last executing test programs: 12m52.50572228s ago: executing program 4 (id=640): ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000080)) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tgkill(0x0, 0x0, 0x21) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12m48.462829773s ago: executing program 3 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x5}, {0xc000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0x0, 0x41000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x6, 0x4, 0xa4, 0x5, 0x5}, {0x1, 0x26000, 0x9, 0x7, 0x5, 0x42, 0x2, 0xff, 0x6, 0x7, 0x12}, {0xffffffff, 0x3000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x3}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x4b, 0x5, 0x7, 0x3, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0xcd, 0x7, 0x1, 0x6, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x9}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100c00, [0x6800000000000000, 0x4, 0x3, 0x8]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x4, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x4, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) 12m48.002350646s ago: executing program 3 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100010000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 12m47.763992842s ago: executing program 4 (id=656): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96", 0xb, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@null, 0x7, 'vlan0\x00'}) 12m47.701654883s ago: executing program 3 (id=657): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x20000400) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102384, 0x18ff0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 12m46.864693771s ago: executing program 4 (id=660): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x402) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x7, 0xfffffffffffffffd, 0x0, 0xffff, 0x1, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffffffffffd], 0x30000, 0x2011c0}) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0x813, 0x0, 0xf}, {0x80f, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9) 12m46.700291519s ago: executing program 3 (id=661): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="050003"], 0x28}}, 0x0) 12m46.512790901s ago: executing program 3 (id=662): syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x1, 0x106e, 0xc, 0x8000000000000, 0x80000004000080, 0x0, 0xfffffffffffffff9, 0x4, 0x4, 0x6, 0x7ffd], 0x41000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m45.785664552s ago: executing program 4 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000010000300686173683a69702c6d6163001400078005"], 0x5c}}, 0x0) 12m45.583976928s ago: executing program 4 (id=665): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c"], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 12m45.581515797s ago: executing program 3 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 12m45.366521798s ago: executing program 4 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb, 0x0, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) 12m30.068468835s ago: executing program 32 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 12m29.984031541s ago: executing program 33 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb, 0x0, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) 7m4.571503043s ago: executing program 6 (id=1474): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 7m2.747168223s ago: executing program 6 (id=1476): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 7m2.158984768s ago: executing program 6 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a000001"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close(r3) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x11, 0x0, 0x4) 6m59.01202053s ago: executing program 6 (id=1480): ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) setpriority(0x2, 0x0, 0x1) 6m57.529933263s ago: executing program 6 (id=1482): r0 = syz_io_uring_setup(0x909, &(0x7f00000002c0)={0x0, 0x5885, 0x1, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m50.44753732s ago: executing program 6 (id=1500): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) getpgid(0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) 6m35.188381533s ago: executing program 34 (id=1500): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) getpgid(0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) 2m24.067364116s ago: executing program 5 (id=2291): syz_open_dev$loop(0x0, 0xdf6, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla', 0xff6b) 2m23.356801944s ago: executing program 5 (id=2293): socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 2m22.870116921s ago: executing program 5 (id=2294): ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) setpriority(0x2, 0x0, 0x1) 2m21.115498253s ago: executing program 5 (id=2298): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2000, 0xc, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x12) close(0xffffffffffffffff) 2m15.529664644s ago: executing program 0 (id=2304): socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 2m14.529485607s ago: executing program 0 (id=2306): mkdir(0x0, 0xfffffffffffffffe) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd9}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102384, 0x18ff0) 2m12.415085184s ago: executing program 0 (id=2308): ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) setpriority(0x2, 0x0, 0x1) 2m12.049937022s ago: executing program 0 (id=2309): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r3, 0x0, 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) 2m11.659854715s ago: executing program 5 (id=2311): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 2m11.078951889s ago: executing program 5 (id=2312): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000070000000c00018008000600"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(0x0, r2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 2m1.262975278s ago: executing program 0 (id=2323): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x2, 0x0) close(r0) r1 = socket$key(0xf, 0x3, 0x2) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$tun(0xffffff9c, 0x0, 0x80, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_io_uring_setup(0x3bc5, &(0x7f0000000400)={0x0, 0xc989, 0x8, 0xffffffdf, 0x229}, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000702, r3, &(0x7f0000000480)) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r5, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/123, 0x7b}], 0x1, 0x15b, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x70bd2a, 0x1900, [@sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x3}]}, 0x20}, 0x1, 0x7}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 1m58.346942844s ago: executing program 0 (id=2326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m54.440403787s ago: executing program 35 (id=2312): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000070000000c00018008000600"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(0x0, r2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 1m42.902870627s ago: executing program 36 (id=2326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m29.08953769s ago: executing program 7 (id=2351): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x4f50, 0x4) 1m28.539429798s ago: executing program 7 (id=2353): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0084ca000000000014001a80100004"], 0x34}}, 0x0) 1m22.325477164s ago: executing program 7 (id=2358): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff070000", @ANYRES32=r2, @ANYBLOB="003000000000000004001a"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1m15.903288552s ago: executing program 7 (id=2361): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x4f50, 0x4) 1m14.211420593s ago: executing program 7 (id=2362): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r4, 0x5}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m8.036574521s ago: executing program 7 (id=2364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000001c0)=""/17) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ff9, 0x32c, 0x0, r0}, 0x0, &(0x7f0000000040)) setns(r0, 0x40000000) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m1.030490924s ago: executing program 2 (id=2368): ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001bc0)=""/73) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x40, 0x0, 0x5, {0x5, 0x11, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x8d, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0xc, 0x7}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x7f, 0xa1, 0x6}]}}) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xb9, 0xb0, 0x83, 0x8, 0x52b, 0x1803, 0x2877, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0x69, 0xf1}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x1f, 0xec, 0x2c, 0x8, 0x5da, 0xa0, 0x1fee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0xa0, 0x6, 0x0, 0xec, 0x65, 0x68}}]}}]}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x3, 0x50, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0xde, 0xd}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa, 0x2, 0x7, 0xe, "bb", "b0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xd8, 0x9, 0x9, {0x7, 0x25, 0x1, 0x2, 0x4, 0x22f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x1, 0x5, "d7d6f6997c20"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xa0, 0x2, 0x7, {0x7, 0x25, 0x1, 0x82, 0x7, 0xfff4}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x0, 0x60, 0x1, 0xdf, 0x2}, 0x5, &(0x7f0000000a80)={0x5, 0xf, 0x5}, 0x6, [{0x58, &(0x7f0000000ac0)=@string={0x58, 0x3, "72aac8f4d43dd915050c5f1bf7cac920d687140e5be19fed1375f8502c507e13b74bcfe0acf1434fe219f3c57c21148b9aab0df10407d13f8fe4c28de27a5548944b8789111fac2caa31ccd289c2565bda95e80d16cb"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x42c}}, {0x7b, &(0x7f0000000c40)=@string={0x7b, 0x3, "88257c3ce90fa69a8c844494aee7b6814e1f5a67dcdd8773e881160f1062ebe89c1b5f3c4cebbed2fdf46bd8acb41081e8f61c5fe94cafd6b346695225a3a7486221e0a2af47eb533d9df76234269e3c1fb1237b130c02005003577ebda9d5de2ebe6d674b8f778ed3396e3679e8407c466bccde50ce464ff5"}}, {0x6a, &(0x7f0000000d40)=@string={0x6a, 0x3, "f38e582c955cfba18652876da4cad7b9776f8ce29b4dedda98791c6c8c6d06fcc5a2e3114f325e4212eb2ab9a93ad61e983f10dbf972e839e182183ca40731f4a3b4cf7b0328476a285e33b2cd019f8776556dc67e5482b5daf7698204b2f4311815259b1f3a6dbb"}}, {0x93, &(0x7f0000000e00)=@string={0x93, 0x3, "a0c50ed9a887a18291a5f8343985d0246e0b20c29631775017baa2d35b6ccd3a8b877d770b72f61d7e2d8f4fc8d0ce270d4536124a9bd08b8bc5e95d139398cde9e324b30ef2ecc8186707476c38307d492052b205a191905b3c01bc354749d04152bfe1286c7482de982c98e341e8d5efe78e3b878f154dd7f1dbbd365c480e17a2bc1be16c65a4203b17eadee5b5d2f5"}}]}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001b40)={0x2c, &(0x7f00000019c0)={0x0, 0x12, 0x45, "49d0c3a248a312e321d2e10b437d73229395d991f0895e540cbc68bbb33c5eb5e5febe19399ec15fe5df53e6350597810beb7ec9f352203fc3ad91bc48c9329a92a27e9e52"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0xd}, 0x0, &(0x7f0000001b00)={0x20, 0x3, 0x1, 0x5}}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001400)={0x2c, &(0x7f0000001000)={0x0, 0x1, 0x1d, {0x1d, 0xe, "e49caac74277a5fbfe6881fd6b0d0f7e50de6a58dac39c920d22ab"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, 0x0, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x8, 0x1, "47875923", "52dcf577"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x4, 0x4, 0x8, 0x6, 0x9}}}, &(0x7f0000002200)={0x84, &(0x7f0000001d40)={0x0, 0xf, 0xce, "3c4f2dd93168c2b85ea89aaf7ba9b39fda06f3a3bdbcb8fa2ed50bd92071a74273dbd8e6ee851702b50f22a561215684c61942e18a27777fe4c45605d1026a308865307127369a9e7aa5a38b0ad11f72f8451488229b23c61d0a39b965b83c5824d723578003fc2c38e860c009758271f5fe21eab48cf0a244eab07d784519d619b862b710fdfb763b267f7e5df1df131f63d1f677d67d4295a39a736f2eb44d2f3cbe9f5ba6a91f71e4b2c356a2b26d266fe9edc79ea91b33399fc766c5f6ecb746021ba39df3eea2b964249b16"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001ec0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x160, 0x4}}, &(0x7f0000001f40)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001f80)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001fc0)={0x40, 0xb, 0x2, "96cc"}, &(0x7f0000002000)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002040)={0x40, 0x13, 0x6, @random="1289bc3c5b14"}, &(0x7f0000002080)={0x40, 0x17, 0x6}, 0x0, &(0x7f0000002100)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000002140)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000002180)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000021c0)={0x40, 0x21, 0x1, 0xf4}}) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f00000009c0)={0x20, 0xa}, 0x0, 0x0}) 54.900464807s ago: executing program 2 (id=2371): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0xe0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xf, 0x8, 0x2}}}}}]}}]}}, 0x0) 51.47320624s ago: executing program 37 (id=2364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000001c0)=""/17) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ff9, 0x32c, 0x0, r0}, 0x0, &(0x7f0000000040)) setns(r0, 0x40000000) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 50.612776109s ago: executing program 2 (id=2374): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb100109"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x9, 0x2, &(0x7f0000000280)={0xd, "c728eef8f97ff9e096f32cbf6c179323474332f0d4438d253babc9b0397381e652"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 46.909228141s ago: executing program 2 (id=2375): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0x12) close(r3) 37.866408349s ago: executing program 1 (id=2378): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 35.765764194s ago: executing program 2 (id=2379): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) epoll_create1(0x80000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x98) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 32.643481197s ago: executing program 1 (id=2380): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 30.746896156s ago: executing program 1 (id=2381): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0xe0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xf, 0x8, 0x2}}}}}]}}]}}, 0x0) 25.415072708s ago: executing program 2 (id=2382): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x3c, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x0, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0x6, 0x20000073, 0x8e, 0xd50, 0xa79, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff802, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000203, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd7, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x7, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0xff, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 24.978911207s ago: executing program 1 (id=2383): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x2, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0xffff1000, 0x1000, &(0x7f0000004200)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 24.66587324s ago: executing program 1 (id=2384): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000540)={0x0, 0x1b8e, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x273c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 16.232160908s ago: executing program 1 (id=2385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r3) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001c8, 0x12) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f000001b2c0)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000019200)={0x2020}, 0x2020) syz_usb_connect$cdc_ncm(0x6, 0xa8, &(0x7f0000000300)={{0x12, 0x1, 0x51, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x2, 0x1, 0xc0, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "7777c7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x604, 0x2, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0x9af, 0x19}, [@mdlm_detail={0x2b, 0x24, 0x13, 0x1, "33aac5098707f8bb804a2a79cafda6861009cd9d098288bb49bf122cb01f5028e2c5843f976db5"}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x8000, 0x81, 0x5b, 0xf, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x597, 0x2, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xd, 0x2}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x3, 0x7, 0xd, 0x40, 0xda}, 0x54, &(0x7f0000000400)={0x5, 0xf, 0x54, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xb2, "49e7ce1ac17bdd254e2fab2c3bb3fc81"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0x0, 0x81, [0xff0000, 0x0, 0x30, 0x923d2feba1ae703d, 0x0, 0xff3fcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "67cd66ff87924f6afb0ddb44c8f29fdb"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x82c}}, {0x2, &(0x7f0000000500)=@string={0x2}}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = io_uring_setup(0x6ab9, &(0x7f0000000000)={0x0, 0x4, 0x20, 0x3, 0x1b1}) io_uring_enter(r7, 0x7b46, 0x7b7d, 0x20, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.26617424s ago: executing program 38 (id=2382): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x3c, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x0, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0x6, 0x20000073, 0x8e, 0xd50, 0xa79, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff802, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000203, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd7, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x7, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0xff, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 39 (id=2385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r3) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001c8, 0x12) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f000001b2c0)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000019200)={0x2020}, 0x2020) syz_usb_connect$cdc_ncm(0x6, 0xa8, &(0x7f0000000300)={{0x12, 0x1, 0x51, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x2, 0x1, 0xc0, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "7777c7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x604, 0x2, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0x9af, 0x19}, [@mdlm_detail={0x2b, 0x24, 0x13, 0x1, "33aac5098707f8bb804a2a79cafda6861009cd9d098288bb49bf122cb01f5028e2c5843f976db5"}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x8000, 0x81, 0x5b, 0xf, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x597, 0x2, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xd, 0x2}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x3, 0x7, 0xd, 0x40, 0xda}, 0x54, &(0x7f0000000400)={0x5, 0xf, 0x54, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xb2, "49e7ce1ac17bdd254e2fab2c3bb3fc81"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0x0, 0x81, [0xff0000, 0x0, 0x30, 0x923d2feba1ae703d, 0x0, 0xff3fcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "67cd66ff87924f6afb0ddb44c8f29fdb"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x82c}}, {0x2, &(0x7f0000000500)=@string={0x2}}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = io_uring_setup(0x6ab9, &(0x7f0000000000)={0x0, 0x4, 0x20, 0x3, 0x1b1}) io_uring_enter(r7, 0x7b46, 0x7b7d, 0x20, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): (slave bond_slave_1): Releasing backup interface [ 386.365651][ T6091] bond0 (unregistering): Released all slaves [ 386.573083][ T6091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.634446][ T6091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.674274][ T6091] bond0 (unregistering): Released all slaves [ 387.338703][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 389.045665][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.045681][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.045705][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.097599][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.097615][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.097638][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.131106][ T9231] hsr_slave_0: entered promiscuous mode [ 389.132328][ T9231] hsr_slave_1: entered promiscuous mode [ 389.135909][ T9231] debugfs: 'hsr0' already exists in 'hsr' [ 389.135932][ T9231] Cannot create hsr debugfs directory [ 389.503923][ T6091] hsr_slave_0: left promiscuous mode [ 389.542555][ T6091] hsr_slave_1: left promiscuous mode [ 389.543518][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.543336][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.432708][ T6091] hsr_slave_0: left promiscuous mode [ 391.452924][ T6091] hsr_slave_1: left promiscuous mode [ 391.453545][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.476060][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.044018][ T6091] team0 (unregistering): Port device team_slave_1 removed [ 392.102497][ T5888] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 392.154782][ T6091] team0 (unregistering): Port device team_slave_0 removed [ 392.282602][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 392.284390][ T5888] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 392.284415][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.284431][ T5888] usb 1-1: config 0 has no interface number 0 [ 392.284478][ T5888] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 392.284503][ T5888] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 392.284525][ T5888] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 392.284548][ T5888] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.284561][ T5888] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 392.284572][ T5888] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 392.286771][ T5888] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 392.286795][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.286814][ T5888] usb 1-1: Product: syz [ 392.286827][ T5888] usb 1-1: Manufacturer: syz [ 392.286839][ T5888] usb 1-1: SerialNumber: syz [ 392.399906][ T5888] usb 1-1: config 0 descriptor?? [ 392.401366][ T9560] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 392.401478][ T9560] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 392.608338][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.653321][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.717091][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.720333][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.722023][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.723298][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.725088][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.726290][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.727864][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.728360][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.731619][ T5888] usb 1-1: NFC: intf ffff888039e57000 id ffffffff8e53a6a0 [ 392.801517][ T5888] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 392.850353][ T5888] usb 1-1: USB disconnect, device number 8 [ 392.870882][ T5888] usb 1-1: NFC: intf ffff888039e57000 [ 393.343767][ T6091] team0 (unregistering): Port device team_slave_1 removed [ 394.456352][ T6091] team0 (unregistering): Port device team_slave_0 removed [ 397.171632][ T9234] hsr_slave_0: entered promiscuous mode [ 397.179395][ T9234] hsr_slave_1: entered promiscuous mode [ 397.180005][ T9234] debugfs: 'hsr0' already exists in 'hsr' [ 397.180020][ T9234] Cannot create hsr debugfs directory [ 397.382688][ T6007] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 398.381805][ T6007] usb 2-1: Using ep0 maxpacket: 8 [ 398.437031][ T6007] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 398.437059][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.437077][ T6007] usb 2-1: config 0 has no interface number 0 [ 398.437126][ T6007] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 398.437154][ T6007] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 398.437177][ T6007] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 398.437199][ T6007] usb 2-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 398.437219][ T6007] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 398.437239][ T6007] usb 2-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 398.495933][ T6007] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 398.495962][ T6007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.495982][ T6007] usb 2-1: Product: syz [ 398.495994][ T6007] usb 2-1: Manufacturer: syz [ 398.496007][ T6007] usb 2-1: SerialNumber: syz [ 398.500814][ T6007] usb 2-1: config 0 descriptor?? [ 398.502145][ T9597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 398.502304][ T9597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 398.716736][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.717237][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.719605][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.720413][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.725240][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.729671][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.746509][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.748863][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.767201][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.771916][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.787645][ T6007] usb 2-1: NFC: intf ffff888027c4b000 id ffffffff8e53a6a0 [ 398.901909][ T6007] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 398.953800][ T6007] usb 2-1: USB disconnect, device number 9 [ 398.960025][ T6007] usb 2-1: NFC: intf ffff888027c4b000 [ 400.117177][ T9231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.230575][ T9231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.319318][ T9231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 400.667245][ T9231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 402.844896][ T9234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.978047][ T9234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 403.026009][ T9234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.230215][ T56] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 403.703764][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 403.871060][ T9234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.873112][ T56] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 403.873137][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.873156][ T56] usb 1-1: config 0 has no interface number 0 [ 403.873206][ T56] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 403.873232][ T56] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 403.873257][ T56] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 403.873281][ T56] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.873302][ T56] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 403.873324][ T56] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 403.996742][ T56] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 403.996772][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.996791][ T56] usb 1-1: Product: syz [ 403.996806][ T56] usb 1-1: Manufacturer: syz [ 403.996819][ T56] usb 1-1: SerialNumber: syz [ 404.516364][ T56] usb 1-1: config 0 descriptor?? [ 404.520079][ T9678] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 404.520250][ T9678] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 404.871807][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.941974][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.985260][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.987840][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.993905][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.996377][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.024499][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.031979][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.044099][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.046829][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.649927][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.650054][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.650651][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.690712][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.705510][ T56] usb 1-1: NFC: intf ffff8880217a5000 id ffffffff8e53a6a0 [ 405.757834][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.771777][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.772120][ T56] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 405.822175][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.899560][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.944921][ T56] usb 1-1: USB disconnect, device number 9 [ 405.952132][ T56] usb 1-1: NFC: intf ffff8880217a5000 [ 405.992106][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.996838][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.633720][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.642656][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.920883][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 408.893806][ T9745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1100'. [ 409.173757][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.878515][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.792551][ T5874] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 410.950450][ T5874] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 410.950469][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.950479][ T5874] usb 3-1: Product: syz [ 410.950486][ T5874] usb 3-1: Manufacturer: syz [ 410.950493][ T5874] usb 3-1: SerialNumber: syz [ 410.994138][ T5874] usb 3-1: config 0 descriptor?? [ 411.934541][ T56] usb 3-1: USB disconnect, device number 9 [ 412.252153][ T9783] NFSD: Failed to start, no listeners configured. [ 413.071680][ T9231] veth0_vlan: entered promiscuous mode [ 413.108149][ T9801] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1110'. [ 413.141974][ T9234] veth0_vlan: entered promiscuous mode [ 413.155987][ T9231] veth1_vlan: entered promiscuous mode [ 413.221779][ T9234] veth1_vlan: entered promiscuous mode [ 413.393142][ T9231] veth0_macvtap: entered promiscuous mode [ 413.427178][ T9231] veth1_macvtap: entered promiscuous mode [ 413.464467][ T9234] veth0_macvtap: entered promiscuous mode [ 413.489882][ T9234] veth1_macvtap: entered promiscuous mode [ 413.518898][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.552608][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.590712][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.590782][ T6091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.617240][ T6091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.617600][ T6091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.617646][ T6091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.667520][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.780383][ T1527] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.793428][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.796282][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.802141][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.603287][ T1549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.603308][ T1549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.800684][ T9834] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1120'. [ 417.807185][ T6091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.807207][ T6091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.938595][ T6865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.938614][ T6865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.214679][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.214700][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.735856][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 433.738121][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 433.853958][T10020] 9p: Bad value for 'wfdno' [ 434.491532][T10040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.037171][ T5873] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 438.196194][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 438.198529][ T5873] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 438.198551][ T5873] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 438.198569][ T5873] usb 6-1: config 8 has no interface number 0 [ 438.198612][ T5873] usb 6-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 438.198639][ T5873] usb 6-1: config 8 interface 206 has no altsetting 0 [ 438.280718][ T5873] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 438.280788][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.280845][ T5873] usb 6-1: Product: syz [ 438.280860][ T5873] usb 6-1: Manufacturer: syz [ 438.280915][ T5873] usb 6-1: SerialNumber: syz [ 440.700813][ T5873] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 441.202622][ T5873] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 441.202678][ T5873] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 441.250781][ T5873] usb 6-1: USB disconnect, device number 2 [ 441.259856][ T5873] garmin_gps 6-1:8.206: device disconnected [ 441.572784][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1173'. [ 441.578293][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1173'. [ 441.679844][T10099] 9p: Bad value for 'wfdno' [ 442.253542][T10110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.333402][T10155] trusted_key: syz.2.1187 sent an empty control message without MSG_MORE. [ 445.209733][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.209803][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.859049][T10169] tmpfs: Unknown parameter 'nr_ino' [ 448.154522][T10175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.767454][ T5813] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 452.782491][ T5808] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 452.933812][ T5808] usb 7-1: Using ep0 maxpacket: 8 [ 452.956979][ T5808] usb 7-1: config 0 has an invalid interface number: 122 but max is 0 [ 452.957006][ T5808] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.957026][ T5808] usb 7-1: config 0 has no interface number 0 [ 452.957086][ T5808] usb 7-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 452.957112][ T5808] usb 7-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 452.957134][ T5808] usb 7-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 452.957155][ T5808] usb 7-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 452.957176][ T5808] usb 7-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 452.957198][ T5808] usb 7-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 452.960374][ T5808] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 452.960399][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.960419][ T5808] usb 7-1: Product: syz [ 452.960433][ T5808] usb 7-1: Manufacturer: syz [ 452.960445][ T5808] usb 7-1: SerialNumber: syz [ 453.164767][ T5808] usb 7-1: config 0 descriptor?? [ 453.166450][T10211] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 453.166998][T10211] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 454.982284][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.108018][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.110727][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.111524][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.114002][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.118050][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.120872][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.121545][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.124068][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.125057][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.194241][ T5808] usb 7-1: NFC: intf ffff88802a100000 id ffffffff8e53a6a0 [ 455.250739][ T5808] nfcmrvl 7-1:0.122: NFC: registered with nci successfully [ 455.309228][ T5808] usb 7-1: USB disconnect, device number 2 [ 455.326892][ T5808] usb 7-1: NFC: intf ffff88802a100000 [ 458.474141][T10261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.592048][T10290] tmpfs: Unknown parameter 'nr_ino' [ 463.660731][T10314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.409304][T10365] virtio-fs: tag not found [ 472.300604][T10376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.972522][ T56] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 474.182736][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 474.186780][ T56] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 474.186809][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.186830][ T56] usb 6-1: config 0 has no interface number 0 [ 474.186880][ T56] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 474.186910][ T56] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 474.186936][ T56] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 474.186960][ T56] usb 6-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.186983][ T56] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 474.187005][ T56] usb 6-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 474.299575][ T56] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 474.299668][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.299723][ T56] usb 6-1: Product: syz [ 474.299774][ T56] usb 6-1: Manufacturer: syz [ 474.299827][ T56] usb 6-1: SerialNumber: syz [ 474.450864][ T56] usb 6-1: config 0 descriptor?? [ 474.451947][T10385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 474.452035][T10385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 474.662299][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.671419][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.676312][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.676929][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.690358][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.697750][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.714387][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.714859][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.766831][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.780396][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.797218][ T56] usb 6-1: NFC: intf ffff88801c79f000 id ffffffff8e53a6a0 [ 474.867304][ T56] nfcmrvl 6-1:0.122: NFC: registered with nci successfully [ 474.931938][ T56] usb 6-1: USB disconnect, device number 3 [ 474.961341][ T56] usb 6-1: NFC: intf ffff88801c79f000 [ 475.662515][ T5874] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 475.922504][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 475.933051][ T5874] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 475.933089][ T5874] usb 6-1: config 0 has no interface number 0 [ 475.933132][ T5874] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 475.933155][ T5874] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 475.933179][ T5874] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 475.933204][ T5874] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 475.933251][ T5874] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 475.933273][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.945109][ T5874] usb 6-1: config 0 descriptor?? [ 476.087963][ T5874] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 476.129112][T10422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.039705][ T9702] usb 6-1: USB disconnect, device number 4 [ 479.083186][ T9702] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 479.639879][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1273'. [ 479.673529][ T9702] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 479.822551][ T9702] usb 6-1: Using ep0 maxpacket: 8 [ 479.825224][ T9702] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 479.825348][ T9702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.825368][ T9702] usb 6-1: config 0 has no interface number 0 [ 479.825416][ T9702] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 479.825442][ T9702] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 479.825465][ T9702] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 479.825487][ T9702] usb 6-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.825508][ T9702] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 479.825528][ T9702] usb 6-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 479.934794][ T9702] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 479.934823][ T9702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.934842][ T9702] usb 6-1: Product: syz [ 479.934856][ T9702] usb 6-1: Manufacturer: syz [ 479.934870][ T9702] usb 6-1: SerialNumber: syz [ 479.977630][T10451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.010823][ T9702] usb 6-1: config 0 descriptor?? [ 480.011980][T10444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 480.012057][T10444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 480.251581][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.265277][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.272133][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.272669][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.285433][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.285923][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.313617][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.314224][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.324515][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.341718][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.359753][ T9702] usb 6-1: NFC: intf ffff88802a742000 id ffffffff8e53a6a0 [ 480.457809][ T9702] nfcmrvl 6-1:0.122: NFC: registered with nci successfully [ 480.510349][ T9702] usb 6-1: USB disconnect, device number 5 [ 480.537162][ T9702] usb 6-1: NFC: intf ffff88802a742000 [ 481.723610][ T5910] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 482.269472][ T5910] usb 7-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 482.269491][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.269502][ T5910] usb 7-1: Product: syz [ 482.269510][ T5910] usb 7-1: Manufacturer: syz [ 482.269517][ T5910] usb 7-1: SerialNumber: syz [ 482.305153][ T5910] usb 7-1: config 0 descriptor?? [ 482.436361][T10493] tmpfs: Bad value for 'nr_inodes' [ 482.517940][ T5910] usb 7-1: USB disconnect, device number 3 [ 483.777455][ T56] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 484.005249][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 484.702476][ T56] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 484.702513][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.702533][ T56] usb 1-1: config 0 has no interface number 0 [ 484.702582][ T56] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 484.702609][ T56] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 484.702633][ T56] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 484.702657][ T56] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.702679][ T56] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 484.702701][ T56] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 484.866248][T10520] netlink: 'syz.2.1298': attribute type 2 has an invalid length. [ 484.874894][ T56] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 484.874926][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.874945][ T56] usb 1-1: Product: syz [ 484.874960][ T56] usb 1-1: Manufacturer: syz [ 484.874973][ T56] usb 1-1: SerialNumber: syz [ 484.977610][T10525] virtio-fs: tag not found [ 484.990312][ T56] usb 1-1: config 0 descriptor?? [ 484.991730][T10509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 484.991903][T10509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 485.085695][T10520] : entered promiscuous mode [ 485.447215][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.450412][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.465721][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.466208][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.467783][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.468255][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.476955][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.477434][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.479048][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.479540][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.572231][ T56] usb 1-1: NFC: intf ffff88805e070000 id ffffffff8e53a6a0 [ 485.633369][ T56] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 485.653152][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1301'. [ 485.657261][ T56] usb 1-1: USB disconnect, device number 10 [ 485.663226][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1301'. [ 485.718167][ T56] usb 1-1: NFC: intf ffff88805e070000 [ 485.879243][T10539] 9p: Bad value for 'wfdno' [ 487.281138][ T5873] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 487.441894][ T5873] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 487.441926][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.441946][ T5873] usb 3-1: Product: syz [ 487.441960][ T5873] usb 3-1: Manufacturer: syz [ 487.441974][ T5873] usb 3-1: SerialNumber: syz [ 487.470917][ T5873] usb 3-1: config 0 descriptor?? [ 487.923271][ T5873] usb 3-1: USB disconnect, device number 10 [ 488.214467][T10555] tmpfs: Bad value for 'nr_inodes' [ 489.248965][T10562] virtio-fs: tag not found [ 489.352498][ T5115] Bluetooth: hci5: command 0x0406 tx timeout [ 489.352784][ T5115] Bluetooth: hci6: command 0x0406 tx timeout [ 495.543804][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1318'. [ 495.841886][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1318'. [ 495.908580][ T9702] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 496.052477][ T9702] usb 1-1: Using ep0 maxpacket: 8 [ 496.055312][ T9702] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 496.055337][ T9702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.055357][ T9702] usb 1-1: config 0 has no interface number 0 [ 496.055403][ T9702] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 496.055430][ T9702] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 496.055454][ T9702] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 496.055479][ T9702] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 496.055501][ T9702] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 496.055524][ T9702] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 496.060188][ T9702] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 496.060215][ T9702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.060234][ T9702] usb 1-1: Product: syz [ 496.060247][ T9702] usb 1-1: Manufacturer: syz [ 496.060261][ T9702] usb 1-1: SerialNumber: syz [ 496.214360][ T9702] usb 1-1: config 0 descriptor?? [ 496.252209][T10630] 9p: Bad value for 'wfdno' [ 496.329200][ T9702] usb 1-1: can't set config #0, error -71 [ 496.447113][ T9702] usb 1-1: USB disconnect, device number 11 [ 499.234202][T10663] tmpfs: Bad value for 'nr_inodes' [ 499.239380][T10656] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 499.307791][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.423339][T10671] netlink: 'syz.6.1330': attribute type 1 has an invalid length. [ 500.513125][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1330'. [ 500.543991][T10671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.602740][T10673] macvlan2: entered promiscuous mode [ 500.602765][T10673] macvlan2: entered allmulticast mode [ 500.877034][T10671] bond1: (slave ip6gretap1): making interface the new active one [ 500.878888][T10671] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 501.304459][ T5843] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 501.852453][ T5843] usb 3-1: Using ep0 maxpacket: 8 [ 501.860247][ T5843] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 501.860276][ T5843] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.860295][ T5843] usb 3-1: config 0 has no interface number 0 [ 501.860344][ T5843] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 501.860371][ T5843] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 501.860394][ T5843] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 501.860418][ T5843] usb 3-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 501.860440][ T5843] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 501.860461][ T5843] usb 3-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 501.997280][ T5843] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 501.997309][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.997329][ T5843] usb 3-1: Product: syz [ 501.997343][ T5843] usb 3-1: Manufacturer: syz [ 501.997356][ T5843] usb 3-1: SerialNumber: syz [ 502.099626][ T5843] usb 3-1: config 0 descriptor?? [ 502.283624][T10681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.283800][T10681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.408202][T10691] virtio-fs: tag not found [ 503.092256][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.097912][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.107954][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.116976][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.147200][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.149774][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.169858][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.174243][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.185419][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.187953][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.352514][T10696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1338'. [ 503.625430][ T5843] usb 3-1: NFC: intf ffff8880307e5000 id ffffffff8e53a6a0 [ 504.330332][ T5843] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 504.605662][ T5843] usb 3-1: USB disconnect, device number 11 [ 505.223928][ T5843] usb 3-1: NFC: intf ffff8880307e5000 [ 507.339061][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.339125][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.635313][T10746] tmpfs: Bad value for 'nr_inodes' [ 509.270913][T10754] virtio-fs: tag not found [ 512.178163][ T56] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 513.132455][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 513.134827][ T56] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 513.134853][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.134872][ T56] usb 1-1: config 0 has no interface number 0 [ 513.134919][ T56] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 513.134946][ T56] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 513.134971][ T56] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 513.134994][ T56] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.135017][ T56] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 513.135038][ T56] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 513.177791][ T56] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 513.177820][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.177840][ T56] usb 1-1: Product: syz [ 513.177854][ T56] usb 1-1: Manufacturer: syz [ 513.177868][ T56] usb 1-1: SerialNumber: syz [ 513.304031][ T56] usb 1-1: config 0 descriptor?? [ 513.314515][T10765] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 513.314634][T10765] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 513.549290][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.549793][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.599634][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.619338][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.638614][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.655482][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.725681][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.726476][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.738045][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.744606][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.768769][ T56] usb 1-1: NFC: intf ffff88802c639000 id ffffffff8e53a6a0 [ 513.924970][ T56] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 514.030368][ T56] usb 1-1: USB disconnect, device number 12 [ 514.066181][ T56] usb 1-1: NFC: intf ffff88802c639000 [ 518.353837][ T56] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 518.812411][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 518.851052][ T56] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=1f.cb [ 518.851082][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.851102][ T56] usb 6-1: Product: syz [ 518.851115][ T56] usb 6-1: Manufacturer: syz [ 518.851129][ T56] usb 6-1: SerialNumber: syz [ 518.928669][ T56] usb 6-1: config 0 descriptor?? [ 518.948827][ T56] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 518.948905][ T56] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5 [ 518.974083][ T56] usb-storage 6-1:0.0: USB Mass Storage device detected [ 519.014880][ T56] usb-storage 6-1:0.0: device ignored [ 519.185332][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.185612][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.191860][ T56] usb 6-1: USB disconnect, device number 6 [ 523.909281][T10859] macvtap1: entered promiscuous mode [ 523.909416][T10859] macvtap1: entered allmulticast mode [ 523.914431][T10859] dummy0: entered allmulticast mode [ 523.914565][T10859] dummy0: entered promiscuous mode [ 523.946903][T10859] team0: Device macvtap1 failed to register rx_handler [ 524.620809][T10859] dummy0: left allmulticast mode [ 524.620840][T10859] dummy0: left promiscuous mode [ 529.114976][ T63] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 532.168810][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1410'. [ 532.170100][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1410'. [ 532.398127][T10956] 9p: Bad value for 'wfdno' [ 537.817768][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 542.398360][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 542.400738][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 547.061515][T11071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.695166][T11140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.116044][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1464'. [ 565.972415][ T5874] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 566.142421][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 566.147139][ T5874] usb 7-1: device descriptor read/all, error -71 [ 568.673344][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.673411][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.130232][T11201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.445455][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1478'. [ 576.325506][T11233] tmpfs: Cannot retroactively limit inodes [ 582.480038][T11282] sctp: [Deprecated]: syz.1.1502 (pid 11282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.480038][T11282] Use struct sctp_sack_info instead [ 588.960710][T11332] tmpfs: Cannot retroactively limit inodes [ 591.686549][ T5888] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 591.865801][ T5888] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 591.865819][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.865831][ T5888] usb 3-1: Product: syz [ 591.865845][ T5888] usb 3-1: Manufacturer: syz [ 591.865852][ T5888] usb 3-1: SerialNumber: syz [ 591.877975][ T5888] usb 3-1: config 0 descriptor?? [ 592.251901][ T5808] usb 3-1: USB disconnect, device number 12 [ 597.240804][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.262631][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.264092][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.291492][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.300902][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.368980][ T63] Bluetooth: hci3: command tx timeout [ 601.470278][ T63] Bluetooth: hci3: command tx timeout [ 601.770361][T11405] chnl_net:caif_netlink_parms(): no params data found [ 602.158836][T11405] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.159055][T11405] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.159243][T11405] bridge_slave_0: entered allmulticast mode [ 602.161792][T11405] bridge_slave_0: entered promiscuous mode [ 602.165145][T11405] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.165334][T11405] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.165500][T11405] bridge_slave_1: entered allmulticast mode [ 602.167883][T11405] bridge_slave_1: entered promiscuous mode [ 602.239453][T11405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.244506][T11405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.314909][T11405] team0: Port device team_slave_0 added [ 602.322142][T11405] team0: Port device team_slave_1 added [ 602.390141][T11405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.390158][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.390184][T11405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.396754][T11405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.396769][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.396795][T11405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.548977][T11405] hsr_slave_0: entered promiscuous mode [ 602.551431][T11405] hsr_slave_1: entered promiscuous mode [ 602.558949][T11405] debugfs: 'hsr0' already exists in 'hsr' [ 602.558975][T11405] Cannot create hsr debugfs directory [ 603.802317][ T63] Bluetooth: hci3: command tx timeout [ 605.912472][ T63] Bluetooth: hci3: command tx timeout [ 606.718260][T11405] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 606.805410][T11405] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 606.840035][T11405] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 606.896594][T11405] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 607.351928][T11405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.401561][T11405] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.420439][T10638] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.420512][T10638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.460153][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.460227][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.029404][T11405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.092866][T11527] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1570'. [ 609.504510][T11536] syz.0.1573 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 609.532483][T11536] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 609.532499][T11536] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 609.602932][T11536] vhci_hcd vhci_hcd.0: Device attached [ 609.604596][T11538] vhci_hcd: connection closed [ 609.629477][T10607] vhci_hcd vhci_hcd.0: stop threads [ 609.630817][T10607] vhci_hcd vhci_hcd.0: release socket [ 609.630924][T10607] vhci_hcd vhci_hcd.0: disconnect device [ 611.218064][T11405] veth0_vlan: entered promiscuous mode [ 611.272748][T11405] veth1_vlan: entered promiscuous mode [ 611.476048][T11405] veth0_macvtap: entered promiscuous mode [ 611.538509][T11405] veth1_macvtap: entered promiscuous mode [ 611.710077][T11405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.782182][T11405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.929701][T10602] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.930943][T10602] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.931174][T10602] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.931198][T10602] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.613675][T10607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.613696][T10607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.987876][ T1527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.987890][ T1527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.014748][T11581] tmpfs: Cannot retroactively limit inodes [ 619.403211][T11640] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 619.625797][T11646] tmpfs: Bad value for 'size' [ 623.734019][T11692] tmpfs: Bad value for 'size' [ 624.367225][T11694] trusted_key: encrypted_key: insufficient parameters specified [ 627.458230][T11735] trusted_key: encrypted_key: insufficient parameters specified [ 627.728373][T11736] random: crng reseeded on system resumption [ 627.957534][T11743] tmpfs: Bad value for 'size' [ 629.439482][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.439550][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.650352][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 631.668723][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 631.793857][T11765] 9p: Bad value for 'wfdno' [ 631.833182][ T6007] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 632.029643][ T6007] usb 6-1: Using ep0 maxpacket: 32 [ 632.032017][ T6007] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 632.032048][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 632.032075][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 632.032119][ T6007] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 632.032142][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.048789][ T6007] usb 6-1: config 0 descriptor?? [ 632.050909][T11766] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 632.054286][ T6007] hub 6-1:0.0: USB hub found [ 632.448653][T11784] trusted_key: encrypted_key: insufficient parameters specified [ 632.686988][ T6007] hub 6-1:0.0: 2 ports detected [ 634.411727][ T6007] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 634.411753][ T6007] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 634.432076][ T6007] usbhid 6-1:0.0: can't add hid device: -32 [ 634.432198][ T6007] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 634.470610][ T6007] usb 6-1: USB disconnect, device number 7 [ 634.760378][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 634.822406][ T9702] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 635.004012][ T9702] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 635.004045][ T9702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.004065][ T9702] usb 3-1: Product: syz [ 635.004080][ T9702] usb 3-1: Manufacturer: syz [ 635.004093][ T9702] usb 3-1: SerialNumber: syz [ 635.009688][ T9702] usb 3-1: config 0 descriptor?? [ 635.594681][ T9702] usb 3-1: USB disconnect, device number 13 [ 637.858832][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1667'. [ 637.861303][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1667'. [ 637.989583][T11854] 9p: Bad value for 'wfdno' [ 640.123043][T11883] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1690'. [ 642.484055][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 642.505459][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 642.638962][T11893] 9p: Bad value for 'wfdno' [ 654.429910][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 654.432224][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 654.535933][T12044] 9p: Bad value for 'wfdno' [ 660.086274][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 660.088665][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 660.271455][T12100] 9p: Bad value for 'wfdno' [ 666.176780][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1767'. [ 666.179270][T12149] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1767'. [ 666.307145][T12155] 9p: Bad value for 'wfdno' [ 671.001363][T12194] trusted_key: encrypted_key: key user:syz not found [ 671.722482][ T5874] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 671.876508][ T5874] usb 6-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 671.876526][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.876536][ T5874] usb 6-1: Product: syz [ 671.876544][ T5874] usb 6-1: Manufacturer: syz [ 671.876551][ T5874] usb 6-1: SerialNumber: syz [ 671.933811][ T5874] usb 6-1: config 0 descriptor?? [ 673.072535][ T5874] usb 6-1: USB disconnect, device number 8 [ 679.062366][ T6007] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 679.289657][ T6007] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 679.289677][ T6007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.289688][ T6007] usb 1-1: Product: syz [ 679.289695][ T6007] usb 1-1: Manufacturer: syz [ 679.289702][ T6007] usb 1-1: SerialNumber: syz [ 679.335912][ T6007] usb 1-1: config 0 descriptor?? [ 679.720885][ T5874] usb 1-1: USB disconnect, device number 13 [ 682.702647][ T5873] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 682.899159][ T5873] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 682.899184][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.899195][ T5873] usb 3-1: Product: syz [ 682.899202][ T5873] usb 3-1: Manufacturer: syz [ 682.899209][ T5873] usb 3-1: SerialNumber: syz [ 682.996061][ T5873] usb 3-1: config 0 descriptor?? [ 683.238097][ T5873] usb 3-1: USB disconnect, device number 14 [ 687.832614][ T5873] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 687.930917][T12415] macvtap1: entered promiscuous mode [ 687.930941][T12415] macvtap1: entered allmulticast mode [ 687.933411][T12415] dummy0: entered allmulticast mode [ 687.934411][T12415] dummy0: entered promiscuous mode [ 687.950725][T12415] team0: Device macvtap1 failed to register rx_handler [ 687.997044][ T5873] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 687.997062][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.997072][ T5873] usb 3-1: Product: syz [ 687.997079][ T5873] usb 3-1: Manufacturer: syz [ 687.997086][ T5873] usb 3-1: SerialNumber: syz [ 688.008785][T12415] dummy0: left allmulticast mode [ 688.008814][T12415] dummy0: left promiscuous mode [ 688.045065][ T5873] usb 3-1: config 0 descriptor?? [ 688.251185][ T9702] usb 3-1: USB disconnect, device number 15 [ 689.942358][ T5874] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 690.104678][ T5874] usb 8-1: unable to get BOS descriptor or descriptor too short [ 690.106157][ T5874] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 690.109015][ T5874] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 690.144949][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.144975][ T5874] usb 8-1: Product: syz [ 690.144988][ T5874] usb 8-1: Manufacturer: syz [ 690.145001][ T5874] usb 8-1: SerialNumber: syz [ 691.225521][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.225590][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.443307][ T5874] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 692.313398][ T5874] usb 8-1: device descriptor read/64, error -71 [ 692.602373][ T5874] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 692.761554][ T5874] usb 8-1: unable to get BOS descriptor or descriptor too short [ 692.808088][ T5874] usb 8-1: device firmware changed [ 692.825447][ T5874] usb 8-1: USB disconnect, device number 2 [ 693.712340][ T5874] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 693.864680][ T5874] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.867732][ T5874] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 693.867761][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 693.867782][ T5874] usb 2-1: Product: syz [ 693.867797][ T5874] usb 2-1: Manufacturer: syz [ 693.867811][ T5874] usb 2-1: SerialNumber: syz [ 694.307450][T12475] macvtap1: entered promiscuous mode [ 694.307565][T12475] macvtap1: entered allmulticast mode [ 694.313780][T12475] dummy0: entered promiscuous mode [ 694.313964][T12475] dummy0: entered allmulticast mode [ 694.329283][T12475] team0: Device macvtap1 failed to register rx_handler [ 695.061011][ T5874] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 695.102412][T12475] dummy0: left allmulticast mode [ 695.102697][T12475] dummy0: left promiscuous mode [ 696.232142][ T5874] usb 2-1: USB disconnect, device number 10 [ 696.259537][ T5874] usblp0: removed [ 700.075082][T12533] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 700.773597][ T9702] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 700.926871][ T9702] usb 8-1: Using ep0 maxpacket: 32 [ 701.094635][ T9702] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 701.094668][ T9702] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 701.094695][ T9702] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 701.094737][ T9702] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 701.094759][ T9702] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.224126][ T9702] usb 8-1: config 0 descriptor?? [ 701.225253][T12540] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 701.248009][ T9702] hub 8-1:0.0: USB hub found [ 701.483436][ T9702] hub 8-1:0.0: 2 ports detected [ 702.739545][ T9702] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 702.739624][ T9702] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 703.443534][ T9702] usbhid 8-1:0.0: can't add hid device: -32 [ 703.443643][ T9702] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 703.503368][ T9702] usb 8-1: USB disconnect, device number 3 [ 705.202515][T12573] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 706.690862][ T9702] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 706.883711][ T9702] usb 8-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 706.883742][ T9702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.883761][ T9702] usb 8-1: Product: syz [ 706.883775][ T9702] usb 8-1: Manufacturer: syz [ 706.883789][ T9702] usb 8-1: SerialNumber: syz [ 707.244305][ T9702] usb 8-1: config 0 descriptor?? [ 707.461320][ T5874] usb 8-1: USB disconnect, device number 4 [ 708.937694][T12602] random: crng reseeded on system resumption [ 711.792339][ T56] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 711.942351][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 712.062369][ T56] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 712.062388][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 712.062403][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 712.062428][ T56] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 712.062440][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.074883][ T56] usb 3-1: config 0 descriptor?? [ 712.075918][T12623] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 712.105159][ T56] hub 3-1:0.0: USB hub found [ 712.291550][ T56] hub 3-1:0.0: 2 ports detected [ 713.755351][ T56] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 713.755379][ T56] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 713.818107][ T56] usbhid 3-1:0.0: can't add hid device: -32 [ 713.818234][ T56] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 713.863199][ T56] usb 3-1: USB disconnect, device number 16 [ 716.800021][T12663] random: crng reseeded on system resumption [ 719.172533][T12686] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 720.930907][T12709] fuse: Bad value for 'fd' [ 723.229764][T12726] mmap: syz.7.1954 (12726) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 723.655880][T12735] random: crng reseeded on system resumption [ 723.683849][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 725.164299][T12749] fuse: Bad value for 'fd' [ 730.160917][T12794] random: crng reseeded on system resumption [ 731.250695][T12806] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 736.533776][T12859] sg_write: data in/out 12412/1 bytes for SCSI command 0x1c-- guessing data in; [ 736.533776][T12859] program syz.1.1991 not setting count and/or reply_len properly [ 740.166716][ T5874] IPVS: starting estimator thread 0... [ 740.342761][T12902] IPVS: using max 16 ests per chain, 38400 per kthread [ 740.411833][T12903] program syz.7.2004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 741.453905][T12911] syzkaller1: entered promiscuous mode [ 741.453924][T12911] syzkaller1: entered allmulticast mode [ 743.946829][T12954] loop5: detected capacity change from 0 to 4096 [ 747.234738][T13014] loop5: detected capacity change from 0 to 4096 [ 748.939210][T13044] random: crng reseeded on system resumption [ 748.973578][T13045] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 750.513294][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'. [ 750.521847][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'. [ 751.254445][T13058] 9p: Bad value for 'wfdno' [ 752.212487][ T9702] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 752.328644][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.328707][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.374843][ T9702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 752.375827][ T9702] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 752.377788][ T9702] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 752.377805][ T9702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.377815][ T9702] usb 2-1: Product: syz [ 752.377822][ T9702] usb 2-1: Manufacturer: syz [ 752.377830][ T9702] usb 2-1: SerialNumber: syz [ 752.933287][T13074] loop5: detected capacity change from 0 to 4096 [ 753.236579][ T9702] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 753.406973][ T5888] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 753.855656][ T9702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 753.886693][ T9702] usb 2-1: device firmware changed [ 753.942338][ T9702] usb 2-1: USB disconnect, device number 11 [ 753.982359][ T5888] usb 8-1: Using ep0 maxpacket: 16 [ 753.992044][ T5888] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 753.992076][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.992096][ T5888] usb 8-1: Product: syz [ 753.992109][ T5888] usb 8-1: Manufacturer: syz [ 753.992122][ T5888] usb 8-1: SerialNumber: syz [ 755.099045][ T5888] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 755.139464][ T5888] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 755.140229][ T5888] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 755.140317][ T5888] usb 8-1: media controller created [ 755.261533][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.576636][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 755.586621][ T5888] zl10353_read_register: readreg error (reg=127, ret==-71) [ 755.591159][T13094] 9p: Bad value for 'wfdno' [ 756.275908][T13099] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2070'. [ 756.323999][ T5888] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 756.340434][ T5888] usb 8-1: USB disconnect, device number 5 [ 756.663301][T13114] random: crng reseeded on system resumption [ 756.992400][ T5843] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 758.005908][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 758.010478][ T5843] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 758.033813][ T5843] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 758.033844][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.033864][ T5843] usb 2-1: Product: syz [ 758.033878][ T5843] usb 2-1: Manufacturer: syz [ 758.033893][ T5843] usb 2-1: SerialNumber: syz [ 758.635928][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 758.653962][T13135] 9p: Bad value for 'wfdno' [ 758.863081][ T5843] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 759.039759][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 759.041677][ T5843] usb 2-1: device firmware changed [ 759.088305][ T5843] usb 2-1: USB disconnect, device number 12 [ 759.316332][T13139] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 759.985962][T13149] netlink: 766 bytes leftover after parsing attributes in process `syz.5.2085'. [ 761.606556][T13165] macvtap1: entered promiscuous mode [ 761.606903][T13165] macvtap1: entered allmulticast mode [ 762.800900][T13175] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 763.471161][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2094'. [ 763.541307][T13180] 9p: Bad value for 'wfdno' [ 764.174153][T13186] random: crng reseeded on system resumption [ 764.612322][ T6007] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 764.787530][ T6007] usb 8-1: unable to get BOS descriptor or descriptor too short [ 764.789161][ T6007] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 764.796008][ T6007] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 764.796037][ T6007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.796056][ T6007] usb 8-1: Product: syz [ 764.796070][ T6007] usb 8-1: Manufacturer: syz [ 764.796083][ T6007] usb 8-1: SerialNumber: syz [ 765.243192][T13202] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2098'. [ 766.082642][ T6007] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 768.843686][ T6007] usb 8-1: device not accepting address 6, error -71 [ 769.479336][T13228] macvtap1: entered promiscuous mode [ 769.479353][T13228] macvtap1: entered allmulticast mode [ 769.479599][T13228] dummy0: entered promiscuous mode [ 769.479610][T13228] dummy0: entered allmulticast mode [ 769.481141][T13228] team0: Device macvtap1 failed to register rx_handler [ 769.532366][ T5888] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 769.538867][T13228] dummy0: left allmulticast mode [ 769.539226][T13228] dummy0: left promiscuous mode [ 769.682512][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 769.686545][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.686595][ T5888] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 769.686619][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.763822][ T5888] usb 3-1: config 0 descriptor?? [ 769.845190][ T6007] usb 8-1: USB disconnect, device number 6 [ 770.207762][ T5888] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 772.020085][ T5874] usb 3-1: USB disconnect, device number 17 [ 772.418019][T13241] random: crng reseeded on system resumption [ 773.743954][T13245] netlink: 766 bytes leftover after parsing attributes in process `syz.7.2112'. [ 776.938763][ T5808] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 777.056445][T13283] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2125'. [ 777.072370][ T5873] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 777.112394][ T5808] usb 6-1: Using ep0 maxpacket: 32 [ 777.129955][ T5808] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.129990][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 777.130018][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 777.130064][ T5808] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 777.130087][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.207020][ T5808] usb 6-1: config 0 descriptor?? [ 777.208619][T13271] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 777.230974][ T5808] hub 6-1:0.0: USB hub found [ 777.335115][ T5873] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.335141][ T5873] usb 2-1: config 0 has no interface number 0 [ 777.335172][ T5873] usb 2-1: config 0 interface 1 has no altsetting 0 [ 777.373041][ T5873] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 777.373070][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.373089][ T5873] usb 2-1: Product: syz [ 777.373103][ T5873] usb 2-1: Manufacturer: syz [ 777.373169][ T5873] usb 2-1: SerialNumber: syz [ 777.471615][ T5808] hub 6-1:0.0: 2 ports detected [ 777.581784][ T5873] usb 2-1: config 0 descriptor?? [ 777.849055][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.876912][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.200184][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.213233][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.717170][ T5808] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 778.717406][ T5808] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 778.954294][ T5808] usbhid 6-1:0.0: can't add hid device: -32 [ 778.959023][ T5808] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 779.127627][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.149540][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.160744][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.161248][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.187688][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.218975][ T5888] usb 6-1: USB disconnect, device number 9 [ 779.224283][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.038742][ T5873] msi2500 2-1:0.1: Registered as swradio24 [ 780.038757][ T5873] msi2500 2-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 780.072738][ T5873] usb 2-1: USB disconnect, device number 13 [ 780.229808][T13323] netlink: 766 bytes leftover after parsing attributes in process `syz.5.2137'. [ 781.189794][ T808] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 781.336669][ T37] audit: type=1326 audit(1770455798.244:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dbbaaeb9 code=0x7ffc0000 [ 781.340888][ T37] audit: type=1326 audit(1770455798.244:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88dbb6b78e code=0x7ffc0000 [ 781.340922][ T37] audit: type=1326 audit(1770455798.254:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dbbaaeb9 code=0x7ffc0000 [ 781.340944][ T37] audit: type=1326 audit(1770455798.254:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88dbb6b78e code=0x7ffc0000 [ 781.340965][ T37] audit: type=1326 audit(1770455798.254:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dbbaaeb9 code=0x7ffc0000 [ 781.340991][ T37] audit: type=1326 audit(1770455798.254:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88dbbaaeb9 code=0x7ffc0000 [ 781.341012][ T37] audit: type=1326 audit(1770455798.254:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dbbaaeb9 code=0x7ffc0000 [ 781.341040][ T37] audit: type=1326 audit(1770455798.254:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f88dbbaaeb9 code=0x7ffc0000 [ 781.341064][ T37] audit: type=1326 audit(1770455798.254:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dbbaaeb9 code=0x7ffc0000 [ 781.341085][ T37] audit: type=1326 audit(1770455798.254:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13317 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dbbaaeb9 code=0x7ffc0000 [ 781.421348][ T808] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 781.421378][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.421398][ T808] usb 3-1: Product: syz [ 781.421412][ T808] usb 3-1: Manufacturer: syz [ 781.421425][ T808] usb 3-1: SerialNumber: syz [ 781.721995][ T808] usb 3-1: config 0 descriptor?? [ 781.729783][ T808] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 782.182280][ T808] gspca_sunplus: reg_r err -71 [ 782.182354][ T808] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 782.219948][ T808] usb 3-1: USB disconnect, device number 18 [ 782.312368][ T5873] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 782.518393][ T5873] usb 8-1: Using ep0 maxpacket: 32 [ 782.731879][ T5873] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 782.731908][ T5873] usb 8-1: config 0 has no interface number 0 [ 782.731959][ T5873] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.731986][ T5873] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.732026][ T5873] usb 8-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 782.732050][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.402428][ T5873] usb 8-1: config 0 descriptor?? [ 784.803313][ T808] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 785.392670][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 785.474065][ T808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 785.474101][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 785.474128][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 785.474229][ T808] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 785.474253][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.571670][ T808] usb 2-1: config 0 descriptor?? [ 785.578463][T13347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 786.983880][ T808] hub 2-1:0.0: USB hub found [ 787.059925][ T808] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 787.266565][ T808] usbhid 2-1:0.0: can't add hid device: -71 [ 787.266717][ T808] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 787.517102][T13367] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2149'. [ 787.624458][ T808] usb 2-1: USB disconnect, device number 14 [ 787.631101][ T5888] IPVS: starting estimator thread 0... [ 787.712467][T13370] IPVS: using max 16 ests per chain, 38400 per kthread [ 789.030035][ T5873] usb 8-1: can't set config #0, error -110 [ 789.783359][ T5888] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 790.292643][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 790.672956][ T5888] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.672992][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 790.673028][ T5888] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 790.673049][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.685215][ T5888] usb 1-1: config 0 descriptor?? [ 790.823518][ T5866] usb 8-1: USB disconnect, device number 7 [ 792.333991][ T5888] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 792.519813][ T5888] usb 1-1: USB disconnect, device number 14 [ 792.794802][T13409] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2160'. [ 792.826526][T13402] fido_id[13402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 793.663023][T13417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2164'. [ 795.409750][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 795.409767][ T37] audit: type=1326 audit(1770455812.314:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 795.409807][ T37] audit: type=1326 audit(1770455812.314:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc91caeb78e code=0x7ffc0000 [ 795.409848][ T37] audit: type=1326 audit(1770455812.314:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 795.409886][ T37] audit: type=1326 audit(1770455812.314:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc91caeb78e code=0x7ffc0000 [ 795.409922][ T37] audit: type=1326 audit(1770455812.324:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 795.409964][ T37] audit: type=1326 audit(1770455812.324:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 795.410003][ T37] audit: type=1326 audit(1770455812.324:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 795.410150][ T37] audit: type=1326 audit(1770455812.324:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 795.410191][ T37] audit: type=1326 audit(1770455812.324:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 795.410229][ T37] audit: type=1326 audit(1770455812.324:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13426 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc91caeb78e code=0x7ffc0000 [ 795.712314][ T5843] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 795.882987][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 795.939497][ T5843] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 795.939524][ T5843] usb 3-1: config 0 has no interface number 0 [ 795.939553][ T5843] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.939567][ T5843] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.939589][ T5843] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 795.939601][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.954713][ T5843] usb 3-1: config 0 descriptor?? [ 797.574504][T13448] netlink: 766 bytes leftover after parsing attributes in process `syz.7.2173'. [ 798.472417][ T5874] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 798.622452][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 798.629905][ T5874] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 798.629943][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.680076][ T5874] usb 2-1: config 0 descriptor?? [ 799.147891][ T5874] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 799.227456][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 799.229662][ T5874] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 799.229724][ T5874] usb 2-1: media controller created [ 799.293766][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.422950][ T5874] az6027: usb out operation failed. (-71) [ 800.423197][ T5874] stb0899_attach: Driver disabled by Kconfig [ 800.423210][ T5874] az6027: no front-end attached [ 800.423210][ T5874] [ 800.491165][ T5874] az6027: usb out operation failed. (-71) [ 800.491200][ T5874] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 800.496443][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 800.712420][ T5888] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 800.810972][ T5874] dvb-usb: schedule remote query interval to 400 msecs. [ 800.811000][ T5874] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 800.881833][ T5874] usb 2-1: USB disconnect, device number 15 [ 801.114225][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 801.114258][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 801.404282][ T5843] usbhid 3-1:0.8: can't add hid device: -32 [ 801.404513][ T5843] usbhid 3-1:0.8: probe with driver usbhid failed with error -32 [ 801.514315][ T5874] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 805.130051][T13481] netlink: 766 bytes leftover after parsing attributes in process `syz.5.2184'. [ 806.156755][ T5888] usb 8-1: unable to read config index 1 descriptor/all [ 806.156788][ T5888] usb 8-1: can't read configurations, error -110 [ 806.191736][ T808] usb 3-1: USB disconnect, device number 19 [ 806.352373][ T5888] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 806.482393][ T5888] usb 8-1: device descriptor read/64, error -32 [ 806.592941][ T5888] usb usb8-port1: attempt power cycle [ 808.102352][ T5888] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 808.312361][ T5888] usb 8-1: device not accepting address 10, error -71 [ 810.505068][T13516] netlink: 766 bytes leftover after parsing attributes in process `syz.7.2195'. [ 810.894277][ T5888] IPVS: starting estimator thread 0... [ 810.992411][T13519] IPVS: using max 16 ests per chain, 38400 per kthread [ 812.042335][ T808] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 812.375274][ T808] usb 8-1: Using ep0 maxpacket: 16 [ 812.393595][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 812.393608][ T37] audit: type=1326 audit(1770455829.304:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 812.393668][ T37] audit: type=1326 audit(1770455829.304:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 812.445388][ T37] audit: type=1326 audit(1770455829.364:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5c88ab78e code=0x7ffc0000 [ 812.503061][ T37] audit: type=1326 audit(1770455829.424:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 812.503491][ T37] audit: type=1326 audit(1770455829.424:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 812.558503][ T37] audit: type=1326 audit(1770455829.474:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 812.558607][ T37] audit: type=1326 audit(1770455829.474:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 812.558645][ T37] audit: type=1326 audit(1770455829.474:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 812.558731][ T37] audit: type=1326 audit(1770455829.474:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 812.558767][ T37] audit: type=1326 audit(1770455829.474:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13539 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 812.739500][ T808] usb 8-1: config 0 has no interfaces? [ 812.752788][ T808] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 812.752807][ T808] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 812.752818][ T808] usb 8-1: Manufacturer: syz [ 812.755644][ T808] usb 8-1: config 0 descriptor?? [ 812.952572][ T5873] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 812.992902][T13549] virtio-fs: tag not found [ 813.112893][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 813.144293][ T5873] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 813.144309][ T5873] usb 2-1: config 0 has no interface number 0 [ 813.144336][ T5873] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.144349][ T5873] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.144374][ T5873] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 813.144387][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.147121][ T5873] usb 2-1: config 0 descriptor?? [ 813.631624][ T5873] usbhid 2-1:0.8: can't add hid device: -71 [ 813.631732][ T5873] usbhid 2-1:0.8: probe with driver usbhid failed with error -71 [ 813.715793][ T5873] usb 2-1: USB disconnect, device number 16 [ 813.763612][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.763681][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.433181][ T808] usb 8-1: USB disconnect, device number 12 [ 816.505538][ T5873] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 817.015471][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 817.026371][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 817.026421][ T5873] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 817.026445][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.031378][ T5873] usb 6-1: config 0 descriptor?? [ 817.281462][ T5873] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 817.702299][ T5873] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 817.906718][ T9702] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 818.062331][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 818.064270][ T5873] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.064289][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 818.064307][ T5873] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 818.064320][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.068411][ T5873] usb 3-1: config 0 descriptor?? [ 818.075014][ T9702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.075065][ T9702] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 818.075088][ T9702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.094346][ T9702] usb 1-1: config 0 descriptor?? [ 818.170966][ T808] usb 6-1: USB disconnect, device number 10 [ 818.180051][ T9702] pwc: Askey VC010 type 2 USB webcam detected. [ 818.940967][ T5873] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 818.958994][ T9702] pwc: recv_control_msg error -32 req 02 val 2b00 [ 818.960057][ T9702] pwc: recv_control_msg error -32 req 02 val 2700 [ 818.962399][ T9702] pwc: recv_control_msg error -32 req 02 val 2c00 [ 818.972419][ T9702] pwc: recv_control_msg error -32 req 04 val 1000 [ 819.001773][ T9702] pwc: recv_control_msg error -32 req 04 val 1300 [ 819.003775][ T9702] pwc: recv_control_msg error -32 req 04 val 1400 [ 819.004779][ T9702] pwc: recv_control_msg error -32 req 02 val 2000 [ 819.015947][ T9702] pwc: recv_control_msg error -32 req 02 val 2100 [ 819.111271][ T9702] pwc: recv_control_msg error -71 req 04 val 1500 [ 819.124698][ T5873] usb 3-1: USB disconnect, device number 20 [ 819.145228][ T9702] pwc: recv_control_msg error -71 req 02 val 2500 [ 819.145734][ T9702] pwc: recv_control_msg error -71 req 02 val 2400 [ 819.151349][ T9702] pwc: recv_control_msg error -71 req 02 val 2600 [ 819.151841][ T9702] pwc: recv_control_msg error -71 req 02 val 2900 [ 819.152454][ T9702] pwc: recv_control_msg error -71 req 02 val 2800 [ 819.153444][ T9702] pwc: recv_control_msg error -71 req 04 val 1100 [ 819.153838][ T9702] pwc: recv_control_msg error -71 req 04 val 1200 [ 819.320505][T13594] fido_id[13594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 819.403796][ T9702] pwc: Registered as video103. [ 819.411469][ T9702] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 819.529426][ T9702] usb 1-1: USB disconnect, device number 15 [ 821.501725][ T9702] IPVS: starting estimator thread 0... [ 821.582356][T13620] IPVS: using max 12 ests per chain, 28800 per kthread [ 821.926958][T13624] virtio-fs: tag not found [ 822.888939][ T5873] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 823.264038][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 823.269545][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.269591][ T5873] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 823.269615][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.313681][ T5873] usb 2-1: config 0 descriptor?? [ 823.542937][ T5873] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 824.708540][ T5888] usb 2-1: USB disconnect, device number 17 [ 829.047554][T13693] virtio-fs: tag not found [ 837.631819][T13759] virtio-fs: tag not found [ 837.752310][ T5873] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 838.121336][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.121393][ T5873] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 838.121416][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.178758][ T5873] usb 6-1: config 0 descriptor?? [ 838.220741][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 838.689450][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 838.714423][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 838.715648][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 838.716703][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 838.720341][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 838.749031][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 838.749944][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 838.750632][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 839.009453][ T5873] pwc: recv_control_msg error -71 req 02 val 2500 [ 839.009949][ T5873] pwc: recv_control_msg error -71 req 02 val 2400 [ 839.010394][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 839.035153][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 839.035636][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 839.072490][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 839.213112][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 839.257034][ T5873] pwc: Registered as video103. [ 839.290946][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 839.332921][ T5873] usb 6-1: USB disconnect, device number 11 [ 840.455120][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 840.455132][ T37] audit: type=1326 audit(1770455857.354:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 840.455157][ T37] audit: type=1326 audit(1770455857.364:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5c88ab78e code=0x7ffc0000 [ 840.455178][ T37] audit: type=1326 audit(1770455857.364:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 840.603467][ T37] audit: type=1326 audit(1770455857.374:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5c88ab78e code=0x7ffc0000 [ 840.603523][ T37] audit: type=1326 audit(1770455857.374:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 840.603561][ T37] audit: type=1326 audit(1770455857.374:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 840.603598][ T37] audit: type=1326 audit(1770455857.374:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 840.603634][ T37] audit: type=1326 audit(1770455857.374:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 840.603670][ T37] audit: type=1326 audit(1770455857.374:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 840.603705][ T37] audit: type=1326 audit(1770455857.424:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13770 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c88eaeb9 code=0x7ffc0000 [ 845.582295][ T5873] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 845.612813][T13823] virtio-fs: tag not found [ 845.739653][ T5873] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 845.739735][ T5873] usb 3-1: config 0 has no interface number 0 [ 845.739768][ T5873] usb 3-1: config 0 interface 1 has no altsetting 0 [ 845.748242][ T5873] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 845.748270][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.748290][ T5873] usb 3-1: Product: syz [ 845.748303][ T5873] usb 3-1: Manufacturer: syz [ 845.748317][ T5873] usb 3-1: SerialNumber: syz [ 845.808646][ T5873] usb 3-1: config 0 descriptor?? [ 846.095094][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.095898][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.122045][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.139449][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.419442][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.428558][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.527449][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.530555][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.589241][T13820] block device autoloading is deprecated and will be removed. [ 847.158700][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.168851][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.540914][ T5873] msi2500 3-1:0.1: Registered as swradio24 [ 847.540936][ T5873] msi2500 3-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 847.622112][ T5873] usb 3-1: USB disconnect, device number 21 [ 849.517808][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 849.517826][ T37] audit: type=1326 audit(1770455866.434:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 849.558433][ T37] audit: type=1326 audit(1770455866.434:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 849.558484][ T37] audit: type=1326 audit(1770455866.474:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc91caeb78e code=0x7ffc0000 [ 849.568459][ T37] audit: type=1326 audit(1770455866.484:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 849.568507][ T37] audit: type=1326 audit(1770455866.484:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 849.670941][ T37] audit: type=1326 audit(1770455866.534:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc91caeb78e code=0x7ffc0000 [ 849.670984][ T37] audit: type=1326 audit(1770455866.584:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 849.671006][ T37] audit: type=1326 audit(1770455866.584:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 849.991321][ T37] audit: type=1326 audit(1770455866.814:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 849.991358][ T37] audit: type=1326 audit(1770455866.904:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91cb2aeb9 code=0x7ffc0000 [ 850.352303][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 850.522332][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 850.526858][ T5888] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 850.526874][ T5888] usb 3-1: config 0 has no interface number 0 [ 850.526901][ T5888] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.526915][ T5888] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.526935][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 850.526947][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.593588][ T5888] usb 3-1: config 0 descriptor?? [ 855.103880][ T5888] usbhid 3-1:0.8: can't add hid device: -71 [ 855.103957][ T5888] usbhid 3-1:0.8: probe with driver usbhid failed with error -71 [ 855.129937][ T5888] usb 3-1: USB disconnect, device number 22 [ 858.266017][T13892] virtio-fs: tag not found [ 861.227799][T13910] random: crng reseeded on system resumption [ 870.902357][ T9702] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 871.807871][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'. [ 871.847465][T13946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.852780][T13946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.883040][ T9702] usb 8-1: unable to get BOS descriptor or descriptor too short [ 871.884043][ T9702] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 871.884064][ T9702] usb 8-1: can't read configurations, error -71 [ 876.859667][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.859737][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.442369][T13980] random: crng reseeded on system resumption [ 881.674246][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 881.690942][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 881.715647][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 881.742603][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 881.754950][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 883.930436][ T5813] Bluetooth: hci4: command tx timeout [ 885.998151][ T5813] Bluetooth: hci4: command tx timeout [ 886.321976][T13999] batadv0: entered promiscuous mode [ 886.356217][T13999] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 886.362357][ T808] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 887.222687][T14002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.223485][T14002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.225110][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 887.226185][ T808] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 887.226222][ T808] usb 2-1: can't read configurations, error -71 [ 888.112205][ T5813] Bluetooth: hci4: command tx timeout [ 888.484057][T14007] sctp: [Deprecated]: syz.7.2337 (pid 14007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 888.484057][T14007] Use struct sctp_sack_info instead [ 888.662671][ T5874] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 888.912573][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 888.915049][ T5874] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 888.915104][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.915147][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 888.915170][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.954729][ T5874] usb 3-1: config 0 descriptor?? [ 889.064352][ T5874] hub 3-1:0.0: bad descriptor, ignoring hub [ 889.064397][ T5874] hub 3-1:0.0: probe with driver hub failed with error -5 [ 889.067565][ T5874] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 890.152362][ T5813] Bluetooth: hci4: command tx timeout [ 892.835145][ T6007] usb 3-1: USB disconnect, device number 23 [ 893.243624][ T63] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 893.262524][ T63] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 893.265308][ T63] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 893.303819][ T63] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 893.346524][ T63] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 893.931482][T13984] chnl_net:caif_netlink_parms(): no params data found [ 896.805019][ T5813] Bluetooth: hci5: command tx timeout [ 899.234551][ T5813] Bluetooth: hci5: command tx timeout [ 901.115433][ T56] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 901.384555][ T5813] Bluetooth: hci5: command tx timeout [ 901.894979][ T56] usb 8-1: device descriptor read/all, error -71 [ 902.492460][T13984] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.492591][T13984] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.492855][T13984] bridge_slave_0: entered allmulticast mode [ 902.495907][T13984] bridge_slave_0: entered promiscuous mode [ 902.542266][T13984] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.542393][T13984] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.542610][T13984] bridge_slave_1: entered allmulticast mode [ 902.545504][T13984] bridge_slave_1: entered promiscuous mode [ 903.432365][ T5813] Bluetooth: hci5: command tx timeout [ 903.782276][ T9702] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 904.032340][ T9702] usb 3-1: Using ep0 maxpacket: 32 [ 906.337977][ T9702] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 906.338024][ T9702] usb 3-1: can't read configurations, error -71 [ 906.743268][T14068] fuse: Bad value for 'fd' [ 909.006478][T13984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.101869][T13984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.414858][T13984] team0: Port device team_slave_0 added [ 915.419084][T13984] team0: Port device team_slave_1 added [ 915.502339][ T808] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 915.707211][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 915.708728][ T808] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 915.734004][ T808] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 915.734034][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.734054][ T808] usb 2-1: Product: syz [ 915.734069][ T808] usb 2-1: Manufacturer: syz [ 915.734082][ T808] usb 2-1: SerialNumber: syz [ 917.282327][ T9702] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 917.849220][T13984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.849247][T13984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.849274][T13984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.864008][ T808] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 918.060970][T13984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.060989][T13984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.061016][T13984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.395930][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 920.400643][ T808] usb 2-1: device firmware changed [ 922.899826][ T808] usb 2-1: USB disconnect, device number 20 [ 923.042753][ T9702] usb 3-1: unable to read config index 0 descriptor/start: -110 [ 923.042800][ T9702] usb 3-1: can't read configurations, error -110 [ 923.728574][ T9702] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 923.962941][ T9702] usb 3-1: device descriptor read/64, error -32 [ 924.114724][ T9702] usb usb3-port1: attempt power cycle [ 925.228074][ T9702] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 925.256833][ T9702] usb 3-1: device descriptor read/8, error -32 [ 925.686114][ T9702] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 925.899883][ T9702] usb 3-1: device descriptor read/8, error -32 [ 926.017170][ T9702] usb usb3-port1: unable to enumerate USB device [ 927.131089][T13984] hsr_slave_0: entered promiscuous mode [ 927.152682][T13984] hsr_slave_1: entered promiscuous mode [ 927.153637][T13984] debugfs: 'hsr0' already exists in 'hsr' [ 927.153661][T13984] Cannot create hsr debugfs directory [ 928.405148][T14026] chnl_net:caif_netlink_parms(): no params data found [ 928.560780][ T9702] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 928.752233][ T9702] usb 2-1: Using ep0 maxpacket: 32 [ 928.763226][ T9702] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 928.763277][ T9702] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 928.763319][ T9702] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 928.763342][ T9702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.774975][ T9702] usb 2-1: config 0 descriptor?? [ 929.014338][ T9702] hub 2-1:0.0: bad descriptor, ignoring hub [ 929.014378][ T9702] hub 2-1:0.0: probe with driver hub failed with error -5 [ 929.017548][ T9702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 932.273698][ T6007] usb 2-1: USB disconnect, device number 21 [ 932.273828][T14026] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.273960][T14026] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.274229][T14026] bridge_slave_0: entered allmulticast mode [ 932.327276][T14026] bridge_slave_0: entered promiscuous mode [ 932.332472][ T9702] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 932.334282][T14026] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.344768][T14026] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.345054][T14026] bridge_slave_1: entered allmulticast mode [ 932.352727][T14026] bridge_slave_1: entered promiscuous mode [ 932.574508][ T9702] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 932.574536][ T9702] usb 3-1: config 0 has no interface number 0 [ 932.574568][ T9702] usb 3-1: config 0 interface 1 has no altsetting 0 [ 932.579712][ T9702] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 932.579742][ T9702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.579762][ T9702] usb 3-1: Product: syz [ 932.579776][ T9702] usb 3-1: Manufacturer: syz [ 932.579790][ T9702] usb 3-1: SerialNumber: syz [ 933.900866][ T9702] usb 3-1: config 0 descriptor?? [ 934.310938][T14026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.422159][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.540502][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.550595][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.558765][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.752486][T14026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.774975][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.776210][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.830324][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.015387][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.057364][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.060532][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.906156][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.906197][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.624188][T14026] team0: Port device team_slave_0 added [ 937.658862][T14026] team0: Port device team_slave_1 added [ 937.690559][ T9702] msi2500 3-1:0.1: Registered as swradio24 [ 937.690604][ T9702] msi2500 3-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 937.759747][ T9702] usb 3-1: USB disconnect, device number 30 [ 943.072317][ T9702] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 943.088503][T14026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.088519][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.088544][T14026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.164915][T14026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.164933][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.164957][T14026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.262366][ T9702] usb 3-1: Using ep0 maxpacket: 16 [ 943.266648][ T9702] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 943.293993][ T9702] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 943.294023][ T9702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.294043][ T9702] usb 3-1: Product: syz [ 943.294057][ T9702] usb 3-1: Manufacturer: syz [ 943.294071][ T9702] usb 3-1: SerialNumber: syz [ 944.484773][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.492648][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.511142][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.698524][T13986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.723624][T13986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 944.782330][ T9702] usb 3-1: USB disconnect, device number 31 [ 944.785025][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 944.805126][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 944.972541][T13986] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 945.056097][T13986] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 945.087620][T13986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 946.812369][T13986] Bluetooth: hci0: command tx timeout [ 947.369524][T14026] hsr_slave_0: entered promiscuous mode [ 947.370898][T14026] hsr_slave_1: entered promiscuous mode [ 947.371851][T14026] debugfs: 'hsr0' already exists in 'hsr' [ 947.371874][T14026] Cannot create hsr debugfs directory [ 948.876120][T13986] Bluetooth: hci6: command tx timeout [ 948.884979][T13986] Bluetooth: hci0: command tx timeout [ 950.952321][T13986] Bluetooth: hci0: command tx timeout [ 950.952353][T13986] Bluetooth: hci6: command tx timeout [ 953.132489][ T63] Bluetooth: hci6: command tx timeout [ 953.132522][ T63] Bluetooth: hci0: command tx timeout [ 953.935024][T13986] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 953.939461][T13986] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 953.949490][T13986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 954.001345][T13986] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 954.037261][T13986] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 955.193235][ T63] Bluetooth: hci6: command tx timeout [ 957.288568][T14153] Bluetooth: hci7: command tx timeout [ 957.852327][T14178] random: crng reseeded on system resumption [ 959.352347][T14153] Bluetooth: hci7: command tx timeout [ 961.573660][T14153] Bluetooth: hci7: command tx timeout [ 963.592230][T14153] Bluetooth: hci7: command tx timeout [ 964.713391][ T9702] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 978.302264][ T808] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 984.722258][ T808] usb 2-1: device descriptor read/all, error -110 [ 984.848962][T10605] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.333213][ T808] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 986.732217][ T808] usb 2-1: device descriptor read/64, error -32 [ 986.866537][ T808] usb usb2-port1: attempt power cycle [ 987.332215][ T808] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 987.352613][ T808] usb 2-1: device descriptor read/8, error -32 [ 990.192422][ T808] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 990.402522][ T808] usb 2-1: device descriptor read/8, error -32 [ 990.542333][ T808] usb usb2-port1: unable to enumerate USB device [ 991.207905][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 991.262537][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 991.265281][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.266488][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.283551][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 991.628703][T14208] raw-gadget.0 gadget.1: failed to queue disconnect event [ 993.432345][T14153] Bluetooth: hci4: command tx timeout [ 995.615906][T14153] Bluetooth: hci4: command tx timeout [ 996.617394][ T63] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 996.643727][ T63] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 996.647566][ T63] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 996.648743][ T63] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 996.649953][ T63] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 997.728667][ T63] Bluetooth: hci4: command tx timeout [ 998.092368][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.092438][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.165799][T14148] chnl_net:caif_netlink_parms(): no params data found [ 999.112218][ T63] Bluetooth: hci5: command tx timeout [ 999.832381][ T63] Bluetooth: hci4: command tx timeout [ 1001.972256][ T63] Bluetooth: hci5: command tx timeout [ 1003.950263][T14149] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1004.014048][ T63] Bluetooth: hci5: command tx timeout [ 1005.638519][T14153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1005.661115][T14153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1005.669283][T14153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1005.670466][T14153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1005.671252][T14153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1005.845912][T13986] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1005.850107][T13986] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1005.884887][T13986] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1005.928977][T13986] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1005.930153][T13986] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1006.075528][ T63] Bluetooth: hci5: command tx timeout [ 1007.914569][T13986] Bluetooth: hci2: command tx timeout [ 1008.473057][T13986] Bluetooth: hci8: command tx timeout [ 1009.992260][T13986] Bluetooth: hci2: command tx timeout [ 1010.552252][T13986] Bluetooth: hci8: command tx timeout [ 1012.755087][ T63] Bluetooth: hci8: command tx timeout [ 1012.761041][T13986] Bluetooth: hci2: command tx timeout [ 1014.992342][ T63] Bluetooth: hci2: command tx timeout [ 1014.992378][ T63] Bluetooth: hci8: command tx timeout [ 1023.504879][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1023.754274][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1023.759892][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1023.764002][T14153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1023.766293][T14153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1026.556514][T13986] Bluetooth: hci0: command tx timeout [ 1028.643486][T13986] Bluetooth: hci0: command tx timeout [ 1029.452118][ C0] sched: DL replenish lagged too much [ 1030.814047][T13986] Bluetooth: hci0: command tx timeout [ 1032.882611][T13986] Bluetooth: hci0: command tx timeout [ 1046.733640][T14153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1046.741699][T14153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1046.776736][T14153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1046.812291][T14153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1046.912935][T14153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1049.032259][T14153] Bluetooth: hci6: command tx timeout [ 1051.112232][T14153] Bluetooth: hci6: command tx timeout [ 1053.464905][T14153] Bluetooth: hci6: command tx timeout [ 1054.760128][T13986] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1054.832365][T13986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1054.835428][T13986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1054.868323][T13986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1054.869300][T13986] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1055.562352][T13986] Bluetooth: hci6: command tx timeout [ 1056.952758][T13986] Bluetooth: hci4: command tx timeout [ 1059.072224][T14153] Bluetooth: hci4: command tx timeout [ 1059.519237][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.519308][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.112427][T14153] Bluetooth: hci4: command tx timeout [ 1063.202268][T14153] Bluetooth: hci4: command tx timeout [ 1070.156882][T13986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1070.195386][T13986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1070.208154][T13986] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1070.221953][T13986] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1070.230021][T13986] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1070.531471][T14153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1070.548841][T14153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1070.549278][T14153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1070.563942][T14153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1070.572756][T14153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1072.422234][T14153] Bluetooth: hci5: command tx timeout [ 1072.712457][T14153] Bluetooth: hci7: command tx timeout [ 1074.472448][T14153] Bluetooth: hci5: command tx timeout [ 1075.274554][T14242] chnl_net:caif_netlink_parms(): no params data found [ 1075.414501][T14153] Bluetooth: hci7: command tx timeout [ 1076.552363][T14153] Bluetooth: hci5: command tx timeout [ 1077.432445][T14153] Bluetooth: hci7: command tx timeout [ 1078.632162][T14153] Bluetooth: hci5: command tx timeout [ 1078.713300][ T38] INFO: task syz.7.2364:14108 blocked for more than 143 seconds. [ 1078.713343][ T38] Not tainted syzkaller #0 [ 1078.713353][ T38] Blocked by coredump. [ 1078.713359][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1078.713368][ T38] task:syz.7.2364 state:D stack:24568 pid:14108 tgid:14106 ppid:11405 task_flags:0x40054c flags:0x00080000 [ 1078.713437][ T38] Call Trace: [ 1078.713447][ T38] [ 1078.713460][ T38] __schedule+0x1472/0x4fe0 [ 1078.713622][ T38] ? __pfx___schedule+0x10/0x10 [ 1078.713654][ T38] ? schedule+0x90/0x360 [ 1078.713677][ T38] schedule+0x164/0x360 [ 1078.713701][ T38] schedule_timeout+0xc3/0x2c0 [ 1078.713749][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1078.713772][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1078.713808][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1078.713828][ T38] ? wait_for_completion+0x274/0x5e0 [ 1078.713853][ T38] wait_for_completion+0x2cc/0x5e0 [ 1078.713887][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1078.713929][ T38] exit_aio+0x319/0x3f0 [ 1078.713954][ T38] ? __pfx_exit_aio+0x10/0x10 [ 1078.713982][ T38] ? uprobe[ 1078.713982][ T38] ? uprobe_clear_state+0x288/0x2a0 [ 1078.714012][ T38] __mmput+0x68/0x3d0 [ 1078.714034][ T38] exit_mm+0x168/0x220 [ 1078.714059][ T38] do_exit+0x62e/0x2320 [ 1078.714084][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.714107][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1078.714156][ T38] ? __pfx_do_exit+0x10/0x10 [ 1078.714176][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1078.714195][ T38] ? reacquire_held_locks+0x104/0x190 [ 1078.714216][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1078.714246][ T38] do_group_exit+0x21b/0x2d0 [ 1078.714269][ T38] ? rt_spin_unlock+0x160/0x200 [ 1078.714290][ T38] get_signal+0x125c/0x1310 [ 1078.714330][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 1078.714361][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1078.714395][ T38] ? __pfx___se_sys_futex+0x10/0x10 [ 1078.714423][ T38] exit_to_user_mode_loop+0x86/0x480 [ 1078.714445][ T38] ? rcu_is_watching+0x15/0xb0 [ 1078.714469][ T38] do_syscall_64+0x2b7/0xf80 [ 1078.714492][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.714510][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1078.714533][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.714551][ T38] RIP: 0033:0x7f88dbbaaeb9 [ 1078.714574][ T38] RSP: 002b:00007f88d9dca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1078.714594][ T38] RAX: fffffffffffffe00 RBX: 00007f88dbe26098 RCX: 00007f88dbbaaeb9 [ 1078.714608][ T38] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f88dbe26098 [ 1078.714620][ T38] RBP: 00007f88dbe26090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.714632][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.714644][ T38] R13: 00007f88dbe26128 R14: 00007ffe9a517430 R15: 00007ffe9a517518 [ 1078.714675][ T38] [ 1078.714722][ T38] [ 1078.714722][ T38] Showing all locks held in the system: [ 1078.714732][ T38] 4 locks held by kworker/u8:1/13: [ 1078.714744][ T38] 3 locks held by rcuc/0/20: [ 1078.714755][ T38] 5 locks held by ksoftirqd/1/30: [ 1078.714766][ T38] 1 lock held by khungtaskd/38: [ 1078.714776][ T38] #0: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1078.714829][ T38] 9 locks held by kworker/u8:2/41: [ 1078.714852][ T38] 6 locks held by kworker/u8:9/1527: [ 1078.714875][ T38] 2 locks held by klogd/5154: [ 1078.714885][ T38] #0: ffffffff8dd03250 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1078.714939][ T38] #1: ffff88801da8e858 (&n->list_lock){+.+.}-{3:3}, at: __put_partials+0x55/0x170 [ 1078.714984][ T38] 2 locks held by getty/5557: [ 1078.714993][ T38] #0: ffff888035b2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1078.715041][ T38] #1: ffffc900041762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1078.715090][ T38] 4 locks held by kworker/1:4/5866: [ 1078.715102][ T38] 2 locks held by kworker/u8:13/6091: [ 1078.715113][ T38] #0: ffff88801c78e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1078.715163][ T38] #1: ffffc90005fd7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1078.715207][ T38] 1 lock held by syz.1.95/6258: [ 1078.715217][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.715265][ T38] 2 locks held by kworker/u8:18/6867: [ 1078.715275][ T38] #0: ffff88801c78e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1078.715317][ T38] #1: ffffc9000d3dfbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1078.715359][ T38] 3 locks held by kworker/u8:19/6871: [ 1078.715370][ T38] #0: ffff88813fe69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1078.715416][ T38] #1: ffffc9000d41fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1078.715457][ T38] #2: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1078.715546][ T38] 2 locks held by kworker/u8:4/10602: [ 1078.715558][ T38] #0: ffff88801c78e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1078.715600][ T38] #1: ffffc9000c81fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1078.715642][ T38] 6 locks held by kworker/u8:5/10605: [ 1078.715653][ T38] #0: ffff88801aad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1078.715694][ T38] #1: ffffc9000c82fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1078.715736][ T38] #2: ffffffff8ef2cf80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 1078.715810][ T38] #3: ffff888027c4a0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 1078.715912][ T38] #4: ffff888063312300 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 1078.715969][ T38] #5: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716019][ T38] 1 lock held by syz.0.2326/13962: [ 1078.716030][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716075][ T38] 1 lock held by syz-executor/13984: [ 1078.716086][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716134][ T38] 1 lock held by syz-executor/14026: [ 1078.716145][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716193][ T38] 1 lock held by syz-executor/14148: [ 1078.716204][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716250][ T38] 1 lock held by syz-executor/14149: [ 1078.716261][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716308][ T38] 1 lock held by syz-executor/14170: [ 1078.716319][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716365][ T38] 1 lock held by syz.2.2382/14193: [ 1078.716375][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716422][ T38] 1 lock held by syz-executor/14215: [ 1078.716432][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716479][ T38] 1 lock held by syz-executor/14223: [ 1078.716490][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1078.716536][ T38] 1 lock held by syz-executor/14234: [ 1078.716547][ T38] #0: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1078.716592][ T38] 2 locks held by syz-executor/14236: [ 1078.716603][ T38] #0: ffff888061ebcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1078.716696][ T38] #1: ffff888061ebc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1078.716774][ T38] 2 locks held by syz-executor/14260: [ 1078.716784][ T38] #0: ffffffff8f480458 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1078.716829][ T38] #1: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1078.716901][ T38] 1 lock held by syz-executor/14269: [ 1078.716912][ T38] #0: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e10 [ 1078.716964][ T38] 2 locks held by syz-executor/14274: [ 1078.716975][ T38] #0: ffffffff8ef2cf80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1078.717020][ T38] #1: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1078.717088][ T38] 2 locks held by syz-executor/14279: [ 1078.717099][ T38] #0: ffffffff8ef2cf80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1078.717144][ T38] #1: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 1078.717241][ T38] 4 locks held by syz-executor/14283: [ 1078.717253][ T38] [ 1078.717258][ T38] ============================================= [ 1078.717258][ T38] [ 1078.717271][ T38] NMI backtrace for cpu 1 [ 1078.717298][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.717345][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1078.717370][ T38] Call Trace: [ 1078.717387][ T38] [ 1078.717403][ T38] dump_stack_lvl+0xe8/0x150 [ 1078.717460][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1078.717511][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1078.717531][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1078.717553][ T38] sys_info+0x135/0x170 [ 1078.717593][ T38] watchdog+0xf90/0xfe0 [ 1078.717620][ T38] ? watchdog+0x209/0xfe0 [ 1078.717649][ T38] kthread+0x726/0x8b0 [ 1078.717672][ T38] ? __pfx_watchdog+0x10/0x10 [ 1078.717694][ T38] ? __pfx_kthread+0x10/0x10 [ 1078.717711][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1078.717738][ T38] ? rt_spin_unlock+0x160/0x200 [ 1078.717755][ T38] ? __pfx_kthread+0x10/0x10 [ 1078.717776][ T38] ret_from_fork+0x51b/0xa40 [ 1078.717798][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.717815][ T38] ? __switch_to+0xc82/0x1410 [ 1078.717842][ T38] ? __pfx_kthread+0x10/0x10 [ 1078.717864][ T38] ret_from_fork_asm+0x1a/0x30 [ 1078.717898][ T38] [ 1078.717927][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1078.717956][ C0] NMI backtrace for cpu 0 [ 1078.717975][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.717992][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1078.718000][ C0] RIP: 0010:rcu_is_watching+0x4e/0xb0 [ 1078.718020][ C0] Code: ff df 4c 8d 34 dd d0 6d 5d 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ac 47 7f 00 48 c7 c3 58 ac 26 92 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d a9 [ 1078.718034][ C0] RSP: 0018:ffffc90000157568 EFLAGS: 00000083 [ 1078.718047][ C0] RAX: 1ffffffff1abadba RBX: ffff8880b8833c58 RCX: 0000000080000002 [ 1078.718059][ C0] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 1078.718069][ C0] RBP: ffffffff8b0fd8ff R08: 0000000000000001 R09: 0000000000000000 [ 1078.718079][ C0] R10: dffffc0000000000 R11: fffffbfff1e8fc8f R12: 0000000000000000 [ 1078.718089][ C0] R13: ffff8880b8838cb8 R14: ffffffff8d5d6dd0 R15: dffffc0000000000 [ 1078.718100][ C0] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 1078.718113][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1078.718123][ C0] CR2: 00007ffeb0fc8d48 CR3: 000000003ea6e000 CR4: 00000000003526f0 [ 1078.718137][ C0] Call Trace: [ 1078.718142][ C0] [ 1078.718149][ C0] lock_acquire+0x5f/0x330 [ 1078.718167][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1078.718185][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 1078.718202][ C0] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1078.718216][ C0] rt_mutex_slowunlock+0xbf/0x8b0 [ 1078.718231][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1078.718247][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1078.718265][ C0] ? rt_spin_unlock+0x160/0x200 [ 1078.718281][ C0] napi_skb_cache_get+0x2e4/0x410 [ 1078.718367][ C0] ? __alloc_skb+0x193/0x390 [ 1078.718385][ C0] __alloc_skb+0x1a7/0x390 [ 1078.718405][ C0] __netdev_alloc_skb+0xc0/0x4f0 [ 1078.718421][ C0] __ieee80211_beacon_get+0xca4/0x1860 [ 1078.718462][ C0] ? __ieee80211_beacon_get+0x36/0x1860 [ 1078.718481][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1078.718498][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1078.718512][ C0] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1078.718528][ C0] ? __perf_event_task_sched_in+0x1606/0x1800 [ 1078.718547][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 1078.718571][ C0] __iterate_interfaces+0x2ab/0x590 [ 1078.718611][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1078.718630][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1078.718650][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1078.718673][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1078.718694][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 1078.718711][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1078.718726][ C0] __hrtimer_run_queues+0x54c/0xd10 [ 1078.718753][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1078.718770][ C0] ? read_tsc+0x9/0x20 [ 1078.718792][ C0] hrtimer_run_softirq+0x192/0x5d0 [ 1078.718815][ C0] handle_softirqs+0x1de/0x640 [ 1078.718834][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1078.718849][ C0] run_ktimerd+0x69/0x100 [ 1078.718865][ C0] smpboot_thread_fn+0x541/0xa50 [ 1078.718880][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1078.718899][ C0] kthread+0x726/0x8b0 [ 1078.718916][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1078.718931][ C0] ? __pfx_kthread+0x10/0x10 [ 1078.718945][ C0] ? rt_spin_unlock+0x14f/0x200 [ 1078.718962][ C0] ? rt_spin_unlock+0x160/0x200 [ 1078.718976][ C0] ? __pfx_kthread+0x10/0x10 [ 1078.718992][ C0] ret_from_fork+0x51b/0xa40 [ 1078.719007][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.719021][ C0] ? __switch_to+0xc82/0x1410 [ 1078.719041][ C0] ? __pfx_kthread+0x10/0x10 [ 1078.719057][ C0] ret_from_fork_asm+0x1a/0x30 [ 1078.719082][ C0] [ 1078.892305][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1078.892329][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.892348][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1078.892358][ T38] Call Trace: [ 1078.892365][ T38] [ 1078.892373][ T38] vpanic+0x1e0/0x670 [ 1078.892403][ T38] panic+0xc5/0xd0 [ 1078.892422][ T38] ? __pfx_panic+0x10/0x10 [ 1078.892444][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1078.892467][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1078.892488][ T38] watchdog+0xfda/0xfe0 [ 1078.892515][ T38] ? watchdog+0x209/0xfe0 [ 1078.892541][ T38] kthread+0x726/0x8b0 [ 1078.892563][ T38] ? __pfx_watchdog+0x10/0x10 [ 1078.892582][ T38] ? __pfx_kthread+0x10/0x10 [ 1078.892598][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1078.892619][ T38] ? rt_spin_unlock+0x160/0x200 [ 1078.892656][ T38] ? __pfx_kthread+0x10/0x10 [ 1078.892675][ T38] ret_from_fork+0x51b/0xa40 [ 1078.892695][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.892710][ T38] ? __switch_to+0xc82/0x1410 [ 1078.892736][ T38] ? __pfx_kthread+0x10/0x10 [ 1078.892755][ T38] ret_from_fork_asm+0x1a/0x30 [ 1078.892789][ T38] [ 1078.893151][ T38] Kernel Offset: disabled