last executing test programs: 21.731578259s ago: executing program 3 (id=897): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='svcrdma_sq_post_err\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000080)) r8 = dup(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000240)={0x1, r8}) close_range(r5, r6, 0x0) 20.655211822s ago: executing program 3 (id=902): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) pipe2(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8, 0x2}, [@l2cap_conf_req={{0x4, 0x0, 0x4}}]}}, 0x11) dup(0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffff000}], 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = fcntl$dupfd(r0, 0x0, r3) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x74, 0x93, 0x1d, 0x40, 0xc45, 0x614a, 0xe6af, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x80, 0xf4}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000d, 0x80010, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000300)={0x14, &(0x7f0000000380)={0x0, 0xb, 0x56, {0x56, 0x30, "da2c26b034eb01477ff43ec5c9c331eba9a4224d0b884dfb278595c0e4b117f7e2f0c854cdb0fefdaffbaf3e4acc60dcc88aa2c84006a042e71dbc985f479a5d9e375c40f2a016e8adf28539be1e9482a4445d6a"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000500)={0x20, 0xe, 0xed, "77104f62a1c9ab3fc6ac42c576cd3a28437ed4b94ec5973939b5b1abc7f3c1e08123bd74401486ccbbe32628e4d0eb803355a95aa492759ed76ddc46a0e6709f464a27ca5981d4b65e89414f405a6a0fc5e11fee1214a33c8b94e4c82954490d963931bf4bc9d81299fdc93494f2c84266c54c4a0e070394b0240b223edbec6a7a488feb81f41689a19a852a15fff1993a40bb3981513a4ea1cbb70298cdf832aa0e0fb9bb47cd51516bb6424de84e4fae59423582a188bc4dc679addfa04f4b5bc5fa383b025700c00f53e66717fc13117cc5dd22c1730eef5e7da0c58793dbd6a2fea6d8ef584318df6d8a9a"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}}) r7 = eventfd2(0x8001, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000000140)={0x281}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) waitid$P_PIDFD(0x3, r5, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) syz_usb_connect(0x0, 0x2d, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4c081) 16.737856991s ago: executing program 3 (id=917): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4a) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000003c0)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="2601000000010500000000", 0xb}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) 15.716158306s ago: executing program 3 (id=923): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x4, 0x4}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21, 0x3, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x3b, r6}, {0x0, 0x0, 0x6, 0xe322, 0x81, 0x100000001, 0x0, 0x7fffffffffffffff}, {0x9, 0x6, 0xf31, 0x401}, 0x0, 0x6e6bb6}, {{@in=@loopback, 0x4d6, 0xa0}, 0x2, @in=@broadcast, 0x3505, 0x2, 0x3, 0x2, 0x7, 0x5}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) 14.492378276s ago: executing program 3 (id=926): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 12.876769449s ago: executing program 3 (id=932): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000000)="cc", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 10.210553223s ago: executing program 1 (id=947): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = accept$alg(r0, 0x0, 0x0) r7 = dup(r6) r8 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r8, 0x200004) read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r7, r8, 0x0, 0x80001d00c0d1) 7.614498758s ago: executing program 1 (id=951): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000000)="cc", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 7.4763408s ago: executing program 0 (id=952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000003d80)=ANY=[@ANYBLOB="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"], 0x1009, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001d80)="2bc5cc8c6027f8cefe21a501e44a24f38e4863c5448d0613f4b64c131dabab60801785c3470d3c5c4d96eb5982a81fddecf8252f56798472af5e4a1549b77cb6a1f15f7609505290445411fe24cea60e764ddb28dd048da7e15936a2cc2356242c45c5bef3384fcca8b2e47251a77da10220a4f3bda683880adf8f36d4b30d3a723628f09070253701ed43b35ea9a35a5f8c32956869f91162678746905f6753172fe2f82ce6f94f69344557e86e563eff02fc193823f7ed55b08ed13b72a98f3ba79afe2a9aabb8bea27aa3629f6b3fd002eebb2326c68e809221a4925184c78fcef6447d22cd55d8576ecdf7445082a0e6076c93860d0b0eccdfd4e6e5f45fba21cce8e98c35d295d83072307666dcf02a390ec37ce4b363fa30cd1e3f1797a47279901041aa0f92bfad73cdd132245be95b41d522fa8fc54838aa09c36a7fccf563e85aa46e1a28724c475f733d109c50b7fd252a2bf84d467ddcfd132922568cc20fbf36f798ea0ecbd90915b359c568fa2e438fd8ae94a0028b9a3ba2ab29608d1fd6cab8e54b637bfdefffcb7d9a0e7d7de25d3e63f412e07797a7306bf4a4379dabd9e3a01faa1e923fd54bda66b3109d60c46cfe4b94b5eae64f2b8fad4ab7f8c19fc677f11e1c1221b14e53ca35cdef522b80d05c81f72198a0dbcda7835bbd26355aac49516e400b8c9edd7c43d0830d76bc5b59e04a7ce4cbfccdafb2e17115e305a90e5f60045a208421b0226fe1381f9fa1e8627c608e94853c9110a8ced4ba0f62aee54724d8ef8aa19b6afe127e86abde815845192a57928ec48d7ad5d687cf15ce054a4342201bdbc2109a68b51ecdce8ec2fa63015d0c69d668dc18241ef82a1af24762262206b86ab951069cc64aeb4e3621e984b47633714a", 0x282}], 0x1, 0x0, 0x0) 7.086745399s ago: executing program 4 (id=954): r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x4000000, 0x200, 0x5, 0x393, 0x0, r4}, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) read(r7, &(0x7f0000002340)=""/4096, 0x1002) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.63017488s ago: executing program 4 (id=955): socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=0xfffffff7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/18, @ANYRES32=r4], 0x20}}, 0x0) 6.515985526s ago: executing program 1 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x66, &(0x7f0000000440), &(0x7f0000000140)=0xc) r3 = dup(r1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = userfaultfd(0x801) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r8}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/170, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4087}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0xa, @sdr={0x4c314356}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000205000400000000000900020073797a30000000000500010007000000050005000a000400140007800800114000000000080012400000ffff0d000300686173683a6e6574"], 0x5c}}, 0x0) r9 = syz_usb_connect(0x5, 0x53, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x9d, 0x41, 0x87, 0x10, 0x85a, 0x8, 0x5688, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x58, 0xc5, 0x15, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}], [{{0x9, 0x5, 0xd}}, {}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) 6.417539126s ago: executing program 0 (id=957): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 5.649726302s ago: executing program 2 (id=958): socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="040900000000000000001b73d3f13beeaefe48f8040095402f915170770dc8526bbf87534c2dd1e3e4e7872729e09033ea57dc5551eacc2dfb696c75a310b65ea4bf3288473416c5a12644b31d7672cae43f78ec75d0cef490c0adb3808fb63f4f880567eab9df53fc37dafe175c0b761ef1c200000000000000000000000000aaa60c2ea2ec8303a16a62823326647c63d67bdcb6fcf7121a7ee9092d557e06d21d5b96b7b36d8927f1ffe370a89ff87a0a6316303edcfb01c839ee02973064224bee385eae3fa33b9c9927cf33efa6febd51f06f9db30c4795b4e2556e5185c02cdc"], 0xd) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="042c1103c80000000000a406000000000000084db27ea974c5f7161897744ea3c60e5a0bc19ff844b91cd30d5e71923a19049d48a6bf7b35dda049b5ee3280ffca3de6c953668510fd"], 0x14) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="03c90058cd294fbcedc17ccfa4025a1e5777b4814b0663f4852deb97559d7624bd505e611ef8a55937ffffffffffffff7f293408287051702a79e7442da8de9e11bf6e9357e6edea2d50e82f055f6f923cd4e59e223193d487cfa619"], 0x5c) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ftruncate(r0, 0x4) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/130, 0x82}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="030f0404000000000000001620"], 0x7) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x1608d87, 0x4, 0x10001, 0x4, 0x8000, 0x9, 0x5, 0x7, 0xffffffff, 0x0, 0x414, 0x2, 0x10001, 0xfffffffffffff924, 0xffffffff7fffffff], 0x1, 0x280}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x80984120, &(0x7f0000000080)) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ab9000/0x1000)=nil, 0x1000, 0x1) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e08001b0cfddb000000c18e01e451229d0572e2f72ec5c4773a0f1136aacc825ea4bcc296d6d698ba56bc5ad0cfb3d5629df320f0161c31fa3a89ed00989b33f0d916f4b6f345de56d2586f0f36275ca5774f211c7fb3316eaa073ac87919cc9a5f5824d2fc01e80e7b144f253f1e9290427b1e6ba7b2378bd67b8e422dee6eaf90d445dd57be43bdb1b8252e21777c"], 0xb) msync(&(0x7f0000377000/0x4000)=nil, 0x4000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="044206000000000000"], 0x9) socket$igmp6(0xa, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x68}}}, 0x7) r2 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000, 0x2}, 0x1c) 5.469755066s ago: executing program 0 (id=959): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.5261199s ago: executing program 2 (id=960): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x32, &(0x7f0000004340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8f6}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x711}}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0xdf, 0x1, 0x7, 0x497, 0x1}, @ldst={0x2, 0x0, 0x2, 0xb, 0xb, 0x1c2, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000080)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="02040400d3fc02000000ab5d71acedd7c9560385dcb1894f", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000a00)=0x10, 0x0) sendmmsg$sock(r6, &(0x7f0000000e00)=[{{&(0x7f0000000a40)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="160c5fcd63438b8610de938f9d70db6d3b4c4b7530b525393ef65b76ef", 0x1d}, {&(0x7f0000000b00)="14b41d6bbcd295d0b323414e177ba5ef0287d2b2", 0x14}, {&(0x7f0000000b40)="3f9a09724a7118f3016e185ce882f5d466268e71c1ed34376f9a398676602f508f", 0x21}, {&(0x7f0000000c00)="8088e0b20fec5be91084e36c75df22967d06b20cc4ef222bfd7fcb421a97e7a77facfbe2", 0x24}, {0x0}], 0x5, &(0x7f0000000dc0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}}], 0x1, 0x90) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000009c0)={0x38, r2, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff1d, 0x2}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}}, 0x24000800) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x2, &(0x7f0000004240)) 4.513093588s ago: executing program 4 (id=961): r0 = syz_io_uring_setup(0x2a16, &(0x7f0000000300)={0x0, 0x0, 0x24}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000006e80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="103b0000000000000000000007000000"], 0x10}}], 0x1, 0xbb8) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x4f24844e97975395) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x27e, 0x0, &(0x7f0000000500)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb157470d54635a1a5b7075c77dfdb97155af8fa282fcc5ca5bad36839e0cad1304c542be170a44da4089a32bc3f35a85a6e30b8d233809335a4274938505517a26728b643c2f04917afe55c68759adea3bb70f5b5c3c59fc24d6e3835c110420cfd6de096f8dec90f5f577744d2d0f3ec21819253cdb102d50678293328726f1c4f7163e28e79ab4767e3054dfa9a11b1fdafb8757b2a91f8283ad01712062048b52b5cfcaf648fe760a98ee82fbb1836c88434e0b36f9b56c4d3cd8b42566cba88ddb7418762cd8495a4ec8de7952789c2a6d37cdbbecde53ffea86db893181d9b5c7d4663d1bd78c9cb87af7cbfa54a1b2c98432ef5ba6f43c358ae873495f46850d56d83f3d7d376b3b6120ffe93c8ab6b6f214316d8c3376a5a65d173b6e4243326c729163050547d49338a737bc894f487bc9b51e75ac2031ea714ed6c917f13e3cc0ee85a75e9a98a42f9aad6f1e244c1daa06ee55b205e11aa3a2982387210bccd26c5108f2a548b06dd0a0520ca8f99532ab0a4fd8c33f0f01ad40b74ef4e9f0d01b7bbc8aa69296cca1f19d92c"}) write$sequencer(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="9300000000000000408f8bf9ad859e1c202d215864e1c3dccdb9df15a54077ee34620c27a12cec9c1b2a20fe2a149a2f1a9b2f7b1e00d97d75ab1b2f211cffb2940c2894962f1cb796fc0b23992ab7765f87efa34131c92f855bc9c7177231274aac36f7190427d00c72990139d3ed8813ca2179ef855fa0edcd1b30b356e749e83f0ad6cec86fd2abf188c8e3ccc3f8ef09a54956d3764b9a"], 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) r12 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00'}) 4.40632487s ago: executing program 0 (id=962): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}, 0x0) 4.361608367s ago: executing program 2 (id=963): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, r1, 0x2e, 0x0, 0x0, @prog_id}, 0x20) 4.197383807s ago: executing program 2 (id=964): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) splice(r3, 0x0, r0, 0x0, 0x800, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) close(r4) 3.588018698s ago: executing program 1 (id=965): r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x4000000, 0x200, 0x5, 0x393, 0x0, r4}, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x2a8a80, 0x0) read(0xffffffffffffffff, &(0x7f0000002340)=""/4096, 0x1002) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.454667085s ago: executing program 4 (id=966): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='svcrdma_sq_post_err\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000080)) r8 = dup(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000240)={0x1, r8}) close_range(r5, r6, 0x0) 3.220762526s ago: executing program 2 (id=967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000080)={0x1, {0x0, 0x10000000, 0x7, 0x1}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000002c0)={0xc, r7}) 2.301507726s ago: executing program 4 (id=968): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000001) socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000480)="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", 0x1ae}, {&(0x7f0000001480)="d1", 0x1}], 0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000), &(0x7f00000018c0)=0x1c) ioctl$int_in(r1, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=""/256}) r4 = dup(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x109, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xf9, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xe000, 0xa7, 0x1, {0x22, 0x193}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x66, 0x5, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x9, 0x1d}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x7, 0x80, 0x0, 0x0, 0x6}, 0x43, &(0x7f00000000c0)={0x5, 0xf, 0x43, 0x6, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x81, 0xf0f, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x3, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6ecc9b1307cf6b67df2b80e8f2b1a489"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0xff, 0x170}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x7, 0xfff9}]}, 0x9, [{0x0, 0x0}, {0x40, &(0x7f0000000180)=@string={0x40, 0x3, "3b78f97553044b0a56d03737175a38a111e87f0930642f630553108b01a2af8fe921ea4a598820984c51bdada0e5fdd5920a0e37a6b7af64c3b9d577596e"}}, {0x64, &(0x7f0000001800)=@string={0x64, 0x3, "92940000000000800000000000cd5051f8e00bdcb55d167ed00f9a6db4e8e003c31b709b5024348a54155c92f42f6ebb39481de825ff48299e4190fd2390cbad78dc98836309068cac29044f7301363f860cc8871f0d4d70b6b3e219e013a2f4439a"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x402}}, {0xb1, &(0x7f0000001900)=@string={0xb1, 0x3, "b45ff3158a9496842098721fcabb352e3b4cfd988246c699ed505f6fb5611b4b242e20c41a12944216d95748833625b23003f38a2656e42616fe0169da98fce0687f5167b4da43d36f095fc9f4bc51a1a54394f90689f62988b5d00d10c00bbe3e50994896568bf214727ed3be3e395ab3c63179f701fde7ce5229a49acb4176a2a42d5d5070a3bd4fc124969b02646413809ab98e8c44257500ad201fe6219b34c95200"/175}}, {0x68, &(0x7f0000000300)=@string={0x68, 0x3, "0ed9ed3e8b07f4502f5481f0403c3c6743c8602f3d6625941dbd7b572e258ed1788a72c4afa21240beb66d41e89070d2967cd3d2810ff4587b7ceaee625e898d7f23397ff1382f820d26900a8aa1055749a1bea6fdde666db4734535cb5735570e0890e6a8c8"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x0, 0x0}, {0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r4}) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c83031002d0001000b0204004c0000000503150004000300020001020a0409040106090000009c07030308"], 0x36) 2.131556267s ago: executing program 1 (id=969): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4a) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000003c0)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="2601000000010500000000", 0xb}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_create1(0x0) ioctl$KDGKBSENT(r5, 0x5608, 0x0) r6 = accept4(r3, &(0x7f0000000240)=@un=@abs, &(0x7f0000000500)=0x80, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000300)={@broadcast}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 853.559487ms ago: executing program 1 (id=970): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x8a) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040b144d4827"], 0xe) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x5) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket(0x22, 0x0, 0x4) getsockname(r5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x40000000) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) poll(&(0x7f00000003c0), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000004c0)={r9, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x0, 0xd1b0], [], [0x0, 0x8000000000000001, 0x0, 0x6]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xf, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) close_range(r1, 0xffffffffffffffff, 0x0) 850.204502ms ago: executing program 0 (id=971): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@broadcast, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000e40)="bd3119fab037020de607352a978727cdd46a7ad7671829c16bb1339d3f711b7c5da66f48a8b5842dad66eedf75899eb65d733423ca5651013e1db97f5d192e302ac583ccd19e1e8a3e7812af51f0eea31c5e05cec737cc11a38936d67d4c7cd78351177f51dab5ebe8523e54dd8db33ab6214499c610051df74b67669c9b554b25c70c3238ffaa908675df728ef76e7ae5ee938e025ed07603ec4cc86ee67be10ef6087e7ff0017b358ebee016f08b756cfd2645ccdf335d8b62b630939ba724776a5f2caa487586527f2066b2845e52758b6da2ce07de99165195af70ea9659005901a0f28e90b49a0803ab10698ade4c07337535c2600c45b8c497ab6863ad984815f375df57e5940e5322d90d66c84937e9b7f2356a6e16a026b2393670d370759a4567a87fd2a4d0d5857b9e2559a5a0a857b845f0e1495e8d9b574b0f4d1a55ec8d93c148a50c5c4228c653be69a7d728fa497ee129ec4e7b821ce041be389d37efd40b81a9704e5182b9cdca1f2d3312351e9edaa8ac96088c465a953e0ec3e8f26aa17ea3e1913b4d147141d1aef80b3ed959d14fad4ead4de92e10f0faca7acdce7c712ab95a11ff4c72798565f0794d7bc50f5082b52b34a1de7c5609e31e1fcc05fc7dbd73973b5dfc92896f57f5b76fd9df5067eb273f0960560df3dfd00ba068e28812244f700d76da4197bb332245f00112b73659c63dfb854eb8eed1a9881e5c49399b2c6932b540d3464d470cabb6", 0x216, 0x0, 0x0, 0x0) 250.053637ms ago: executing program 0 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/204, 0xcc}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180), 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 242.567618ms ago: executing program 2 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x95, 0x8c, 0x47, 0x0, 0x4ca, 0x3008, 0xe600, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd7, 0x0, 0x1, 0x6a, 0x9f, 0xe9, 0x0, [], [{{0x9, 0x5, 0x4, 0x3, 0x200}}]}}]}}]}}, 0x0) 0s ago: executing program 4 (id=974): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x458, 0x3f3, 0x4, 0x70bd2c, 0x25dfdbfb, {0x6, 0x1, 0x38, [0x200, 0x1, 0x1, 0x8, 0xfffffff9, 0x1, 0x1, 0x7d0d, 0x3, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x3, 0x0, 0x8, 0x2, 0x4, 0x8, 0x7e0, 0x10000, 0x3, 0x800, 0x7fffffff, 0x0, 0x0, 0x0, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x80000000, 0x2, 0x5, 0xc, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x9f2, 0x10, 0x0, 0x5, 0xe, 0x2, 0x0, 0x8, 0x1, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x8f, 0xfffffff6, 0x9b8, 0x0, 0x53, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0xc, 0x7fff, 0x7, 0x4, 0x0, 0x0, 0x9, 0x6, 0x2, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x4, 0x1, 0x787, 0x3, 0x0, 0xfff, 0x0, 0x7, 0x300000, 0x200, 0x7, 0x0, 0x0, 0x9, 0xaf72, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0xcc8, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x6, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x40b, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x0, 0x6, 0x3ca], [0xa, 0x8, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x0, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x9, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x38, ['!}\x00', '/dev/uhid\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x458}}, 0x4000041) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x69}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6fc}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xcd7}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11f1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) read(r3, &(0x7f00000009c0)=""/75, 0x4b) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001580)={0x0, 0x0, 0x1, [0xfc01]}, 0xa) kernel console output (not intermixed with test programs): device number 27 [ 255.126054][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.161245][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 255.170565][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.209174][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.395925][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.477647][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.545284][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.589868][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.600738][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.616896][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.646441][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.676425][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.699258][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.719413][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.743235][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.771436][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.028749][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.035095][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.258144][ T5082] Bluetooth: hci1: command tx timeout [ 256.319535][ T7677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.395508][ T7677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.432577][ T7677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.473159][ T7677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.729392][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.516578][ T5194] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 257.779058][ T5194] usb 1-1: device descriptor read/64, error -71 [ 258.001224][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.176979][ T5194] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 258.271463][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.362516][ T5194] usb 1-1: device descriptor read/64, error -71 [ 258.442147][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.458609][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.471629][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.488301][ T5194] usb usb1-port1: attempt power cycle [ 258.494181][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.516622][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 258.528627][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.620539][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.693023][ T2495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.716391][ T2495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.947623][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.023571][ T7929] trusted_key: encrypted_key: insufficient parameters specified [ 259.039449][ T5194] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 259.050777][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.102649][ T5194] usb 1-1: device descriptor read/8, error -71 [ 259.376990][ T5194] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 259.428993][ T5194] usb 1-1: device descriptor read/8, error -71 [ 259.570429][ T5194] usb usb1-port1: unable to enumerate USB device [ 260.576517][ T53] Bluetooth: hci3: command tx timeout [ 260.932228][ T61] bridge_slave_1: left allmulticast mode [ 261.231441][ T61] bridge_slave_1: left promiscuous mode [ 261.406742][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.489614][ T61] bridge_slave_0: left allmulticast mode [ 261.522186][ T61] bridge_slave_0: left promiscuous mode [ 261.577273][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.976531][ T5194] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 262.168870][ T5194] usb 5-1: not running at top speed; connect to a high speed hub [ 262.186449][ T5194] usb 5-1: config 9 has an invalid interface number: 29 but max is 2 [ 262.201192][ T5194] usb 5-1: config 9 has an invalid interface number: 4 but max is 2 [ 262.216107][ T5194] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 262.233844][ T5194] usb 5-1: config 9 has an invalid interface number: 48 but max is 2 [ 262.250659][ T5194] usb 5-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 262.272778][ T5194] usb 5-1: config 9 has no interface number 0 [ 262.283942][ T5194] usb 5-1: config 9 has no interface number 1 [ 262.294248][ T5194] usb 5-1: config 9 has no interface number 2 [ 262.302103][ T5194] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 262.313942][ T5194] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 262.333417][ T5194] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 262.346170][ T5194] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 262.357110][ T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 262.365825][ T5194] usb 5-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 262.378835][ T5194] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 262.393327][ T5194] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 262.405198][ T5194] usb 5-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 262.417148][ T5194] usb 5-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.429200][ T5194] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 262.453254][ T5194] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 262.465141][ T5194] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 262.476555][ T5194] usb 5-1: config 9 interface 48 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 262.490424][ T5194] usb 5-1: config 9 interface 29 has no altsetting 0 [ 262.502354][ T5194] usb 5-1: config 9 interface 4 has no altsetting 0 [ 262.509496][ T5194] usb 5-1: config 9 interface 48 has no altsetting 0 [ 262.621681][ T5194] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 262.642134][ T5194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.651419][ T5194] usb 5-1: Product: Е [ 262.656586][ T53] Bluetooth: hci3: command tx timeout [ 262.663951][ T5194] usb 5-1: Manufacturer: о [ 262.664196][ T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 262.666871][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.668826][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.730398][ T25] usb 3-1: config 0 descriptor?? [ 262.736106][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.754389][ T61] bond0 (unregistering): Released all slaves [ 262.963365][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.983363][ T5194] usb 5-1: unknown interface protocol 0x4f, assuming v1 [ 262.996279][ T5194] usb 5-1: cannot find UAC_HEADER [ 262.996704][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.041236][ T25] usb 3-1: string descriptor 0 read error: -71 [ 263.064937][ T25] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 263.074841][ T5194] snd-usb-audio 5-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 263.088536][ T25] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 263.117561][ T25] usb 3-1: USB disconnect, device number 30 [ 263.147306][ T5194] usb 5-1: USB disconnect, device number 35 [ 263.323988][ T7990] syzkaller0: entered promiscuous mode [ 263.333371][ T7990] syzkaller0: entered allmulticast mode [ 263.390752][ T5250] udevd[5250]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.597220][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.607267][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.617148][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.633218][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.641132][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 264.650266][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.738304][ T5082] Bluetooth: hci3: command tx timeout [ 266.766575][ T5082] Bluetooth: hci1: command tx timeout [ 266.836609][ T5082] Bluetooth: hci3: command tx timeout [ 268.135389][ T61] hsr_slave_0: left promiscuous mode [ 268.144379][ T61] hsr_slave_1: left promiscuous mode [ 268.154472][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.165162][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.187025][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.194447][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.247283][ T61] veth1_macvtap: left promiscuous mode [ 268.252898][ T61] veth0_macvtap: left promiscuous mode [ 268.259013][ T61] veth1_vlan: left promiscuous mode [ 268.264408][ T61] veth0_vlan: left promiscuous mode [ 268.821071][ T5082] Bluetooth: hci1: command tx timeout [ 269.315417][ T61] team0 (unregistering): Port device team_slave_1 removed [ 269.356136][ T61] team0 (unregistering): Port device team_slave_0 removed [ 269.396637][ T5131] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 269.609016][ T5131] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 269.618420][ T5131] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.627937][ T5131] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.640347][ T5131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.649216][ T5131] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.658772][ T5131] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.672032][ T5131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.680387][ T5131] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.689556][ T5131] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.700678][ T5131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.708760][ T5131] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.717989][ T5131] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.729113][ T5131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.737375][ T5131] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.748277][ T5131] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.760213][ T5131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.770065][ T5131] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.783510][ T5131] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.794490][ T5131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.804335][ T5131] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.813352][ T5131] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.824328][ T5131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.834147][ T5131] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.843290][ T5131] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.854344][ T5131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.877466][ T5131] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 269.891438][ T5131] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 269.901684][ T5131] usb 3-1: Product: syz [ 269.905937][ T5131] usb 3-1: Manufacturer: syz [ 269.910254][ T7913] chnl_net:caif_netlink_parms(): no params data found [ 269.911030][ T5131] usb 3-1: SerialNumber: syz [ 269.924434][ T5131] usb 3-1: config 0 descriptor?? [ 269.934028][ T5131] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 270.059077][ T7677] syz-executor (7677) used greatest stack depth: 17712 bytes left [ 270.277030][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 270.277459][ T5194] usb 3-1: USB disconnect, device number 31 [ 270.290700][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.323113][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.333758][ T5194] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 270.347200][ T7913] bridge_slave_0: entered allmulticast mode [ 270.354628][ T7913] bridge_slave_0: entered promiscuous mode [ 270.387973][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.413107][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.430830][ T7913] bridge_slave_1: entered allmulticast mode [ 270.450224][ T7913] bridge_slave_1: entered promiscuous mode [ 270.619244][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.674599][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.826139][ T7913] team0: Port device team_slave_0 added [ 270.864847][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.868186][ T7913] team0: Port device team_slave_1 added [ 270.874094][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.892723][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.900229][ T5092] Bluetooth: hci1: command tx timeout [ 270.912197][ T5092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.920807][ T5092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.934095][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.942606][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.023733][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.036747][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.064600][ T7913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.091987][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.114926][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.122067][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.148766][ T7913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.207992][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.292583][ T7913] hsr_slave_0: entered promiscuous mode [ 271.300561][ T7913] hsr_slave_1: entered promiscuous mode [ 271.317611][ T7913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.333366][ T7913] Cannot create hsr debugfs directory [ 271.375234][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.453318][ T8019] chnl_net:caif_netlink_parms(): no params data found [ 271.691847][ T5092] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 273.016601][ T5092] Bluetooth: hci4: command tx timeout [ 273.022908][ T5092] Bluetooth: hci1: command tx timeout [ 273.134005][ T8019] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.160637][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.180384][ T8019] bridge_slave_0: entered allmulticast mode [ 273.190470][ T8019] bridge_slave_0: entered promiscuous mode [ 273.264880][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.293930][ T8093] chnl_net:caif_netlink_parms(): no params data found [ 273.315870][ T8019] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.330583][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.338362][ T8019] bridge_slave_1: entered allmulticast mode [ 273.345245][ T8019] bridge_slave_1: entered promiscuous mode [ 273.354845][ T8128] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 273.388990][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.612406][ T8019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.681539][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.701191][ T8019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.628637][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.684513][ T8019] team0: Port device team_slave_0 added [ 274.748869][ T8019] team0: Port device team_slave_1 added [ 274.805974][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.813406][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.820815][ T8093] bridge_slave_0: entered allmulticast mode [ 274.828260][ T8093] bridge_slave_0: entered promiscuous mode [ 274.851353][ T5128] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 274.888381][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.895599][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.911685][ T8093] bridge_slave_1: entered allmulticast mode [ 274.919850][ T8093] bridge_slave_1: entered promiscuous mode [ 274.966181][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.973734][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.013356][ T8019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.056548][ T5082] Bluetooth: hci4: command tx timeout [ 275.063998][ T5128] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 275.074065][ T5128] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 275.083427][ T5128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 275.115864][ T5128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.131416][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.132670][ T5128] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 275.164103][ T5128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 275.178903][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.195451][ T5128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.234243][ T5128] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 275.244078][ T5128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 275.263816][ T5128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.270579][ T8019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.285165][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.308111][ T5128] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 275.317881][ T5128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 275.326489][ T7913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 275.335892][ T5128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.355056][ T5128] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 275.358347][ T7913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 275.370908][ T5128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 275.370940][ T5128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.375258][ T5128] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 275.425031][ T5128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 275.471230][ T5128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.488038][ T5128] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 275.493181][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.498689][ T5128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 275.526829][ T61] bridge_slave_1: left allmulticast mode [ 275.532544][ T61] bridge_slave_1: left promiscuous mode [ 275.559746][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.571193][ T5128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.586836][ T61] bridge_slave_0: left allmulticast mode [ 275.589806][ T5128] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 275.592488][ T61] bridge_slave_0: left promiscuous mode [ 275.608275][ T5128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 275.616692][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.634097][ T61] bridge_slave_1: left allmulticast mode [ 275.640524][ T61] bridge_slave_1: left promiscuous mode [ 275.664516][ T5128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.666736][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.704946][ T61] bridge_slave_0: left allmulticast mode [ 275.711805][ T5128] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 275.715399][ T61] bridge_slave_0: left promiscuous mode [ 275.728349][ T5128] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 275.738648][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.744504][ T5128] usb 3-1: Product: syz [ 275.754055][ T5128] usb 3-1: Manufacturer: syz [ 275.965496][ T5128] usb 3-1: SerialNumber: syz [ 275.973340][ T5128] usb 3-1: config 0 descriptor?? [ 275.987266][ T5128] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 276.686626][ T5129] usb 3-1: USB disconnect, device number 32 [ 276.706309][ T5129] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 277.136973][ T5082] Bluetooth: hci4: command tx timeout [ 277.234250][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.246036][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.257307][ T61] bond0 (unregistering): Released all slaves [ 277.344780][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.355773][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.366582][ T61] bond0 (unregistering): Released all slaves [ 277.377654][ T7913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.389261][ T7913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.529975][ T8166] 9pnet_fd: Insufficient options for proto=fd [ 277.551440][ T8166] 9pnet_fd: Insufficient options for proto=fd [ 277.617642][ T8093] team0: Port device team_slave_0 added [ 277.632081][ T8019] hsr_slave_0: entered promiscuous mode [ 277.639751][ T8019] hsr_slave_1: entered promiscuous mode [ 277.646881][ T8019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.655311][ T8019] Cannot create hsr debugfs directory [ 277.844064][ T8093] team0: Port device team_slave_1 added [ 277.927033][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 277.959327][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.966946][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.994223][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.126607][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 278.161861][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 278.267421][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.357615][ T25] usb 3-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88 [ 278.433781][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.485536][ T25] usb 3-1: Product: syz [ 278.558000][ T25] usb 3-1: Manufacturer: syz [ 278.562928][ T25] usb 3-1: SerialNumber: syz [ 278.578282][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.595630][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.621630][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.641190][ T25] usb 3-1: config 0 descriptor?? [ 278.685609][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.893752][ T5082] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 278.938793][ T8093] hsr_slave_0: entered promiscuous mode [ 278.939450][ T25] kaweth 3-1:0.0: Firmware present in device. [ 278.951252][ T8093] hsr_slave_1: entered promiscuous mode [ 278.967515][ T8093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.992974][ T8093] Cannot create hsr debugfs directory [ 279.216535][ T5082] Bluetooth: hci4: command tx timeout [ 279.349546][ T61] hsr_slave_0: left promiscuous mode [ 279.360475][ T61] hsr_slave_1: left promiscuous mode [ 279.386228][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.425887][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.445894][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.455966][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.481349][ T61] hsr_slave_0: left promiscuous mode [ 279.501472][ T61] hsr_slave_1: left promiscuous mode [ 279.519156][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.535577][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.552571][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.560985][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.625045][ T25] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 279.638278][ T61] veth1_macvtap: left promiscuous mode [ 279.643930][ T61] veth0_macvtap: left promiscuous mode [ 279.649647][ T25] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 279.679691][ T61] veth1_vlan: left promiscuous mode [ 279.685058][ T61] veth0_vlan: left promiscuous mode [ 279.686885][ T25] usb 3-1: USB disconnect, device number 33 [ 279.713747][ T5082] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 279.740923][ T61] veth1_macvtap: left promiscuous mode [ 279.746680][ T61] veth0_macvtap: left promiscuous mode [ 279.752418][ T61] veth1_vlan: left promiscuous mode [ 279.758216][ T61] veth0_vlan: left promiscuous mode [ 280.046457][ T5129] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 280.238077][ T5129] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 280.249488][ T5129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.263058][ T5129] usb 4-1: config 0 descriptor?? [ 280.274022][ T5129] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 280.589415][ T61] team0 (unregistering): Port device team_slave_1 removed [ 280.634583][ T61] team0 (unregistering): Port device team_slave_0 removed [ 281.375309][ T61] team0 (unregistering): Port device team_slave_1 removed [ 281.412649][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.413887][ T5129] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 281.422096][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.441366][ T61] team0 (unregistering): Port device team_slave_0 removed [ 281.648151][ T5129] usb 3-1: Using ep0 maxpacket: 32 [ 281.664581][ T5129] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3 [ 281.674568][ T5129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.683166][ T5129] usb 3-1: Product: syz [ 281.687838][ T5129] usb 3-1: Manufacturer: syz [ 281.692510][ T5129] usb 3-1: SerialNumber: syz [ 281.718659][ T5129] usb 3-1: config 0 descriptor?? [ 281.733002][ T5129] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 281.740719][ T5129] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 281.935586][ T5129] radio-raremono 3-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 281.965159][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.977505][ T5083] usb 4-1: USB disconnect, device number 28 [ 282.164781][ T5129] radio-raremono 3-1:0.0: V4L2 device registered as radio32 [ 282.219870][ T7913] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.277987][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.285206][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.304704][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.311892][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.364939][ T5128] usb 3-1: USB disconnect, device number 34 [ 282.371472][ T5128] radio-raremono 3-1:0.0: Thanko's Raremono disconnected [ 282.907793][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.170866][ T7913] veth0_vlan: entered promiscuous mode [ 283.200520][ T8093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.226155][ T8093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.237223][ T5083] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 283.274670][ T8093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.287518][ T7913] veth1_vlan: entered promiscuous mode [ 283.305315][ T8093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.364512][ T8019] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.375673][ T8019] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.400183][ T8019] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.411736][ T8019] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.425774][ T7913] veth0_macvtap: entered promiscuous mode [ 283.432406][ T5083] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 283.443799][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.453425][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.464384][ T7913] veth1_macvtap: entered promiscuous mode [ 283.490956][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.511010][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.532098][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.543241][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.543277][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.544347][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.570446][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.580861][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.585899][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.604013][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.604615][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.625792][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.635877][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.638064][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.648093][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.663404][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.679189][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.707858][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.716157][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.735480][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.760217][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.768748][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.780741][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.781182][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.792250][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.793478][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.807694][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.832203][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.833132][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.853691][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.857599][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.869124][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.883181][ T5083] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 283.890081][ T7913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.898460][ T5083] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 283.904105][ T7913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.918833][ T7913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.926754][ T5083] usb 4-1: Product: syz [ 283.929797][ T7913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.935216][ T5083] usb 4-1: Manufacturer: syz [ 283.956771][ T5083] usb 4-1: SerialNumber: syz [ 283.964069][ T5083] usb 4-1: config 0 descriptor?? [ 283.973757][ T5083] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 284.071943][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.125670][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.175002][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.229422][ T8019] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.238643][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.245779][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.287699][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.294894][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.307656][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.314831][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.315818][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 284.330205][ T5083] usb 4-1: USB disconnect, device number 29 [ 284.346226][ T5083] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 284.349806][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.384638][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.391837][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.403054][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.492498][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.503088][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.940961][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.992945][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.064665][ T8019] veth0_vlan: entered promiscuous mode [ 285.109464][ T8019] veth1_vlan: entered promiscuous mode [ 285.254771][ T8019] veth0_macvtap: entered promiscuous mode [ 285.291739][ T8019] veth1_macvtap: entered promiscuous mode [ 285.379011][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.411014][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.446458][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.465240][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.497685][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.527284][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.562520][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.600841][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.617729][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.635617][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.646925][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.657278][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.672771][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.684723][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.712278][ T8294] netlink: 'syz.1.655': attribute type 10 has an invalid length. [ 285.739196][ T8294] netlink: 2 bytes leftover after parsing attributes in process `syz.1.655'. [ 285.764610][ T8294] team0: entered promiscuous mode [ 285.901316][ T8294] team_slave_0: entered promiscuous mode [ 285.920758][ T8294] team_slave_1: entered promiscuous mode [ 285.933950][ T8294] bridge0: port 3(team0) entered blocking state [ 285.945270][ T8294] bridge0: port 3(team0) entered disabled state [ 285.954427][ T8294] team0: entered allmulticast mode [ 285.968877][ T8294] team_slave_0: entered allmulticast mode [ 285.974780][ T8294] team_slave_1: entered allmulticast mode [ 285.983647][ T8294] bridge0: port 3(team0) entered blocking state [ 285.990072][ T8294] bridge0: port 3(team0) entered forwarding state [ 286.847773][ T8311] syzkaller0: entered promiscuous mode [ 286.853284][ T8311] syzkaller0: entered allmulticast mode [ 286.898437][ T8019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.912611][ T8019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.921565][ T8019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.931006][ T8019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.970124][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 287.113205][ T8325] netlink: 'syz.1.658': attribute type 10 has an invalid length. [ 287.130296][ T8325] team0: Device ipvlan1 failed to register rx_handler [ 287.553630][ T5082] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 287.563371][ T5082] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 287.888619][ T8359] block nbd1: shutting down sockets [ 288.643626][ T5082] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 288.703921][ T5082] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 288.737209][ T50] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 288.952836][ T50] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.967446][ T50] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.980932][ T50] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 288.991069][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.003066][ T50] usb 2-1: config 0 descriptor?? [ 289.220838][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.234595][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.257077][ T5129] usb 2-1: USB disconnect, device number 36 [ 289.435569][ T8379] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 289.445620][ T8379] netlink: 2 bytes leftover after parsing attributes in process `syz.3.666'. [ 289.455293][ T8379] team0: entered promiscuous mode [ 289.462018][ T8379] team_slave_0: entered promiscuous mode [ 289.469031][ T8379] team_slave_1: entered promiscuous mode [ 289.475127][ T8379] bridge0: port 3(team0) entered blocking state [ 289.482468][ T8379] bridge0: port 3(team0) entered disabled state [ 289.505565][ T8379] team0: entered allmulticast mode [ 289.511063][ T8379] team_slave_0: entered allmulticast mode [ 289.518692][ T8379] team_slave_1: entered allmulticast mode [ 289.533587][ T8379] bridge0: port 3(team0) entered blocking state [ 289.539984][ T8379] bridge0: port 3(team0) entered forwarding state [ 289.676625][ T5082] Bluetooth: hci2: command 0x0406 tx timeout [ 289.748441][ T8093] veth0_vlan: entered promiscuous mode [ 289.765017][ T8093] veth1_vlan: entered promiscuous mode [ 292.519880][ T8093] veth0_macvtap: entered promiscuous mode [ 292.546777][ T8093] veth1_macvtap: entered promiscuous mode [ 292.648076][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.666211][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.678081][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.702380][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.730224][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.749825][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.770102][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.805990][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.844698][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.855359][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.867868][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.924672][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.953481][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.964027][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.974704][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.984585][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.995243][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.005240][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.017248][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.028737][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.049880][ T8093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.065562][ T8093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.075248][ T8093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.084701][ T8093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.101219][ T8410] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 293.221320][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.256320][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.326549][ T8416] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 293.407289][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.415146][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.425419][ T8416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.676'. [ 293.688416][ T8421] trusted_key: encrypted_key: insufficient parameters specified [ 293.910457][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.979228][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.168503][ T5083] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 297.388534][ T5083] usb 5-1: Using ep0 maxpacket: 16 [ 297.399506][ T5083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 297.436470][ T5083] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 297.462363][ T5083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.502317][ T5083] usb 5-1: config 0 descriptor?? [ 297.796626][ T8447] overlayfs: missing 'workdir' [ 297.833609][ T5131] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 297.878017][ T8447] afs: Bad value for 'source' [ 298.596676][ T5082] Bluetooth: hci1: unexpected event 0x09 length: 10 > 3 [ 298.596926][ T5082] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 298.687308][ T8447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.712116][ T5131] usb 2-1: Using ep0 maxpacket: 16 [ 298.719428][ T8447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.761898][ T5083] hid (null): unknown global tag 0x8f [ 298.762073][ T5131] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 298.784592][ T5083] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 298.796612][ T5131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.806630][ T5083] hid-generic 0003:0158:0100.0002: unexpected long global item [ 298.820881][ T5131] usb 2-1: Product: syz [ 298.828691][ T5083] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 298.837094][ T5131] usb 2-1: Manufacturer: syz [ 298.860651][ T5131] usb 2-1: SerialNumber: syz [ 298.870483][ T5131] usb 2-1: config 0 descriptor?? [ 299.022300][ T5083] usb 5-1: USB disconnect, device number 36 [ 299.036645][ T5128] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 299.136658][ T5131] usb 2-1: Cannot retrieve CPort count: -71 [ 299.167725][ T5131] usb 2-1: Cannot retrieve CPort count: -71 [ 299.173840][ T5131] es2_ap_driver 2-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 299.190496][ T5131] usb 2-1: USB disconnect, device number 37 [ 299.269963][ T5128] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 299.278866][ T5082] Bluetooth: Frame is too long (len 133, expected len 4) [ 299.282992][ T5128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.308912][ T5082] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 299.323339][ T5128] usb 3-1: config 0 descriptor?? [ 299.361560][ T5128] usb-storage 3-1:0.0: USB Mass Storage device detected [ 299.378232][ T5128] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 299.569254][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.596878][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.903469][ T29] audit: type=1800 audit(1719547204.526:61): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.691" name="file1" dev="sda1" ino=1988 res=0 errno=0 [ 299.923032][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.376599][ T5082] Bluetooth: hci1: command tx timeout [ 301.702281][ T5083] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 301.791009][ T5128] usb 3-1: USB disconnect, device number 35 [ 301.918985][ T5083] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 301.939487][ T5083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.971612][ T5083] usb 2-1: config 0 descriptor?? [ 302.015359][ T5083] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 302.550481][ T5083] gspca_sonixj: reg_w1 err -110 [ 302.671710][ T5083] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 302.776823][ T5082] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 302.785607][ T5082] Bluetooth: hci1: Injecting HCI hardware error event [ 302.795554][ T5082] Bluetooth: hci1: hardware error 0x00 [ 302.929136][ T8512] netlink: 'syz.0.700': attribute type 10 has an invalid length. [ 302.946306][ T8512] netlink: 2 bytes leftover after parsing attributes in process `syz.0.700'. [ 302.960969][ T8512] team0: entered promiscuous mode [ 302.971126][ T8512] team_slave_0: entered promiscuous mode [ 302.977823][ T8512] team_slave_1: entered promiscuous mode [ 302.984492][ T8512] bridge0: port 3(team0) entered blocking state [ 302.991427][ T8512] bridge0: port 3(team0) entered disabled state [ 302.999213][ T8512] team0: entered allmulticast mode [ 303.004730][ T8512] team_slave_0: entered allmulticast mode [ 303.011364][ T8512] team_slave_1: entered allmulticast mode [ 303.019646][ T8512] bridge0: port 3(team0) entered blocking state [ 303.026092][ T8512] bridge0: port 3(team0) entered forwarding state [ 303.626441][ T5128] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 303.836595][ T5128] usb 1-1: Using ep0 maxpacket: 16 [ 304.659973][ T5128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 304.673715][ T5128] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 304.677457][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.684712][ T5128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.707745][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.716602][ T5128] usb 1-1: config 0 descriptor?? [ 304.879084][ T29] audit: type=1800 audit(1719547209.506:62): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.707" name="file1" dev="sda1" ino=2011 res=0 errno=0 [ 304.920097][ T8549] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 304.961706][ T8525] overlayfs: missing 'workdir' [ 304.977426][ T5082] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 305.001144][ T8525] afs: Bad value for 'source' [ 305.007075][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 305.188297][ T25] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 305.206900][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.216104][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.241178][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.257861][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.266909][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.277719][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.282469][ T5128] hid (null): unknown global tag 0x8f [ 305.292252][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.299233][ T5128] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 305.316065][ T5128] hid-generic 0003:0158:0100.0003: unexpected long global item [ 305.319074][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.324559][ T5128] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 305.334201][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.519981][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.739091][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.825317][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.923034][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 305.944169][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.956982][ T5083] usb 2-1: USB disconnect, device number 38 [ 305.991923][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.027366][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.090109][ T5128] usb 1-1: USB disconnect, device number 31 [ 306.096186][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 306.119696][ T8557] netlink: 'syz.4.713': attribute type 10 has an invalid length. [ 306.132176][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.134287][ T8557] netlink: 2 bytes leftover after parsing attributes in process `syz.4.713'. [ 306.159467][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.176587][ T8557] team0: entered promiscuous mode [ 306.190561][ T8557] team_slave_0: entered promiscuous mode [ 306.198253][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 306.222568][ T8557] team_slave_1: entered promiscuous mode [ 306.231460][ T8557] bridge0: port 3(team0) entered blocking state [ 306.232156][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.245945][ T8557] bridge0: port 3(team0) entered disabled state [ 306.254678][ T8557] team0: entered allmulticast mode [ 306.267427][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.279099][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 306.285966][ T8557] team_slave_0: entered allmulticast mode [ 306.287878][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.301105][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.313249][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 306.320800][ T8557] team_slave_1: entered allmulticast mode [ 306.338565][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 306.350460][ T25] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 306.368921][ T8557] bridge0: port 3(team0) entered blocking state [ 306.375315][ T8557] bridge0: port 3(team0) entered forwarding state [ 306.392491][ T25] usb 3-1: Product: syz [ 306.403502][ T25] usb 3-1: Manufacturer: syz [ 306.415117][ T25] usb 3-1: SerialNumber: syz [ 306.431442][ T25] usb 3-1: config 0 descriptor?? [ 306.444500][ T25] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 306.961465][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 306.987332][ T5194] usb 3-1: USB disconnect, device number 36 [ 307.016684][ T25] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 307.053963][ T5194] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 307.166556][ T5083] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 307.376858][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 307.433570][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 307.455310][ T25] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 307.465391][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.473966][ T5083] usb 4-1: device descriptor read/64, error -71 [ 307.483730][ T25] usb 5-1: config 0 descriptor?? [ 307.486647][ T5128] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 307.683973][ T5128] usb 1-1: not running at top speed; connect to a high speed hub [ 307.693063][ T5128] usb 1-1: config 9 has an invalid interface number: 29 but max is 2 [ 307.701632][ T5128] usb 1-1: config 9 has an invalid interface number: 4 but max is 2 [ 307.712893][ T8573] overlayfs: missing 'workdir' [ 307.715548][ T5128] usb 1-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 307.726749][ T5128] usb 1-1: config 9 has an invalid interface number: 48 but max is 2 [ 307.734872][ T5128] usb 1-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 307.737650][ T8573] afs: Bad value for 'source' [ 307.748050][ T5128] usb 1-1: config 9 has no interface number 0 [ 307.757682][ T5131] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 307.765471][ T5083] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 307.766644][ T5128] usb 1-1: config 9 has no interface number 1 [ 307.780294][ T5128] usb 1-1: config 9 has no interface number 2 [ 307.787117][ T5128] usb 1-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 307.798156][ T5128] usb 1-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 307.809723][ T5128] usb 1-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 307.820769][ T5128] usb 1-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 307.831499][ T5128] usb 1-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 307.842411][ T5128] usb 1-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 307.854235][ T5128] usb 1-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 307.873921][ T5128] usb 1-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 307.884866][ T5128] usb 1-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.895010][ T5128] usb 1-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 307.910444][ T5128] usb 1-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 307.921406][ T5128] usb 1-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 307.932218][ T5128] usb 1-1: config 9 interface 48 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 307.945375][ T5128] usb 1-1: config 9 interface 29 has no altsetting 0 [ 307.946497][ T5083] usb 4-1: device descriptor read/64, error -71 [ 307.952214][ T5128] usb 1-1: config 9 interface 4 has no altsetting 0 [ 307.967965][ T5128] usb 1-1: config 9 interface 48 has no altsetting 0 [ 307.978379][ T5131] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 307.987881][ T5131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.997103][ T5128] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 308.006158][ T5128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.014964][ T5128] usb 1-1: Product: Е [ 308.016124][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.019996][ T5131] usb 2-1: config 0 descriptor?? [ 308.036498][ T5128] usb 1-1: Manufacturer: о [ 308.044291][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.072085][ T25] hid (null): unknown global tag 0x8f [ 308.085073][ T25] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 308.098425][ T5083] usb usb4-port1: attempt power cycle [ 308.110752][ T25] hid-generic 0003:0158:0100.0004: unexpected long global item [ 308.121890][ T25] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 308.131871][ T5082] Bluetooth: Frame is too long (len 133, expected len 4) [ 308.139462][ T5082] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 308.244491][ T8579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.317482][ T8579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.381893][ T5132] usb 5-1: USB disconnect, device number 37 [ 308.382218][ T5082] Bluetooth: hci3: link tx timeout [ 308.393734][ T5082] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 308.411742][ T5128] usb 1-1: unknown interface protocol 0x4f, assuming v1 [ 308.458204][ T5128] usb 1-1: cannot find UAC_HEADER [ 308.464590][ T5131] usb 2-1: string descriptor 0 read error: -71 [ 308.482640][ T5131] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 308.493018][ T5131] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 308.509517][ T5128] snd-usb-audio 1-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 308.526569][ T5083] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 308.544923][ T5128] usb 1-1: USB disconnect, device number 32 [ 308.557217][ T5083] usb 4-1: device descriptor read/8, error -71 [ 308.567062][ T5131] usb 2-1: USB disconnect, device number 39 [ 308.837899][ T5250] udevd[5250]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.853975][ T5083] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 308.899089][ T5083] usb 4-1: device descriptor read/8, error -71 [ 308.966805][ T8585] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 309.036913][ T5083] usb usb4-port1: unable to enumerate USB device [ 310.176688][ T5082] Bluetooth: hci0: command tx timeout [ 310.235685][ T5082] Bluetooth: hci0: link tx timeout [ 310.242516][ T5082] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 310.246684][ T5131] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 310.266680][ T786] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 310.295873][ T8602] ebtables: ebtables: counters copy to user failed while replacing table [ 310.419463][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 310.468727][ T786] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 310.474170][ T5131] usb 5-1: not running at top speed; connect to a high speed hub [ 310.486823][ T786] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 310.486870][ T786] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 310.486895][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.542129][ T5131] usb 5-1: config 9 has an invalid interface number: 29 but max is 3 [ 310.551980][ T5131] usb 5-1: config 9 has an invalid interface number: 4 but max is 3 [ 310.565348][ T5131] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 310.574237][ T5131] usb 5-1: config 9 has an invalid interface number: 48 but max is 3 [ 310.582535][ T5131] usb 5-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 310.592674][ T5131] usb 5-1: config 9 has 3 interfaces, different from the descriptor's value: 4 [ 310.601653][ T5131] usb 5-1: config 9 has no interface number 0 [ 310.608052][ T5131] usb 5-1: config 9 has no interface number 1 [ 310.615667][ T5131] usb 5-1: config 9 has no interface number 2 [ 310.625586][ T5131] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 310.636463][ T5131] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 310.648104][ T5131] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 310.659425][ T5131] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 310.671346][ T5131] usb 5-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 310.682547][ T5131] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 310.693509][ T5132] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 310.701609][ T5131] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 310.713351][ T5131] usb 5-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 310.727846][ T5131] usb 5-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.738479][ T5131] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 310.749684][ T5131] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 310.760485][ T5131] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 310.771210][ T5131] usb 5-1: config 9 interface 48 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 310.784282][ T5131] usb 5-1: config 9 interface 29 has no altsetting 0 [ 310.791600][ T5131] usb 5-1: config 9 interface 4 has no altsetting 0 [ 310.798328][ T5131] usb 5-1: config 9 interface 48 has no altsetting 0 [ 310.807979][ T5131] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 310.817281][ T5131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.828212][ T5131] usb 5-1: Product: Е [ 310.832407][ T5131] usb 5-1: Manufacturer: о [ 310.898407][ T786] usb 2-1: string descriptor 0 read error: -32 [ 310.907605][ T5132] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 310.910317][ T786] usb 2-1: USB disconnect, device number 40 [ 310.940121][ T5132] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 310.951500][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.964603][ T5132] usb 1-1: config 0 descriptor?? [ 310.973670][ T5132] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 310.982282][ T5132] usb 1-1: No valid video chain found. [ 311.155918][ T5131] usb 5-1: unknown interface protocol 0x4f, assuming v1 [ 311.162997][ T5131] usb 5-1: cannot find UAC_HEADER [ 311.178168][ T5132] usb 1-1: USB disconnect, device number 33 [ 311.225937][ T5131] snd-usb-audio 5-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 311.263732][ T5131] usb 5-1: USB disconnect, device number 38 [ 311.350814][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.730'. [ 311.498813][ T5095] udevd[5095]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.716533][ T786] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 311.756511][ T5132] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 311.776532][ T25] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 311.917564][ T786] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 311.935462][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.947574][ T786] usb 4-1: config 0 descriptor?? [ 311.974554][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 311.991426][ T25] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 312.007556][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.016205][ T25] usb 2-1: Product: syz [ 312.031325][ T25] usb 2-1: Manufacturer: syz [ 312.036074][ T25] usb 2-1: SerialNumber: syz [ 312.061024][ T25] usb 2-1: config 0 descriptor?? [ 312.137628][ T5132] usb 3-1: not running at top speed; connect to a high speed hub [ 312.147905][ T5132] usb 3-1: config 9 has an invalid interface number: 29 but max is 2 [ 312.157774][ T5132] usb 3-1: config 9 has an invalid interface number: 4 but max is 2 [ 312.161917][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.165766][ T5132] usb 3-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 312.165791][ T5132] usb 3-1: config 9 has an invalid interface number: 48 but max is 2 [ 312.165811][ T5132] usb 3-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 312.227555][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.270663][ T5092] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 312.278975][ T5092] Bluetooth: hci0: command 0x0406 tx timeout [ 312.385212][ T5132] usb 3-1: config 9 has no interface number 0 [ 312.408671][ T5132] usb 3-1: config 9 has no interface number 1 [ 312.415466][ T5132] usb 3-1: config 9 has no interface number 2 [ 312.500997][ T5132] usb 3-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 312.563340][ T5132] usb 3-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 312.616169][ T5132] usb 3-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 312.662757][ T5132] usb 3-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 312.731807][ T5132] usb 3-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 312.826236][ T5132] usb 3-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 312.843562][ T5132] usb 3-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 312.855264][ T5132] usb 3-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 312.871145][ T5132] usb 3-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.891603][ T5132] usb 3-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 312.917522][ T5132] usb 3-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 312.945270][ T786] usb 4-1: string descriptor 0 read error: -71 [ 312.952879][ T25] usb 2-1: Limiting number of CPorts to U8_MAX [ 312.966954][ T786] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 312.970814][ T5132] usb 3-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 312.973779][ T786] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 312.999303][ T25] usb 2-1: Not enough endpoints found in device, aborting! [ 313.012121][ T25] usb 2-1: USB disconnect, device number 41 [ 313.054413][ T786] usb 4-1: USB disconnect, device number 34 [ 313.076085][ T5132] usb 3-1: config 9 interface 48 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 313.119847][ T8634] Bluetooth: MGMT ver 1.22 [ 313.124712][ T5132] usb 3-1: config 9 interface 29 has no altsetting 0 [ 313.291501][ T5132] usb 3-1: config 9 interface 4 has no altsetting 0 [ 313.305346][ T5132] usb 3-1: config 9 interface 48 has no altsetting 0 [ 313.314064][ T5132] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 313.323204][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.331250][ T5132] usb 3-1: Product: Е [ 313.335329][ T5132] usb 3-1: Manufacturer: о [ 313.486730][ T786] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 313.587737][ T5132] usb 3-1: unknown interface protocol 0x4f, assuming v1 [ 313.603858][ T5132] usb 3-1: cannot find UAC_HEADER [ 313.641787][ T5132] snd-usb-audio 3-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 313.677617][ T5132] usb 3-1: USB disconnect, device number 37 [ 313.678214][ T786] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 313.724136][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.748598][ T786] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.763589][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.774476][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.793226][ T786] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.810288][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.819613][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.834450][ T786] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.849381][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.858025][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.867119][ T786] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.878144][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.912265][ T5095] udevd[5095]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.995450][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.014018][ T786] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.038286][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.046243][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.060996][ T786] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.061461][ T8641] 9pnet_fd: Insufficient options for proto=fd [ 314.078306][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.084330][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.112901][ T786] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.122022][ T8641] 9pnet_fd: Insufficient options for proto=fd [ 314.138586][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.153703][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.181426][ T786] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.194558][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.216317][ T786] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 314.265501][ T786] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 314.304704][ T786] usb 4-1: Product: syz [ 314.335190][ T786] usb 4-1: Manufacturer: syz [ 314.359442][ T786] usb 4-1: SerialNumber: syz [ 314.393991][ T786] usb 4-1: config 0 descriptor?? [ 314.415072][ T786] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 314.790910][ T25] usb 4-1: USB disconnect, device number 35 [ 314.833418][ T786] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 315.021808][ T25] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 315.067060][ T5132] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 315.116499][ T786] usb 3-1: device descriptor read/64, error -71 [ 315.291723][ T5132] usb 1-1: Using ep0 maxpacket: 16 [ 315.309215][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 315.319902][ T5132] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.337510][ T5132] usb 1-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88 [ 315.350710][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.366447][ T5132] usb 1-1: Product: syz [ 315.376176][ T5132] usb 1-1: Manufacturer: syz [ 315.382490][ T5132] usb 1-1: SerialNumber: syz [ 315.396625][ T786] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 315.417152][ T5132] usb 1-1: config 0 descriptor?? [ 315.457168][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 315.556503][ T786] usb 3-1: device descriptor read/64, error -71 [ 315.652594][ T5132] kaweth 1-1:0.0: Firmware present in device. [ 315.703899][ T5082] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 315.823963][ T786] usb usb3-port1: attempt power cycle [ 315.835648][ T5132] kaweth 1-1:0.0: Error reading configuration (-71), no net device created [ 315.887420][ T5132] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 315.908040][ T5132] usb 1-1: USB disconnect, device number 34 [ 316.266462][ T785] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 316.533476][ T8671] trusted_key: encrypted_key: key user:syz not found [ 316.635153][ T786] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 316.717233][ T785] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 316.717585][ T786] usb 3-1: device descriptor read/8, error -71 [ 316.726291][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.738563][ T785] usb 4-1: config 0 descriptor?? [ 316.981459][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.995335][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.006491][ T5082] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 317.031326][ T785] usb 4-1: string descriptor 0 read error: -71 [ 317.045332][ T785] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 317.052822][ T785] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 317.068375][ T785] usb 4-1: USB disconnect, device number 36 [ 317.146578][ T786] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 317.201941][ T786] usb 3-1: device descriptor read/8, error -71 [ 317.367665][ T786] usb usb3-port1: unable to enumerate USB device [ 317.468983][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.475454][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.569186][ T29] audit: type=1804 audit(1719547222.196:63): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.752" name="/root/syzkaller.8InsRL/34/file0" dev="sda1" ino=2010 res=1 errno=0 [ 317.746323][ T29] audit: type=1804 audit(1719547222.236:64): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.752" name="/root/syzkaller.8InsRL/34/file0" dev="sda1" ino=2010 res=1 errno=0 [ 317.781993][ T8690] 9pnet_fd: Insufficient options for proto=fd [ 318.246553][ T786] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 318.316303][ T8687] block nbd1: shutting down sockets [ 318.461947][ T786] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 318.493721][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.561872][ T786] usb 3-1: config 0 descriptor?? [ 318.606714][ T786] usb-storage 3-1:0.0: USB Mass Storage device detected [ 318.755179][ T8709] trusted_key: encrypted_key: key user:syz not found [ 318.941229][ T786] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 318.968151][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.200217][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.814444][ T29] audit: type=1804 audit(1719547224.436:65): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.764" name="/root/syzkaller.qNXN0M/21/file0" dev="sda1" ino=2004 res=1 errno=0 [ 319.973087][ T29] audit: type=1804 audit(1719547224.436:66): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.764" name="/root/syzkaller.qNXN0M/21/file0" dev="sda1" ino=2004 res=1 errno=0 [ 321.142508][ T5129] usb 3-1: USB disconnect, device number 42 [ 321.225820][ T8733] 9pnet_fd: Insufficient options for proto=fd [ 321.357139][ T8739] block nbd3: shutting down sockets [ 321.686630][ T786] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 322.106450][ T786] usb 5-1: Using ep0 maxpacket: 16 [ 322.120148][ T786] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 322.129306][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.137471][ T786] usb 5-1: Product: syz [ 322.141913][ T786] usb 5-1: Manufacturer: syz [ 322.146740][ T5194] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 322.156490][ T786] usb 5-1: SerialNumber: syz [ 322.186127][ T786] usb 5-1: config 0 descriptor?? [ 322.326650][ T5194] usb 4-1: Using ep0 maxpacket: 16 [ 322.350042][ T5194] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 322.360911][ T5194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.377622][ T5194] usb 4-1: Product: syz [ 322.381901][ T29] audit: type=1804 audit(1719547227.006:67): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.776" name="/root/syzkaller.8InsRL/38/file0" dev="sda1" ino=2001 res=1 errno=0 [ 322.404647][ T5194] usb 4-1: Manufacturer: syz [ 322.419853][ T5194] usb 4-1: SerialNumber: syz [ 322.432631][ T786] usb 5-1: Cannot retrieve CPort count: -71 [ 322.451027][ T5194] usb 4-1: config 0 descriptor?? [ 322.464339][ T786] usb 5-1: Cannot retrieve CPort count: -71 [ 322.480886][ T29] audit: type=1804 audit(1719547227.006:68): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.776" name="/root/syzkaller.8InsRL/38/file0" dev="sda1" ino=2001 res=1 errno=0 [ 322.506330][ T786] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 322.672174][ T5194] usb 4-1: Cannot retrieve CPort count: -71 [ 322.683470][ T5194] usb 4-1: Cannot retrieve CPort count: -71 [ 322.695542][ T786] usb 5-1: USB disconnect, device number 39 [ 322.702402][ T5194] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 322.743296][ T5194] usb 4-1: USB disconnect, device number 37 [ 322.935678][ T5082] Bluetooth: hci0: unexpected event 0x09 length: 10 > 3 [ 322.941494][ T5082] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 322.948662][ T5082] Bluetooth: hci0: SCO packet for unknown connection handle 1039 [ 324.257942][ T8777] 9pnet_fd: Insufficient options for proto=fd [ 324.372323][ T5082] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 324.517103][ T8782] block nbd1: shutting down sockets [ 324.596541][ T5194] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 324.800384][ T5194] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 324.824211][ T5194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.825518][ T29] audit: type=1800 audit(1719547229.446:69): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.785" name="file1" dev="sda1" ino=2011 res=0 errno=0 [ 324.843671][ T8793] 9pnet_fd: Insufficient options for proto=fd [ 324.892449][ T5194] usb 1-1: config 0 descriptor?? [ 324.915219][ T5194] usb-storage 1-1:0.0: USB Mass Storage device detected [ 324.962406][ T5194] usb-storage 1-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 324.972716][ T29] audit: type=1804 audit(1719547229.586:70): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.787" name="/root/syzkaller.2HJ6E5/33/file0" dev="sda1" ino=2012 res=1 errno=0 [ 325.131498][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.144960][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.155238][ T29] audit: type=1804 audit(1719547229.606:71): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.787" name="/root/syzkaller.2HJ6E5/33/file0" dev="sda1" ino=2012 res=1 errno=0 [ 326.997553][ T5129] usb 1-1: USB disconnect, device number 35 [ 327.069049][ T8819] 9pnet_fd: Insufficient options for proto=fd [ 327.555808][ T8825] trusted_key: encrypted_key: key user:syz not found [ 328.416535][ T5082] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 328.432747][ T5082] Bluetooth: hci0: Injecting HCI hardware error event [ 328.442158][ T53] Bluetooth: hci0: hardware error 0x00 [ 328.521621][ T8823] sched: RT throttling activated [ 330.206561][ T785] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 330.449379][ T785] usb 2-1: not running at top speed; connect to a high speed hub [ 330.468493][ T785] usb 2-1: config 9 has an invalid interface number: 29 but max is 2 [ 330.500197][ T785] usb 2-1: config 9 has an invalid interface number: 4 but max is 2 [ 330.519550][ T785] usb 2-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 330.526571][ T5083] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 330.572820][ T785] usb 2-1: config 9 has an invalid interface number: 48 but max is 2 [ 330.581601][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 330.610840][ T785] usb 2-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 330.632266][ T785] usb 2-1: config 9 has no interface number 0 [ 330.653189][ T785] usb 2-1: config 9 has no interface number 1 [ 330.662473][ T785] usb 2-1: config 9 has no interface number 2 [ 330.674027][ T785] usb 2-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 330.696304][ T785] usb 2-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 330.777594][ T785] usb 2-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 330.788606][ T5083] usb 5-1: Using ep0 maxpacket: 16 [ 330.801077][ T785] usb 2-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 330.814198][ T785] usb 2-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 330.826208][ T785] usb 2-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 330.828685][ T25] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 330.881219][ T785] usb 2-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 330.881608][ T5083] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 330.942339][ T5083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.951811][ T785] usb 2-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 330.966471][ T785] usb 2-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.979475][ T785] usb 2-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 330.996621][ T785] usb 2-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 331.010459][ T785] usb 2-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 331.022403][ T5083] usb 5-1: Product: syz [ 331.022684][ T785] usb 2-1: config 9 interface 48 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 331.042055][ T5083] usb 5-1: Manufacturer: syz [ 331.076830][ T5083] usb 5-1: SerialNumber: syz [ 331.078133][ T785] usb 2-1: config 9 interface 29 has no altsetting 0 [ 331.109845][ T785] usb 2-1: config 9 interface 4 has no altsetting 0 [ 331.110891][ T25] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 331.125892][ T785] usb 2-1: config 9 interface 48 has no altsetting 0 [ 331.143171][ T5083] usb 5-1: config 0 descriptor?? [ 331.159781][ T785] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 331.169955][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.169980][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.186326][ T785] usb 2-1: Product: Е [ 331.211617][ T25] usb 3-1: config 0 descriptor?? [ 331.215128][ T785] usb 2-1: Manufacturer: о [ 331.222987][ T25] usb-storage 3-1:0.0: USB Mass Storage device detected [ 331.260699][ T25] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 331.372512][ T5083] usb 5-1: Cannot retrieve CPort count: -71 [ 331.396746][ T5083] usb 5-1: Cannot retrieve CPort count: -71 [ 331.402688][ T5083] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 331.460572][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.472335][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.492670][ T5083] usb 5-1: USB disconnect, device number 40 [ 331.498031][ T785] usb 2-1: unknown interface protocol 0x4f, assuming v1 [ 331.526123][ T785] usb 2-1: cannot find UAC_HEADER [ 331.554557][ T29] audit: type=1800 audit(1719547236.176:72): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.806" name="file1" dev="sda1" ino=2012 res=0 errno=0 [ 331.637307][ T785] snd-usb-audio 2-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 331.691843][ T785] usb 2-1: USB disconnect, device number 42 [ 332.100839][ T5095] udevd[5095]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.768600][ T785] usb 3-1: USB disconnect, device number 43 [ 335.045457][ T8898] 9pnet_fd: Insufficient options for proto=fd [ 335.052871][ T29] audit: type=1804 audit(1719547239.686:73): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.818" name="/root/syzkaller.2HJ6E5/41/file0" dev="sda1" ino=2011 res=1 errno=0 [ 335.087376][ T29] audit: type=1804 audit(1719547239.706:74): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.818" name="/root/syzkaller.2HJ6E5/41/file0" dev="sda1" ino=2011 res=1 errno=0 [ 335.640933][ T785] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 335.762422][ T8915] trusted_key: encrypted_key: insufficient parameters specified [ 336.658977][ T785] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 336.671112][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.711567][ T785] usb 5-1: config 0 descriptor?? [ 336.724122][ T785] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 336.865138][ T8927] netlink: 'syz.3.827': attribute type 10 has an invalid length. [ 336.910152][ T8927] team0: Device ipvlan1 failed to register rx_handler [ 336.920696][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 337.481111][ T29] audit: type=1800 audit(1719547242.106:75): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.829" name="file1" dev="sda1" ino=2011 res=0 errno=0 [ 337.576501][ T786] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 337.767965][ T786] usb 2-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 337.789471][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.818040][ T786] usb 2-1: config 0 descriptor?? [ 337.832223][ T8902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.838827][ T786] usb-storage 2-1:0.0: USB Mass Storage device detected [ 337.991777][ T786] usb-storage 2-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 338.001639][ T8902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.773678][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.826733][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.917245][ T786] usb 5-1: USB disconnect, device number 41 [ 339.023344][ T8946] 9pnet_fd: Insufficient options for proto=fd [ 339.034448][ T29] audit: type=1804 audit(1719547243.666:76): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.832" name="/root/syzkaller.SOSdyL/32/file0" dev="sda1" ino=2010 res=1 errno=0 [ 339.056558][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.071803][ T29] audit: type=1804 audit(1719547243.666:77): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.832" name="/root/syzkaller.SOSdyL/32/file0" dev="sda1" ino=2010 res=1 errno=0 [ 339.251429][ T5083] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 339.349121][ T8950] trusted_key: encrypted_key: key user:syz not found [ 339.738388][ T5083] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 339.774304][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.821321][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.012993][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.025035][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.034733][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.076461][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.106009][ T25] usb 2-1: USB disconnect, device number 43 [ 340.120234][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.162077][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.206480][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.217622][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.256216][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.273409][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.281750][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.291466][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.303139][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.311583][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.323474][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.335474][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.348492][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.358206][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.372259][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.390557][ T5083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.415746][ T5083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.438072][ T5083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.452680][ T5083] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 340.475105][ T5083] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 340.492967][ T5083] usb 4-1: Product: syz [ 340.500793][ T5083] usb 4-1: Manufacturer: syz [ 340.505414][ T5083] usb 4-1: SerialNumber: syz [ 340.525535][ T5083] usb 4-1: config 0 descriptor?? [ 340.539740][ T5083] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 340.596733][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 340.788743][ T25] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 340.809828][ T25] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 340.822539][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 340.849911][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.868173][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 340.869333][ T785] usb 4-1: USB disconnect, device number 38 [ 340.906624][ T5083] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 340.923273][ T785] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 341.106844][ T5083] usb 3-1: device descriptor read/64, error -71 [ 341.266787][ T8975] netlink: 'syz.0.841': attribute type 10 has an invalid length. [ 341.278848][ T8975] netlink: 2 bytes leftover after parsing attributes in process `syz.0.841'. [ 341.327985][ T25] usb 2-1: string descriptor 0 read error: -32 [ 341.355514][ T25] usb 2-1: USB disconnect, device number 44 [ 341.395953][ T5083] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 341.566670][ T5083] usb 3-1: device descriptor read/64, error -71 [ 341.692085][ T5083] usb usb3-port1: attempt power cycle [ 342.291222][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 342.570203][ T5083] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 342.607105][ T5083] usb 3-1: device descriptor read/8, error -71 [ 342.971935][ T9001] trusted_key: encrypted_key: key user:syz not found [ 343.122543][ T5083] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 343.236857][ T5083] usb 3-1: device descriptor read/8, error -71 [ 343.387034][ T5083] usb usb3-port1: unable to enumerate USB device [ 346.262559][ T5083] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 346.840629][ T5083] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 346.861135][ T5083] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 346.875807][ T5083] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 346.890138][ T5083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.890141][ T53] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 347.381094][ T5083] usb 5-1: string descriptor 0 read error: -32 [ 347.417101][ T5083] usb 5-1: USB disconnect, device number 42 [ 347.660823][ T9050] trusted_key: encrypted_key: key user:syz not found [ 347.667172][ T29] audit: type=1804 audit(1719547252.246:78): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.862" name="/root/syzkaller.2HJ6E5/53/file0" dev="sda1" ino=2011 res=1 errno=0 [ 347.695260][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.743622][ T29] audit: type=1804 audit(1719547252.246:79): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.862" name="/root/syzkaller.2HJ6E5/53/file0" dev="sda1" ino=2011 res=1 errno=0 [ 348.010696][ T9052] ebtables: ebtables: counters copy to user failed while replacing table [ 349.188320][ T5083] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 350.309592][ T5083] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 350.333305][ T5083] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 350.364932][ T5083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.407405][ T5083] usb 1-1: config 0 descriptor?? [ 350.408544][ T29] audit: type=1800 audit(1719547255.036:80): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.868" name="file1" dev="sda1" ino=2017 res=0 errno=0 [ 350.419049][ T5083] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 350.502748][ T53] Bluetooth: hci4: link tx timeout [ 350.511130][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 350.523952][ T5083] usb 1-1: No valid video chain found. [ 350.649429][ T5083] usb 1-1: USB disconnect, device number 36 [ 351.729012][ T9114] trusted_key: encrypted_key: key user:syz not found [ 352.593615][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 353.140267][ T785] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 353.450406][ T785] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 353.785600][ T785] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 353.816657][ T785] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 353.852399][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.301699][ T785] usb 1-1: string descriptor 0 read error: -32 [ 354.323096][ T785] usb 1-1: USB disconnect, device number 37 [ 354.335311][ T9144] ebtables: ebtables: counters copy to user failed while replacing table [ 354.505989][ T9158] 9pnet_fd: Insufficient options for proto=fd [ 354.540794][ T9158] 9pnet_fd: Insufficient options for proto=fd [ 354.728992][ T5132] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 354.866484][ T786] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 354.886514][ T5132] usb 2-1: device descriptor read/64, error -71 [ 354.987970][ T9169] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 355.201048][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 355.210220][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 355.222145][ T786] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.226606][ T5132] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 355.235048][ T786] usb 4-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88 [ 355.254586][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.306506][ T786] usb 4-1: Product: syz [ 355.310786][ T786] usb 4-1: Manufacturer: syz [ 355.332905][ T786] usb 4-1: SerialNumber: syz [ 355.524944][ T786] usb 4-1: config 0 descriptor?? [ 356.023294][ T5132] usb 2-1: device descriptor read/64, error -71 [ 356.076719][ T786] kaweth 4-1:0.0: Firmware present in device. [ 356.097424][ T5131] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 356.156982][ T5132] usb usb2-port1: attempt power cycle [ 356.166162][ T786] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 356.343575][ T5131] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 356.382964][ T5131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.443894][ T5131] usb 3-1: config 0 descriptor?? [ 356.616851][ T5132] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 356.710677][ T5132] usb 2-1: device descriptor read/8, error -71 [ 356.735905][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.858505][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.885140][ T786] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 356.906701][ T786] usb 4-1: USB disconnect, device number 39 [ 356.930344][ T5131] usb 3-1: string descriptor 0 read error: -71 [ 356.952375][ T5131] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 357.045830][ T5131] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 357.086651][ T5132] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 357.102673][ T5131] usb 3-1: USB disconnect, device number 48 [ 357.201798][ T5132] usb 2-1: device descriptor read/8, error -71 [ 357.994112][ T5132] usb usb2-port1: unable to enumerate USB device [ 358.075414][ T5082] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 358.436676][ T786] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 358.456853][ T785] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 358.661502][ T786] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 358.682204][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.697072][ T785] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 358.714818][ T786] usb 4-1: config 0 descriptor?? [ 358.725445][ T786] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 358.751756][ T785] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 358.783155][ T785] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 358.799112][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.336966][ T9232] netlink: 'syz.2.908': attribute type 10 has an invalid length. [ 359.344940][ T9232] netlink: 2 bytes leftover after parsing attributes in process `syz.2.908'. [ 359.355302][ T9232] team0: entered promiscuous mode [ 359.360988][ T9232] team_slave_0: entered promiscuous mode [ 359.375365][ T9232] team_slave_1: entered promiscuous mode [ 359.398733][ T9232] bridge0: port 3(team0) entered blocking state [ 359.415876][ T785] usb 5-1: string descriptor 0 read error: -32 [ 359.439214][ T9232] bridge0: port 3(team0) entered disabled state [ 359.445849][ T785] usb 5-1: USB disconnect, device number 43 [ 359.459895][ T9232] team0: entered allmulticast mode [ 359.467396][ T9232] team_slave_0: entered allmulticast mode [ 359.473159][ T9232] team_slave_1: entered allmulticast mode [ 359.482721][ T9232] bridge0: port 3(team0) entered blocking state [ 359.489221][ T9232] bridge0: port 3(team0) entered forwarding state [ 360.160748][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.326943][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.610387][ T785] usb 4-1: USB disconnect, device number 40 [ 360.656685][ T5083] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 361.661604][ T5132] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 361.928753][ T5132] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 361.976470][ T5132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.011008][ T5132] usb 3-1: config 0 descriptor?? [ 362.254858][ T9246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.267572][ T9246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.293911][ T5083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.304450][ T5083] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.313703][ T5083] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 362.322942][ T5083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.339851][ T5083] usb 1-1: config 0 descriptor?? [ 362.356012][ T5132] usb 3-1: string descriptor 0 read error: -71 [ 362.374510][ T5132] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 362.374541][ T5132] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 362.387316][ T5132] usb 3-1: USB disconnect, device number 49 [ 362.424351][ T5083] usb 1-1: USB disconnect, device number 38 [ 363.336740][ T29] audit: type=1326 audit(1719547267.956:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dee175b29 code=0x7ffc0000 [ 364.216487][ T29] audit: type=1326 audit(1719547267.956:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6dee175b29 code=0x7ffc0000 [ 364.291486][ T29] audit: type=1326 audit(1719547267.956:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dee175b29 code=0x7ffc0000 [ 365.147411][ T29] audit: type=1326 audit(1719547267.956:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6dee175b29 code=0x7ffc0000 [ 365.192292][ T9305] 9pnet_fd: Insufficient options for proto=fd [ 365.250563][ T9305] 9pnet_fd: Insufficient options for proto=fd [ 365.287061][ T29] audit: type=1326 audit(1719547267.956:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dee175b29 code=0x7ffc0000 [ 365.467064][ T5131] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 365.497305][ T29] audit: type=1326 audit(1719547267.956:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dee175b29 code=0x7ffc0000 [ 365.562255][ T29] audit: type=1326 audit(1719547267.956:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6dee175b29 code=0x7ffc0000 [ 365.595129][ T29] audit: type=1326 audit(1719547267.956:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dee175b29 code=0x7ffc0000 [ 365.692492][ T29] audit: type=1326 audit(1719547267.956:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6dee16cba7 code=0x7ffc0000 [ 365.715179][ T29] audit: type=1326 audit(1719547267.956:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9286 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6dee111559 code=0x7ffc0000 [ 366.135729][ T9317] trusted_key: encrypted_key: insufficient parameters specified [ 366.220840][ T5131] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 366.244893][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.256213][ T5132] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 366.303202][ T5131] usb 1-1: config 0 descriptor?? [ 366.314485][ T5131] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 366.626455][ T5132] usb 2-1: Using ep0 maxpacket: 16 [ 366.652694][ T5132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 366.739926][ T5132] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.765374][ T5132] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88 [ 366.780693][ T5132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.789327][ T5132] usb 2-1: Product: syz [ 366.796221][ T5132] usb 2-1: Manufacturer: syz [ 366.803549][ T5132] usb 2-1: SerialNumber: syz [ 366.862204][ T5132] usb 2-1: config 0 descriptor?? [ 367.161176][ T5132] kaweth 2-1:0.0: Firmware present in device. [ 367.618478][ T5132] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 367.650451][ T5132] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 367.684180][ T5132] usb 2-1: USB disconnect, device number 49 [ 367.898661][ T9300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.917726][ T9300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.936763][ T9346] block nbd2: shutting down sockets [ 368.051463][ T5083] usb 1-1: USB disconnect, device number 39 [ 368.576060][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.048222][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.071001][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.079358][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.089455][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.109223][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 369.118161][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.166867][ T5194] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 369.200205][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.081549][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.102366][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 370.102384][ T29] audit: type=1800 audit(1719547274.716:140): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.947" name="file1" dev="sda1" ino=2008 res=0 errno=0 [ 370.381327][ T9362] chnl_net:caif_netlink_parms(): no params data found [ 370.399847][ T5194] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 370.414675][ T5194] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 370.424838][ T5194] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 370.483151][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.186131][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 371.193958][ T5194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.217372][ T53] Bluetooth: hci2: command tx timeout [ 371.356695][ T5194] usb 5-1: can't set config #9, error -71 [ 371.375650][ T9362] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.377257][ T5194] usb 5-1: USB disconnect, device number 44 [ 371.392305][ T9394] trusted_key: encrypted_key: insufficient parameters specified [ 371.406465][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.413850][ T9362] bridge_slave_0: entered allmulticast mode [ 371.444952][ T9362] bridge_slave_0: entered promiscuous mode [ 371.460648][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.478707][ T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.506227][ T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 371.507040][ T9362] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.520716][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.532772][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.541285][ T25] usb 3-1: config 0 descriptor?? [ 371.550283][ T9362] bridge_slave_1: entered allmulticast mode [ 371.583446][ T9362] bridge_slave_1: entered promiscuous mode [ 371.711435][ T9362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.727445][ T51] team0: left allmulticast mode [ 371.732342][ T51] team_slave_0: left allmulticast mode [ 371.744897][ T9402] block nbd4: shutting down sockets [ 371.762577][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.775957][ T51] team_slave_1: left allmulticast mode [ 371.790255][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.796646][ T51] bridge0: port 3(team0) entered disabled state [ 371.810519][ T785] usb 3-1: USB disconnect, device number 50 [ 371.832092][ T51] bridge_slave_1: left allmulticast mode [ 371.842973][ T51] bridge_slave_1: left promiscuous mode [ 371.850879][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.867859][ T51] bridge_slave_0: left allmulticast mode [ 371.873821][ T51] bridge_slave_0: left promiscuous mode [ 371.879778][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.938090][ T29] audit: type=1326 audit(1719547276.556:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c50975b29 code=0x7ffc0000 [ 372.003628][ T29] audit: type=1326 audit(1719547276.556:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c50975b29 code=0x7ffc0000 [ 372.069249][ T29] audit: type=1326 audit(1719547276.566:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c5096cba7 code=0x7ffc0000 [ 372.145025][ T29] audit: type=1326 audit(1719547276.566:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c50911559 code=0x7ffc0000 [ 372.168488][ T29] audit: type=1326 audit(1719547276.566:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f3c50975b29 code=0x7ffc0000 [ 372.201559][ T29] audit: type=1326 audit(1719547276.566:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c50975b29 code=0x7ffc0000 [ 372.256159][ T29] audit: type=1326 audit(1719547276.566:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c50975b29 code=0x7ffc0000 [ 372.329968][ T9419] 9pnet_fd: Insufficient options for proto=fd [ 372.332321][ T29] audit: type=1326 audit(1719547276.566:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c50975b29 code=0x7ffc0000 [ 372.347863][ T9419] 9pnet_fd: Insufficient options for proto=fd [ 372.634952][ T29] audit: type=1326 audit(1719547276.566:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c50975b29 code=0x7ffc0000 [ 373.106779][ T785] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 373.297166][ T53] Bluetooth: hci2: command tx timeout [ 373.386577][ T785] usb 2-1: Using ep0 maxpacket: 16 [ 373.401369][ T785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 373.416457][ T785] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 373.455253][ T785] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88 [ 373.479342][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.498285][ T785] usb 2-1: Product: syz [ 373.502557][ T785] usb 2-1: Manufacturer: syz [ 373.513744][ T785] usb 2-1: SerialNumber: syz [ 373.533919][ T785] usb 2-1: config 0 descriptor?? [ 373.774769][ T785] kaweth 2-1:0.0: Firmware present in device. [ 373.813592][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.841942][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.860045][ T51] bond0 (unregistering): Released all slaves [ 373.891684][ T9362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.953376][ T785] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 373.980133][ T785] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 374.018485][ T785] usb 2-1: USB disconnect, device number 50 [ 374.152992][ T9362] team0: Port device team_slave_0 added [ 374.413217][ T9362] team0: Port device team_slave_1 added [ 374.760640][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.891452][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.106847][ T9362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.119719][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.126709][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.156465][ T9362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.276477][ T785] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 375.376780][ T53] Bluetooth: hci2: command tx timeout [ 375.399752][ T9362] hsr_slave_0: entered promiscuous mode [ 375.454456][ T9362] hsr_slave_1: entered promiscuous mode [ 375.478309][ T785] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 376.042799][ T51] hsr_slave_0: left promiscuous mode [ 376.132869][ T785] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 376.142611][ T785] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 376.151949][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.202647][ T51] hsr_slave_1: left promiscuous mode [ 376.217403][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.252300][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 376.252318][ T29] audit: type=1326 audit(1719547280.866:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.288704][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.331555][ T29] audit: type=1326 audit(1719547280.866:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.354012][ T29] audit: type=1326 audit(1719547280.866:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.383462][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.404909][ T9450] block nbd1: shutting down sockets [ 376.409571][ T29] audit: type=1326 audit(1719547280.866:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.435232][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.482923][ T29] audit: type=1326 audit(1719547280.866:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.536886][ T51] veth1_macvtap: left promiscuous mode [ 376.542494][ T51] veth0_macvtap: left promiscuous mode [ 376.556659][ T51] veth1_vlan: left promiscuous mode [ 376.562044][ T51] veth0_vlan: left promiscuous mode [ 376.584349][ T29] audit: type=1326 audit(1719547280.876:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.584866][ T785] usb 1-1: string descriptor 0 read error: -32 [ 376.646897][ T29] audit: type=1326 audit(1719547280.876:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.678794][ T785] usb 1-1: USB disconnect, device number 40 [ 376.776607][ T29] audit: type=1326 audit(1719547280.876:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.862751][ T29] audit: type=1326 audit(1719547280.876:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.885716][ T29] audit: type=1326 audit(1719547280.876:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27c0575b29 code=0x7ffc0000 [ 376.933132][ T5194] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 377.164575][ T5194] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.164691][ T5194] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 377.164987][ T5194] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 377.165069][ T5194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.629093][ T53] Bluetooth: hci2: command tx timeout [ 377.677006][ T5194] usb 5-1: config 0 descriptor?? [ 377.888106][ T9469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.908075][ T9469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.927727][ T53] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 377.998322][ T53] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 378.029086][ T5129] usb 5-1: USB disconnect, device number 45 [ 483.746390][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 483.753382][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5095/1:b..l [ 483.761802][ C1] rcu: (detected by 1, t=10502 jiffies, g=44561, q=376 ncpus=2) [ 483.769524][ C1] task:udevd state:R running task stack:22048 pid:5095 tgid:5095 ppid:4535 flags:0x00000002 [ 483.782423][ C1] Call Trace: [ 483.785720][ C1] [ 483.788664][ C1] __schedule+0x1796/0x49d0 [ 483.793219][ C1] ? __pfx___schedule+0x10/0x10 [ 483.798084][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.804086][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 483.809386][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 483.814508][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 483.820248][ C1] irqentry_exit+0x5e/0x90 [ 483.824674][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 483.830673][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 483.835966][ C1] Code: 63 03 e9 2b ff ff ff e8 68 ef 00 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 38 7e 87 7e e8 9b 0d 01 0a 89 c3 83 f8 08 73 7a [ 483.855579][ C1] RSP: 0018:ffffc900036079c0 EFLAGS: 00000202 [ 483.861659][ C1] RAX: 0000000000000000 RBX: ffffea00013b8c00 RCX: ffff888027febc00 [ 483.869638][ C1] RDX: ffff888027febc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 483.877617][ C1] RBP: 0000000000000001 R08: ffffffff82044981 R09: 1ffffffff25ee2b0 [ 483.885607][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: ffffea00013b8c00 [ 483.893608][ C1] R13: 0000000000000003 R14: ffffffff82044950 R15: ffffea00013b8c08 [ 483.901602][ C1] ? page_ext_get+0x20/0x2a0 [ 483.906216][ C1] ? page_ext_get+0x51/0x2a0 [ 483.910831][ C1] page_ext_get+0x5a/0x2a0 [ 483.915354][ C1] __page_table_check_zero+0xb1/0x350 [ 483.920831][ C1] free_unref_page+0xd2d/0xea0 [ 483.925629][ C1] __put_partials+0xeb/0x130 [ 483.930237][ C1] put_cpu_partial+0x17c/0x250 [ 483.935013][ C1] ? put_cpu_partial+0x70/0x250 [ 483.939883][ C1] __slab_free+0x2ea/0x3d0 [ 483.944309][ C1] ? __phys_addr+0xba/0x170 [ 483.948833][ C1] qlist_free_all+0x9e/0x140 [ 483.953445][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 483.958921][ C1] __kasan_slab_alloc+0x23/0x80 [ 483.963883][ C1] ? getname_flags+0xbd/0x4f0 [ 483.968566][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 483.974042][ C1] getname_flags+0xbd/0x4f0 [ 483.978560][ C1] vfs_fstatat+0x11c/0x190 [ 483.982989][ C1] __x64_sys_newfstatat+0x125/0x1b0 [ 483.988204][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 483.993960][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.000302][ C1] ? do_syscall_64+0x100/0x230 [ 484.005080][ C1] ? do_syscall_64+0xb6/0x230 [ 484.009777][ C1] do_syscall_64+0xf3/0x230 [ 484.014296][ C1] ? clear_bhb_loop+0x35/0x90 [ 484.018989][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.024897][ C1] RIP: 0033:0x7fa2867165f4 [ 484.029332][ C1] RSP: 002b:00007ffdc06a1288 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 484.037846][ C1] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007fa2867165f4 [ 484.045829][ C1] RDX: 00007ffdc06a1298 RSI: 00007ffdc06a1367 RDI: 00000000ffffff9c [ 484.053812][ C1] RBP: 00007ffdc06a23a0 R08: 0000000000000000 R09: 00007ffdc06a2158 [ 484.061792][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc06a27c8 [ 484.069768][ C1] R13: 0000000000000000 R14: 00007ffdc06a27c8 R15: 0000556dcaeb8910 [ 484.077761][ C1] [ 484.080784][ C1] rcu: rcu_preempt kthread starved for 10457 jiffies! g44561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 484.091990][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 484.101963][ C1] rcu: RCU grace-period kthread stack dump: [ 484.107857][ C1] task:rcu_preempt state:R running task stack:26008 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 484.119605][ C1] Call Trace: [ 484.122889][ C1] [ 484.125824][ C1] __schedule+0x1796/0x49d0 [ 484.130360][ C1] ? __pfx___schedule+0x10/0x10 [ 484.135224][ C1] ? __pfx_lock_release+0x10/0x10 [ 484.140258][ C1] ? __asan_memset+0x23/0x50 [ 484.144864][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 484.150673][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.157009][ C1] ? schedule+0x90/0x320 [ 484.161254][ C1] schedule+0x14b/0x320 [ 484.165417][ C1] schedule_timeout+0x1be/0x310 [ 484.170279][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 484.175663][ C1] ? __pfx_process_timeout+0x10/0x10 [ 484.180959][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 484.186520][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 484.191396][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 484.197474][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 484.202762][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.208670][ C1] ? finish_swait+0xd4/0x1e0 [ 484.213268][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 484.217872][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 484.223073][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.228980][ C1] ? __kthread_parkme+0x169/0x1d0 [ 484.234013][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 484.239218][ C1] kthread+0x2f0/0x390 [ 484.243293][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 484.248492][ C1] ? __pfx_kthread+0x10/0x10 [ 484.253194][ C1] ret_from_fork+0x4b/0x80 [ 484.257618][ C1] ? __pfx_kthread+0x10/0x10 [ 484.262213][ C1] ret_from_fork_asm+0x1a/0x30 [ 484.267000][ C1] [ 484.270023][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 484.276353][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0 [ 484.286066][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 484.296111][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 484.301386][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 95 28 ab 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 484.320995][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 484.327084][ C1] RAX: ffff888017e98000 RBX: ffff88801b684064 RCX: 000000000076b449 [ 484.330710][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 484.335052][ C1] RDX: 0000000000000001 RSI: ffff88801b684000 RDI: ffff88801b684064 [ 484.349002][ C1] RBP: 000000000003a538 R08: ffff8880b9537ccb R09: 1ffff110172a6f99 [ 484.356993][ C1] R10: dffffc0000000000 R11: ffffffff8b7d78e0 R12: ffff888019b4e800 [ 484.365236][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eabb9a0 [ 484.369854][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 484.373199][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 484.383614][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 484.388317][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.388334][ C1] CR2: 00007f01024ecf5e CR3: 000000000e132000 CR4: 00000000003506f0 [ 484.388350][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.388362][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.425004][ C1] Call Trace: [ 484.428268][ C1] [ 484.431096][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 484.437406][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 484.443023][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 484.448808][ C1] ? __pfx_lock_release+0x10/0x10 [ 484.453825][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 484.460047][ C1] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 484.465401][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 484.471015][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 484.476195][ C1] ? update_process_times+0x1ce/0x230 [ 484.481547][ C1] ? tick_nohz_handler+0x37c/0x500 [ 484.486646][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 484.492083][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 484.497443][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 484.503413][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 484.509117][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 484.515166][ C1] ? hrtimer_interrupt+0x396/0x990 [ 484.520271][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 484.526448][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 484.532266][ C1] [ 484.535187][ C1] [ 484.538102][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.544244][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 484.549511][ C1] ? acpi_safe_halt+0x21/0x30 [ 484.554180][ C1] acpi_idle_enter+0xe4/0x140 [ 484.558839][ C1] cpuidle_enter_state+0x112/0x480 [ 484.563936][ C1] ? __pfx_menu_select+0x10/0x10 [ 484.568867][ C1] cpuidle_enter+0x5d/0xa0 [ 484.573262][ C1] do_idle+0x375/0x5d0 [ 484.577314][ C1] ? __pfx_do_idle+0x10/0x10 [ 484.581890][ C1] cpu_startup_entry+0x42/0x60 [ 484.586635][ C1] start_secondary+0x100/0x100 [ 484.591464][ C1] common_startup_64+0x13e/0x147 [ 484.596402][ C1]