5892] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 629.900013][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.905756][ T5892] usb 7-1: config 0 descriptor?? [ 629.907452][T13793] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 630.161263][ T5892] usbhid 7-1:0.0: can't add hid device: -71 [ 630.161414][ T5892] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 630.191617][ T5892] usb 7-1: USB disconnect, device number 34 [ 632.087400][T13819] netlink: 'syz.6.3150': attribute type 4 has an invalid length. [ 632.087427][T13819] netlink: 'syz.6.3150': attribute type 5 has an invalid length. [ 632.087440][T13819] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3150'. [ 632.717113][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 632.848146][ T6024] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 633.000115][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 633.000172][ T6024] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 633.000197][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.068174][ T6024] usb 5-1: config 0 descriptor?? [ 633.083510][T13823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 633.162258][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 633.307137][ T6024] usbhid 5-1:0.0: can't add hid device: -71 [ 633.307292][ T6024] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 633.338487][ T6024] usb 5-1: USB disconnect, device number 47 [ 633.986600][T11028] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 634.180670][T11028] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.180703][T11028] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.184246][T11028] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.184280][T11028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.184301][T11028] usb 2-1: Product: syz [ 634.184315][T11028] usb 2-1: Manufacturer: syz [ 634.184331][T11028] usb 2-1: SerialNumber: syz [ 634.458283][T11028] usb 2-1: cannot find UAC_HEADER [ 634.501565][T11028] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 634.504814][T11028] usb 2-1: USB disconnect, device number 42 [ 634.532144][T13170] udevd[13170]: setting owner of /dev/bus/usb/002/042 to uid=0, gid=0 failed: No such file or directory [ 634.581442][T13170] udevd[13170]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.748328][T13598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.748347][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.748375][T13598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.750914][T13598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.750932][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.750955][T13598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.876907][T13836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 636.877139][T13836] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 636.877350][T13836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 636.877540][T13836] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 636.880294][T13836] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 637.184955][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3166'. [ 637.266823][ T5892] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 637.425133][T13598] hsr_slave_0: entered promiscuous mode [ 637.425915][ T5892] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 637.425956][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.425976][ T5892] usb 7-1: Product: syz [ 637.426057][ T5892] usb 7-1: Manufacturer: syz [ 637.426141][ T5892] usb 7-1: SerialNumber: syz [ 637.433456][T13598] hsr_slave_1: entered promiscuous mode [ 637.806587][ T49] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 637.879678][T13849] kvm: emulating exchange as write [ 638.067928][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 638.069129][ T49] usb 2-1: no configurations [ 638.069152][ T49] usb 2-1: can't read configurations, error -22 [ 638.176658][ T5131] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 638.247133][ T49] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 638.353787][ T5131] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 638.353824][ T5131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.353846][ T5131] usb 5-1: Product: syz [ 638.354004][ T5131] usb 5-1: Manufacturer: syz [ 638.354019][ T5131] usb 5-1: SerialNumber: syz [ 638.399290][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 638.400661][ T49] usb 2-1: no configurations [ 638.400681][ T49] usb 2-1: can't read configurations, error -22 [ 638.401509][ T49] usb usb2-port1: attempt power cycle [ 638.704531][ T5892] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 638.704595][ T5892] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 638.716176][ T5131] rtl8150 5-1:1.0: couldn't reset the device [ 638.717008][ T5131] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 638.736551][ T49] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 638.767567][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 638.768432][ T49] usb 2-1: no configurations [ 638.768450][ T49] usb 2-1: can't read configurations, error -22 [ 638.824813][ T5892] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 638.850923][ T5892] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 638.898712][ T49] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 638.899350][ T5892] usb 7-1: USB disconnect, device number 35 [ 638.905706][ T5131] usb 5-1: USB disconnect, device number 48 [ 638.929474][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 638.930870][ T49] usb 2-1: no configurations [ 638.930893][ T49] usb 2-1: can't read configurations, error -22 [ 638.931814][ T49] usb usb2-port1: unable to enumerate USB device [ 638.946546][T13577] Bluetooth: hci5: command 0x0c1a tx timeout [ 638.946592][T13577] Bluetooth: hci1: command 0x040f tx timeout [ 638.946622][T13577] Bluetooth: hci4: command 0x0406 tx timeout [ 638.946652][T13577] Bluetooth: hci3: command 0x0406 tx timeout [ 638.946680][T13577] Bluetooth: hci0: command 0x041b tx timeout [ 640.938229][ T5892] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 641.097419][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 641.097479][ T5892] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 641.097503][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.148101][ T5892] usb 2-1: config 0 descriptor?? [ 641.149425][T13913] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 641.395740][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 641.406671][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 641.468219][ T5892] usb 2-1: USB disconnect, device number 47 [ 642.511955][T13598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 642.553052][T13598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 642.637430][T13598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 642.799701][T13598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 643.354881][T13598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.431818][T13598] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.456001][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.465140][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.504802][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.505038][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.495239][T13598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.742146][T13598] veth0_vlan: entered promiscuous mode [ 644.778992][T13598] veth1_vlan: entered promiscuous mode [ 644.955907][T13598] veth0_macvtap: entered promiscuous mode [ 645.044579][T13598] veth1_macvtap: entered promiscuous mode [ 645.260506][T13598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.299575][T13598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.330174][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.332350][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.332622][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.332826][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.041721][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.041746][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.226119][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.226143][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.762658][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3230'. [ 650.323035][T14166] capability: warning: `syz.1.3271' uses 32-bit capabilities (legacy support in use) [ 650.362044][T14167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3270'. [ 651.236876][ T5873] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 651.440281][ T5873] usb 7-1: Using ep0 maxpacket: 16 [ 651.448478][ T5873] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.448525][ T5873] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.448548][ T5873] usb 7-1: config 0 interface 0 has no altsetting 0 [ 651.448582][ T5873] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 651.448607][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.474430][ T5873] usb 7-1: config 0 descriptor?? [ 651.912597][ T5873] hid (null): global environment stack underflow [ 652.209601][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.209653][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.209681][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.209706][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.209733][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.209756][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.209782][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.209809][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.212940][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.212996][ T5873] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 652.213658][ T5873] cougar 0003:060B:500A.0012: global environment stack underflow [ 652.213675][ T5873] cougar 0003:060B:500A.0012: item 0 0 1 11 parsing failed [ 652.309637][ T5873] cougar 0003:060B:500A.0012: parse failed [ 652.309757][ T5873] cougar 0003:060B:500A.0012: probe with driver cougar failed with error -22 [ 652.598824][T13577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.626072][T13577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 652.630330][T13577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 652.643209][T13577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 652.649589][T13577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 652.739966][ T994] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 652.883234][ T5873] usb 7-1: USB disconnect, device number 36 [ 652.918004][ T994] usb 5-1: Using ep0 maxpacket: 8 [ 652.929476][ T994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.929513][ T994] usb 5-1: config 0 has no interfaces? [ 652.933377][ T994] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 652.933413][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.933434][ T994] usb 5-1: Product: syz [ 652.933450][ T994] usb 5-1: Manufacturer: syz [ 652.933466][ T994] usb 5-1: SerialNumber: syz [ 653.277817][ T994] usb 5-1: config 0 descriptor?? [ 653.917286][T14223] trusted_key: encrypted_key: master key parameter 'usr:syz' is invalid [ 654.741414][ T37] audit: type=1326 audit(1763396466.671:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14227 comm="syz.0.3288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c9464f6c9 code=0x0 [ 654.812778][ T5817] Bluetooth: hci2: command tx timeout [ 655.434963][ T5131] usb 5-1: USB disconnect, device number 49 [ 655.525834][T14201] chnl_net:caif_netlink_parms(): no params data found [ 655.576523][ T5873] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 655.763863][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 655.769653][ T5873] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.769692][ T5873] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.769715][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 655.769844][ T5873] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 655.769877][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.784682][ T5873] usb 2-1: config 0 descriptor?? [ 656.119039][T14201] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.119271][T14201] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.119662][T14201] bridge_slave_0: entered allmulticast mode [ 656.122512][T14201] bridge_slave_0: entered promiscuous mode [ 656.143933][T14201] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.163535][T14201] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.163883][T14201] bridge_slave_1: entered allmulticast mode [ 656.183063][T14201] bridge_slave_1: entered promiscuous mode [ 656.199357][ T5873] hid (null): global environment stack underflow [ 656.228090][ T5873] cougar 0003:060B:500A.0013: global environment stack underflow [ 656.228116][ T5873] cougar 0003:060B:500A.0013: item 0 0 1 11 parsing failed [ 656.230131][ T5873] cougar 0003:060B:500A.0013: parse failed [ 656.230243][ T5873] cougar 0003:060B:500A.0013: probe with driver cougar failed with error -22 [ 656.399900][ T5892] usb 2-1: USB disconnect, device number 48 [ 656.456742][T14201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.461512][T14201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.696078][T14201] team0: Port device team_slave_0 added [ 656.737678][T14201] team0: Port device team_slave_1 added [ 656.866693][ T5817] Bluetooth: hci2: command tx timeout [ 657.066626][ T5892] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 657.156087][T14201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.156107][T14201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.156135][T14201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.166786][ T5131] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 657.237667][T14201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.237688][T14201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.237716][T14201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.301603][ T5892] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 657.301638][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.301657][ T5892] usb 1-1: Product: syz [ 657.301672][ T5892] usb 1-1: Manufacturer: syz [ 657.301688][ T5892] usb 1-1: SerialNumber: syz [ 657.347409][ T5131] usb 5-1: Using ep0 maxpacket: 8 [ 657.350364][ T5131] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.350394][ T5131] usb 5-1: config 0 has no interfaces? [ 657.353562][ T5131] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 657.353597][ T5131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.353618][ T5131] usb 5-1: Product: syz [ 657.353633][ T5131] usb 5-1: Manufacturer: syz [ 657.353649][ T5131] usb 5-1: SerialNumber: syz [ 657.470791][ T5131] usb 5-1: config 0 descriptor?? [ 657.665301][T14294] netlink: 'syz.1.3309': attribute type 4 has an invalid length. [ 657.665327][T14294] netlink: 'syz.1.3309': attribute type 5 has an invalid length. [ 657.665343][T14294] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3309'. [ 657.946078][T14201] hsr_slave_0: entered promiscuous mode [ 657.973617][T14201] hsr_slave_1: entered promiscuous mode [ 657.994439][T14201] debugfs: 'hsr0' already exists in 'hsr' [ 657.994473][T14201] Cannot create hsr debugfs directory [ 658.491295][ T5892] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 658.491356][ T5892] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 658.492270][ T5892] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 658.553160][ T5892] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 658.592424][ T5892] usb 1-1: USB disconnect, device number 44 [ 658.731839][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3318'. [ 658.834832][T14320] netlink: 'syz.6.3319': attribute type 4 has an invalid length. [ 658.834858][T14320] netlink: 'syz.6.3319': attribute type 5 has an invalid length. [ 658.834874][T14320] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3319'. [ 658.946518][ T5817] Bluetooth: hci2: command tx timeout [ 659.482876][T14201] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.720602][T14345] fuseblk: Bad value for 'fd' [ 659.813890][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 659.846031][T14349] netlink: 'syz.1.3329': attribute type 4 has an invalid length. [ 659.846050][T14349] netlink: 'syz.1.3329': attribute type 5 has an invalid length. [ 659.846058][T14349] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3329'. [ 660.010509][ T5892] usb 5-1: USB disconnect, device number 50 [ 660.562772][T14201] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.069243][ T5817] Bluetooth: hci2: command tx timeout [ 661.179373][T14201] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.620550][T14201] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.667548][T14398] warning: `syz.1.3350' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 661.686731][ T5873] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 661.836809][ T5873] usb 7-1: Using ep0 maxpacket: 16 [ 661.840317][ T5873] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 661.840349][ T5873] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 661.840370][ T5873] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.855347][ T5873] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.855384][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.855406][ T5873] usb 7-1: Product: syz [ 661.855430][ T5873] usb 7-1: Manufacturer: 󁤹 [ 661.855446][ T5873] usb 7-1: SerialNumber: syz [ 662.157218][ T5873] usb 7-1: 0:2 : does not exist [ 662.274768][ T5873] usb 7-1: USB disconnect, device number 37 [ 662.445715][T14201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 662.457169][T14152] udevd[14152]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.533362][T14201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 662.603162][T14201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 662.787322][T14201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 663.400180][T14201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.472505][T14201] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.572157][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.572402][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.702640][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.702804][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.096021][T14201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.409249][T14053] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 665.567988][T14053] usb 1-1: Using ep0 maxpacket: 16 [ 665.570654][T14053] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.570692][T14053] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.570716][T14053] usb 1-1: config 0 interface 0 has no altsetting 0 [ 665.570753][T14053] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 665.570778][T14053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.584105][T14053] usb 1-1: config 0 descriptor?? [ 666.032135][T14053] hid (null): global environment stack underflow [ 666.055331][T14053] cougar 0003:060B:500A.0014: unexpected long global item [ 666.055825][T14053] cougar 0003:060B:500A.0014: parse failed [ 666.055885][T14053] cougar 0003:060B:500A.0014: probe with driver cougar failed with error -22 [ 666.233021][T14053] usb 1-1: USB disconnect, device number 45 [ 666.599983][T14201] veth0_vlan: entered promiscuous mode [ 666.645480][T14201] veth1_vlan: entered promiscuous mode [ 666.855758][T14201] veth0_macvtap: entered promiscuous mode [ 666.909039][T14201] veth1_macvtap: entered promiscuous mode [ 667.054122][T14201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.174770][T14201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.250427][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.251967][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.252228][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.252474][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.358486][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3371'. [ 667.965884][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.965910][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.103176][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.103203][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.341570][T14486] netlink: 'syz.4.3374': attribute type 11 has an invalid length. [ 668.341598][T14486] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3374'. [ 668.916752][ T5892] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 669.076812][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 669.095644][ T5892] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.095688][ T5892] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.095711][ T5892] usb 5-1: config 0 interface 0 has no altsetting 0 [ 669.095751][ T5892] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 669.095774][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.128946][ T5892] usb 5-1: config 0 descriptor?? [ 669.438744][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3382'. [ 669.553776][ T5892] hid (null): global environment stack underflow [ 669.675338][ T5892] cougar 0003:060B:500A.0015: unexpected long global item [ 669.677434][ T5892] cougar 0003:060B:500A.0015: parse failed [ 669.680711][ T5892] cougar 0003:060B:500A.0015: probe with driver cougar failed with error -22 [ 669.728487][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3385'. [ 669.762736][ T5892] usb 5-1: USB disconnect, device number 51 [ 670.032980][T14523] netlink: 'syz.0.3389': attribute type 11 has an invalid length. [ 670.033014][T14523] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3389'. [ 670.499462][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3395'. [ 670.811743][T14543] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3398'. [ 671.549368][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 671.909335][T14571] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3410'. [ 673.362498][T14604] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3423'. [ 673.871496][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'. [ 674.364748][T14629] loop5: detected capacity change from 0 to 7 [ 674.503341][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3433'. [ 674.638039][T14635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3435'. [ 675.257209][T14629] Dev loop5: unable to read RDB block 7 [ 675.257295][T14629] loop5: unable to read partition table [ 675.257551][T14629] loop5: partition table beyond EOD, truncated [ 675.257589][T14629] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 675.393729][T14651] fuseblk: Bad value for 'fd' [ 675.638076][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3445'. [ 675.916464][ T5892] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 676.070641][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 676.082597][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.082635][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.082687][ T5892] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 676.082712][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.094766][ T5892] usb 5-1: config 0 descriptor?? [ 676.549061][ T5892] apple 0003:05AC:024B.0016: fixing up MacBook JIS keyboard report descriptor [ 676.550435][ T5892] apple 0003:05AC:024B.0016: unknown global tag 0xe [ 676.550456][ T5892] apple 0003:05AC:024B.0016: item 0 1 1 14 parsing failed [ 676.551331][ T5892] apple 0003:05AC:024B.0016: parse failed [ 676.551447][ T5892] apple 0003:05AC:024B.0016: probe with driver apple failed with error -22 [ 676.696521][ T5131] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 676.747172][T14053] usb 5-1: USB disconnect, device number 52 [ 676.810834][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 676.846887][ T5131] usb 7-1: Using ep0 maxpacket: 8 [ 676.849684][ T5131] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 676.875381][ T5131] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 676.875421][ T5131] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.875439][ T5131] usb 7-1: Product: syz [ 676.875452][ T5131] usb 7-1: Manufacturer: syz [ 676.875465][ T5131] usb 7-1: SerialNumber: syz [ 676.921145][ T5131] usb 7-1: config 0 descriptor?? [ 677.391176][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'. [ 677.391442][T14691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3460'. [ 678.406467][ T5892] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 678.558954][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 678.559012][ T5892] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 678.559036][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.599676][ T5892] usb 1-1: config 0 descriptor?? [ 678.600900][T14699] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 678.699482][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3470'. [ 678.810417][ T5892] usbhid 1-1:0.0: can't add hid device: -71 [ 678.810584][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 678.869910][ T5892] usb 1-1: USB disconnect, device number 46 [ 679.544157][ T994] usb 7-1: USB disconnect, device number 38 [ 680.009986][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3483'. [ 680.350433][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3486'. [ 681.327399][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3500'. [ 681.741278][T14780] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3499'. [ 682.189303][T14806] fuseblk: Bad value for 'fd' [ 682.461982][T14814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3512'. [ 683.271852][T14831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3519'. [ 683.878411][T14853] loop5: detected capacity change from 0 to 7 [ 684.413030][T14152] Dev loop5: unable to read RDB block 7 [ 684.413088][T14152] loop5: unable to read partition table [ 684.413380][T14152] loop5: partition table beyond EOD, truncated [ 684.980580][T14853] Dev loop5: unable to read RDB block 7 [ 684.980647][T14853] loop5: unable to read partition table [ 684.980885][T14853] loop5: partition table beyond EOD, truncated [ 684.980923][T14853] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 686.180213][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.651228][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.651300][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.840690][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3547'. [ 687.562270][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.807739][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.841601][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.224313][T14985] trusted_key: encrypted_key: master key parameter 'usr:syz' is invalid [ 694.136959][T15007] syz.4.3592 (15007): /proc/15006/oom_adj is deprecated, please use /proc/15006/oom_score_adj instead. [ 694.175129][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3593'. [ 694.316543][ T994] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 694.478836][ T994] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 694.478873][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.478895][ T994] usb 2-1: Product: syz [ 694.478909][ T994] usb 2-1: Manufacturer: syz [ 694.478924][ T994] usb 2-1: SerialNumber: syz [ 695.359325][ T994] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 695.359391][ T994] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 695.360231][ T994] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 695.539054][ T994] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 695.586049][ T994] usb 2-1: USB disconnect, device number 49 [ 695.672347][T15032] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3598'. [ 696.346503][ T5131] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 696.496482][ T5131] usb 7-1: Using ep0 maxpacket: 8 [ 696.545001][ T5131] usb 7-1: unable to get BOS descriptor or descriptor too short [ 696.546092][ T5131] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 696.546134][ T5131] usb 7-1: can't read configurations, error -71 [ 696.830005][T15057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3615'. [ 696.876899][ T994] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 697.066499][ T994] usb 6-1: Using ep0 maxpacket: 8 [ 697.072077][ T994] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 697.072111][ T994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.072132][ T994] usb 6-1: Product: syz [ 697.072144][ T994] usb 6-1: Manufacturer: syz [ 697.072157][ T994] usb 6-1: SerialNumber: syz [ 697.122142][ T994] usb 6-1: config 0 descriptor?? [ 697.354604][ T994] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 697.543715][ T994] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 698.115465][T15082] 9pnet: Could not find request transport: 0xffffffffffffffff [ 698.877608][ T5893] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 699.566935][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 699.620029][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 699.621151][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 699.621192][ T5893] usb 1-1: can't read configurations, error -71 [ 699.777582][ T5131] usb 6-1: USB disconnect, device number 27 [ 703.556540][T14053] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 703.728279][T14053] usb 6-1: Using ep0 maxpacket: 8 [ 703.783036][T14053] usb 6-1: unable to get BOS descriptor or descriptor too short [ 703.784230][T14053] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 703.784274][T14053] usb 6-1: can't read configurations, error -71 [ 705.131292][T15157] tmpfs: Bad value for 'nr_inodes' [ 706.308046][ T5893] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 706.458116][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 706.472308][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 706.473455][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 706.473496][ T5893] usb 2-1: can't read configurations, error -71 [ 706.512925][T15184] netlink: 'syz.4.3668': attribute type 11 has an invalid length. [ 706.512953][T15184] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3668'. [ 708.616578][ T5892] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 708.766540][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 708.774140][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 708.777245][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 708.777289][ T5892] usb 2-1: can't read configurations, error -71 [ 709.493546][T15238] fuse: Unknown parameter 'g' [ 709.816492][ T5131] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 709.994564][ T5131] usb 6-1: config index 0 descriptor too short (expected 5668, got 36) [ 709.994600][ T5131] usb 6-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 709.994622][ T5131] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 709.994644][ T5131] usb 6-1: config 3 has no interface number 0 [ 709.994694][ T5131] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 709.994724][ T5131] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 710.062149][ T5131] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 710.062185][ T5131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.062204][ T5131] usb 6-1: Product: syz [ 710.062218][ T5131] usb 6-1: Manufacturer: syz [ 710.062230][ T5131] usb 6-1: SerialNumber: syz [ 710.118728][T15242] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 710.337322][ T5131] usb-storage 6-1:3.20: USB Mass Storage device detected [ 710.383390][ T5131] usb-storage 6-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 710.446548][ T5131] scsi host1: usb-storage 6-1:3.20 [ 710.543054][ T5131] usb 6-1: USB disconnect, device number 30 [ 710.788274][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.186628][T14053] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 711.356486][T14053] usb 5-1: Using ep0 maxpacket: 8 [ 711.417994][T14053] usb 5-1: unable to get BOS descriptor or descriptor too short [ 711.419301][T14053] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 711.419341][T14053] usb 5-1: can't read configurations, error -71 [ 712.595440][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.284833][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.620141][T15300] netlink: 'syz.6.3716': attribute type 4 has an invalid length. [ 713.620169][T15300] netlink: 'syz.6.3716': attribute type 5 has an invalid length. [ 713.620183][T15300] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3716'. [ 713.735823][T14053] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 713.789403][ T6024] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 713.886458][T14053] usb 5-1: Using ep0 maxpacket: 8 [ 713.906722][T14053] usb 5-1: unable to get BOS descriptor or descriptor too short [ 713.912721][T14053] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 713.912761][T14053] usb 5-1: can't read configurations, error -71 [ 713.936553][ T6024] usb 6-1: Using ep0 maxpacket: 32 [ 713.952190][ T6024] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 713.952224][ T6024] usb 6-1: config 0 has no interface number 0 [ 713.952282][ T6024] usb 6-1: config 0 interface 184 has no altsetting 0 [ 713.955767][ T6024] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 713.955803][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.955824][ T6024] usb 6-1: Product: syz [ 713.955839][ T6024] usb 6-1: Manufacturer: syz [ 713.955855][ T6024] usb 6-1: SerialNumber: syz [ 713.974819][ T6024] usb 6-1: config 0 descriptor?? [ 714.010626][ T6024] smsc75xx v1.0.0 [ 714.198383][ T6024] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 714.198685][ T6024] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 714.255498][ T6024] usb 6-1: USB disconnect, device number 31 [ 714.693059][T15322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3725'. [ 715.387346][ T5892] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 715.446557][ T5893] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 715.536493][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 715.552324][ T5892] usb 7-1: unable to get BOS descriptor or descriptor too short [ 715.553495][ T5892] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 715.553535][ T5892] usb 7-1: can't read configurations, error -71 [ 715.602238][ T5893] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 715.602275][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.602297][ T5893] usb 5-1: Product: syz [ 715.602312][ T5893] usb 5-1: Manufacturer: syz [ 715.602327][ T5893] usb 5-1: SerialNumber: syz [ 716.045421][T15350] netlink: 'syz.1.3738': attribute type 72 has an invalid length. [ 716.045453][T15350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3738'. [ 716.536928][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.559355][ T5893] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 716.559425][ T5893] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 716.560226][ T5893] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 716.634605][ T5893] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 716.662321][ T5893] usb 5-1: USB disconnect, device number 57 [ 717.156069][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.435087][T15374] netlink: 'syz.1.3749': attribute type 72 has an invalid length. [ 717.435123][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3749'. [ 717.979380][ T994] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 718.126470][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 718.129110][ T994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.129147][ T994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.129174][ T994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.129211][ T994] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 718.129231][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.143914][T15390] fuseblk: Bad value for 'fd' [ 718.188415][ T994] usb 5-1: config 0 descriptor?? [ 718.509364][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3757'. [ 718.821219][ T994] usbhid 5-1:0.0: can't add hid device: -71 [ 718.821363][ T994] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 718.840722][ T5893] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 718.865907][ T994] usb 5-1: USB disconnect, device number 58 [ 718.992305][ T5893] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 718.992352][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.992374][ T5893] usb 2-1: Product: syz [ 718.992388][ T5893] usb 2-1: Manufacturer: syz [ 718.992409][ T5893] usb 2-1: SerialNumber: syz [ 719.287026][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.297086][T15406] trusted_key: encrypted_key: master key parameter 'usr:syz' is invalid [ 719.547068][T15410] netlink: 'syz.0.3762': attribute type 72 has an invalid length. [ 719.547103][T15410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3762'. [ 719.959537][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 719.959598][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 719.960490][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 720.049221][ T5893] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 720.074728][ T5893] usb 2-1: USB disconnect, device number 54 [ 720.187758][T15420] fuseblk: Bad value for 'fd' [ 720.827828][T15433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3774'. [ 720.999755][T15438] netlink: 'syz.4.3775': attribute type 11 has an invalid length. [ 720.999802][T15438] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3775'. [ 721.468044][ T5892] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 721.648147][ T5892] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 721.648184][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.648213][ T5892] usb 2-1: Product: syz [ 721.648230][ T5892] usb 2-1: Manufacturer: syz [ 721.648244][ T5892] usb 2-1: SerialNumber: syz [ 722.585311][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3786'. [ 722.967971][ T5892] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 722.968036][ T5892] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 722.968973][ T5892] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 723.030593][ T5892] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 723.109975][ T5892] usb 2-1: USB disconnect, device number 55 [ 723.295402][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.966554][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.905466][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.395100][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.887318][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.517090][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.986677][ T5892] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 731.140595][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 731.143233][ T5892] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 731.143264][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.149788][ T5892] usb 7-1: config 0 descriptor?? [ 731.376646][ T5892] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 731.398066][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 731.399308][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 731.399375][ T5892] usb 7-1: media controller created [ 731.495871][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 731.595004][T15591] dib0700: tx buffer length is larger than 4. Not supported. [ 731.849607][ T5892] DVB: Unable to find symbol dib7000p_attach() [ 731.849629][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 731.966555][ T5892] rc_core: IR keymap rc-dib0700-rc5 not found [ 731.966579][ T5892] Registered IR keymap rc-empty [ 731.966925][ T5892] dvb-usb: could not initialize remote control. [ 731.966935][ T5892] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 731.991813][ T5892] usb 7-1: USB disconnect, device number 43 [ 732.149935][ T5892] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 734.096435][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.585238][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.836465][T11028] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 734.988095][T11028] usb 7-1: Using ep0 maxpacket: 16 [ 734.991390][T11028] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 734.991423][T11028] usb 7-1: config 0 has no interface number 0 [ 734.991477][T11028] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 734.991503][T11028] usb 7-1: config 0 interface 41 has no altsetting 0 [ 734.994387][T11028] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 734.994420][T11028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.994442][T11028] usb 7-1: Product: syz [ 734.994457][T11028] usb 7-1: Manufacturer: syz [ 734.994473][T11028] usb 7-1: SerialNumber: syz [ 735.014116][T11028] usb 7-1: config 0 descriptor?? [ 735.015728][T15647] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 735.049680][T11028] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 735.166490][T14053] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 735.240795][ T994] usb 7-1: USB disconnect, device number 44 [ 735.329220][T14053] usb 1-1: Using ep0 maxpacket: 32 [ 735.343437][T14053] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 735.343469][T14053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.391304][T14053] usb 1-1: config 0 descriptor?? [ 735.506475][T11028] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 735.604100][T14053] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 735.643574][T14053] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 735.644427][T14053] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 735.644482][T14053] usb 1-1: media controller created [ 735.680661][T11028] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 735.680697][T11028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.680716][T11028] usb 2-1: Product: syz [ 735.680732][T11028] usb 2-1: Manufacturer: syz [ 735.680749][T11028] usb 2-1: SerialNumber: syz [ 735.735056][T14053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 736.391449][T14053] DVB: Unable to find symbol dib7000p_attach() [ 736.391523][T14053] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 736.746529][T14053] rc_core: IR keymap rc-dib0700-rc5 not found [ 736.746556][T14053] Registered IR keymap rc-empty [ 736.927050][T11028] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 736.927115][T11028] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 736.927971][T11028] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 737.011601][T11028] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 737.063751][T11028] usb 2-1: USB disconnect, device number 56 [ 738.170915][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.496920][ T5892] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 739.648765][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 739.676647][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 739.678996][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 739.679044][ T5892] usb 2-1: can't read configurations, error -71 [ 740.886857][T14053] dvb-usb: could not initialize remote control. [ 740.886878][T14053] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 741.011754][ T5892] usb 1-1: USB disconnect, device number 49 [ 741.190272][ T5892] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 741.608544][T14053] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 741.768233][T14053] usb 6-1: Using ep0 maxpacket: 8 [ 741.804251][T14053] usb 6-1: unable to get BOS descriptor or descriptor too short [ 741.809157][T14053] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 741.809202][T14053] usb 6-1: can't read configurations, error -71 [ 742.416525][T11028] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 742.589523][T11028] usb 1-1: Using ep0 maxpacket: 32 [ 742.592941][T11028] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 742.592974][T11028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.622464][T11028] usb 1-1: config 0 descriptor?? [ 742.853317][T11028] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 742.868924][T11028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 742.896212][T11028] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 742.896284][T11028] usb 1-1: media controller created [ 743.040146][T15769] ------------[ cut here ]------------ [ 743.040162][T15769] usb 1-1: BOGUS control dir, pipe 80003280 doesn't match bRequestType c0 [ 743.040786][T15769] WARNING: CPU: 1 PID: 15769 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 743.040852][T15769] Modules linked in: [ 743.040898][T15769] CPU: 1 UID: 0 PID: 15769 Comm: syz.0.3921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 743.040921][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 743.040937][T15769] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 743.040970][T15769] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 e0 2e 81 8b 48 8b 34 24 4c 89 fa 44 89 f1 e8 e4 89 11 fb 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 743.040987][T15769] RSP: 0018:ffffc90003a5f820 EFLAGS: 00010246 [ 743.041003][T15769] RAX: c46b94180bd16200 RBX: ffff888033f59b00 RCX: 0000000000080000 [ 743.041022][T15769] RDX: ffffc9000f0f5000 RSI: 00000000000006a4 RDI: 00000000000006a5 [ 743.041036][T15769] RBP: 1ffff110064e2a5c R08: 0000000000000000 R09: 0000000000000000 [ 743.041049][T15769] R10: dffffc0000000000 R11: ffffed101712487b R12: ffff888027fc0100 [ 743.041065][T15769] R13: ffff8880327152e0 R14: 0000000080003280 R15: ffff88803b495800 [ 743.041079][T15769] FS: 00007f9c928ae6c0(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 743.041097][T15769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 743.041120][T15769] CR2: 000000110c54db58 CR3: 000000003cdfc000 CR4: 00000000003526f0 [ 743.041136][T15769] Call Trace: [ 743.041151][T15769] [ 743.041176][T15769] usb_start_wait_urb+0x114/0x4c0 [ 743.041207][T15769] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 743.041242][T15769] usb_control_msg+0x232/0x3e0 [ 743.041267][T15769] dib0700_i2c_xfer+0xba7/0xf70 [ 743.041309][T15769] __i2c_transfer+0x874/0x2170 [ 743.041353][T15769] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.041393][T15769] ? __pfx___i2c_transfer+0x10/0x10 [ 743.041421][T15769] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 743.041439][T15769] ? i2c_transfer+0x120/0x3a0 [ 743.041464][T15769] i2c_transfer+0x25b/0x3a0 [ 743.041493][T15769] ? __pfx_i2c_transfer+0x10/0x10 [ 743.041522][T15769] ? _copy_from_user+0x94/0xb0 [ 743.041547][T15769] i2cdev_ioctl_rdwr+0x460/0x740 [ 743.041587][T15769] i2cdev_ioctl+0x64e/0x800 [ 743.041614][T15769] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 743.041646][T15769] ? __fget_files+0x3a6/0x420 [ 743.041674][T15769] ? __fget_files+0x2a/0x420 [ 743.041702][T15769] ? bpf_lsm_file_ioctl+0x9/0x20 [ 743.041721][T15769] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 743.041746][T15769] __se_sys_ioctl+0xff/0x170 [ 743.041770][T15769] do_syscall_64+0xfa/0xfa0 [ 743.041796][T15769] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.041821][T15769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.041839][T15769] ? clear_bhb_loop+0x60/0xb0 [ 743.041862][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.041888][T15769] RIP: 0033:0x7f9c9464f6c9 [ 743.041914][T15769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.041933][T15769] RSP: 002b:00007f9c928ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.041955][T15769] RAX: ffffffffffffffda RBX: 00007f9c948a5fa0 RCX: 00007f9c9464f6c9 [ 743.041969][T15769] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 743.041982][T15769] RBP: 00007f9c946d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 743.041995][T15769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.042009][T15769] R13: 00007f9c948a6038 R14: 00007f9c948a5fa0 R15: 00007ffd7fcba338 [ 743.042041][T15769] [ 743.042057][T15769] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 743.042074][T15769] CPU: 1 UID: 0 PID: 15769 Comm: syz.0.3921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 743.042097][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 743.042108][T15769] Call Trace: [ 743.042118][T15769] [ 743.042125][T15769] dump_stack_lvl+0x99/0x250 [ 743.042156][T15769] ? __asan_memcpy+0x40/0x70 [ 743.042192][T15769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.042218][T15769] ? __pfx__printk+0x10/0x10 [ 743.042249][T15769] vpanic+0x237/0x6d0 [ 743.042267][T15769] ? __pfx_vpanic+0x10/0x10 [ 743.042291][T15769] panic+0xb9/0xc0 [ 743.042307][T15769] ? __pfx_panic+0x10/0x10 [ 743.042336][T15769] __warn+0x31b/0x4b0 [ 743.042353][T15769] ? usb_submit_urb+0x114d/0x18b0 [ 743.042385][T15769] ? usb_submit_urb+0x114d/0x18b0 [ 743.042412][T15769] report_bug+0x2be/0x4f0 [ 743.042435][T15769] ? usb_submit_urb+0x114d/0x18b0 [ 743.042461][T15769] ? usb_submit_urb+0x114d/0x18b0 [ 743.042489][T15769] ? usb_submit_urb+0x114f/0x18b0 [ 743.042516][T15769] handle_bug+0x84/0x160 [ 743.042535][T15769] exc_invalid_op+0x1a/0x50 [ 743.042552][T15769] asm_exc_invalid_op+0x1a/0x20 [ 743.042571][T15769] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 743.042601][T15769] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 e0 2e 81 8b 48 8b 34 24 4c 89 fa 44 89 f1 e8 e4 89 11 fb 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 743.042619][T15769] RSP: 0018:ffffc90003a5f820 EFLAGS: 00010246 [ 743.042639][T15769] RAX: c46b94180bd16200 RBX: ffff888033f59b00 RCX: 0000000000080000 [ 743.042654][T15769] RDX: ffffc9000f0f5000 RSI: 00000000000006a4 RDI: 00000000000006a5 [ 743.042668][T15769] RBP: 1ffff110064e2a5c R08: 0000000000000000 R09: 0000000000000000 [ 743.042682][T15769] R10: dffffc0000000000 R11: ffffed101712487b R12: ffff888027fc0100 [ 743.042696][T15769] R13: ffff8880327152e0 R14: 0000000080003280 R15: ffff88803b495800 [ 743.042743][T15769] usb_start_wait_urb+0x114/0x4c0 [ 743.042771][T15769] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 743.042810][T15769] usb_control_msg+0x232/0x3e0 [ 743.042836][T15769] dib0700_i2c_xfer+0xba7/0xf70 [ 743.042955][T15769] __i2c_transfer+0x874/0x2170 [ 743.043097][T15769] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.043142][T15769] ? __pfx___i2c_transfer+0x10/0x10 [ 743.043174][T15769] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 743.043196][T15769] ? i2c_transfer+0x120/0x3a0 [ 743.043226][T15769] i2c_transfer+0x25b/0x3a0 [ 743.043254][T15769] ? __pfx_i2c_transfer+0x10/0x10 [ 743.043281][T15769] ? _copy_from_user+0x94/0xb0 [ 743.043306][T15769] i2cdev_ioctl_rdwr+0x460/0x740 [ 743.043344][T15769] i2cdev_ioctl+0x64e/0x800 [ 743.043372][T15769] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 743.043403][T15769] ? __fget_files+0x3a6/0x420 [ 743.043431][T15769] ? __fget_files+0x2a/0x420 [ 743.043467][T15769] ? bpf_lsm_file_ioctl+0x9/0x20 [ 743.043489][T15769] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 743.043519][T15769] __se_sys_ioctl+0xff/0x170 [ 743.043544][T15769] do_syscall_64+0xfa/0xfa0 [ 743.043572][T15769] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.043599][T15769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.043619][T15769] ? clear_bhb_loop+0x60/0xb0 [ 743.043645][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.043665][T15769] RIP: 0033:0x7f9c9464f6c9 [ 743.043687][T15769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.043705][T15769] RSP: 002b:00007f9c928ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.043730][T15769] RAX: ffffffffffffffda RBX: 00007f9c948a5fa0 RCX: 00007f9c9464f6c9 [ 743.043746][T15769] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 743.043762][T15769] RBP: 00007f9c946d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 743.043777][T15769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.043791][T15769] R13: 00007f9c948a6038 R14: 00007f9c948a5fa0 R15: 00007ffd7fcba338 [ 743.043827][T15769] [ 743.045200][T15769] Kernel Offset: disabled