last executing test programs: 15m33.490965825s ago: executing program 1 (id=111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) sendmmsg$inet6(r1, &(0x7f0000000240), 0x0, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) 15m33.464271842s ago: executing program 1 (id=112): socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1000000010, 0x80802, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES32=r1], 0x90}}, 0x0) 15m33.065625104s ago: executing program 1 (id=113): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0x10, 0xf2, 0x10, 0xb95, 0x772a, 0x8273, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x22, 0x0, 0x1, 0x89, 0x53, 0x95, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 15m29.867859921s ago: executing program 1 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x1f00}, 0x94) 15m28.459279215s ago: executing program 1 (id=119): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x10, r2, 0xdc3b8000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x200, 0x18) syslog(0x4, &(0x7f0000000000)=""/29, 0x1d) 15m20.97344008s ago: executing program 1 (id=129): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x3, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b3", 0x3}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f00000011c0)}, {&(0x7f0000000340)}], 0x5, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil) 15m5.864937754s ago: executing program 32 (id=129): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x3, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b3", 0x3}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f00000011c0)}, {&(0x7f0000000340)}], 0x5, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil) 14m41.683892884s ago: executing program 3 (id=179): socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000001cc0), 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 14m38.902714137s ago: executing program 3 (id=182): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(r1, 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0xe, "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"}) 14m37.770357244s ago: executing program 3 (id=184): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0x14, 0xbf, 0x20, 0xac8, 0xc301, 0x82d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x53, 0x8, 0x98}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 14m35.665094186s ago: executing program 3 (id=185): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14m35.40290598s ago: executing program 3 (id=188): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000ac0)="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", 0xfc0}, {&(0x7f0000001ac0)="a10b", 0x2}], 0x3) close(r0) 14m35.085976593s ago: executing program 3 (id=190): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) fchdir(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x3, 'veth0_to_hsr\x00', {0x7}, 0x9}) fsmount(0xffffffffffffffff, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="b88079f4db21d0608285953aae4d6214f1a48cac4173f228f25096c39737af06231ebbeb2dc3f3b97c2ba0bbcc1c27425cb150900da0c8c85e168916ce1a093d50f4175029e7dec0657f657cf50ef7b95e1477b7cff2e749d35b00221be634b1d5f951069376b5d318f731ae0ffa1318c5ebda88e74304faef4a21d8a80d1fb3ff91c81fe53a2077da3f6511b089207e0c570c98b4"], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 14m18.980612802s ago: executing program 33 (id=190): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) fchdir(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x3, 'veth0_to_hsr\x00', {0x7}, 0x9}) fsmount(0xffffffffffffffff, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="b88079f4db21d0608285953aae4d6214f1a48cac4173f228f25096c39737af06231ebbeb2dc3f3b97c2ba0bbcc1c27425cb150900da0c8c85e168916ce1a093d50f4175029e7dec0657f657cf50ef7b95e1477b7cff2e749d35b00221be634b1d5f951069376b5d318f731ae0ffa1318c5ebda88e74304faef4a21d8a80d1fb3ff91c81fe53a2077da3f6511b089207e0c570c98b4"], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 12.633754883s ago: executing program 2 (id=2473): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 11.352902429s ago: executing program 0 (id=2479): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xfffe, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x2, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x45, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x8, 0x3, 0xd, 0x3, 0x605, 0x0, 0xdd80, 0x60a0, 0x7e, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x2dc8, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x7fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000380)={0x100, {{0x2, 0x4e23, @local}}}, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x10, 0x803, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.701173961s ago: executing program 2 (id=2493): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.5659256s ago: executing program 4 (id=2496): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 9.499695694s ago: executing program 2 (id=2498): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') lseek(0xffffffffffffffff, 0xffffffffffdffffe, 0x1) socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000054) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001b00)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d30101b080d29558f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741672db7e4b68d787d9a7a508ae54b3c0200000050e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767074028067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a601007dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3637fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a93319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 9.431435364s ago: executing program 4 (id=2499): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b", 0xa7}, {&(0x7f0000000640)="43215c74775babf5edd55ac86e504abc04f348ed36a3b40c1f9712ed2e1c", 0x1e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb2", 0x65}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4", 0xbd}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dbaa98ec6c093e8d1e1519164a5f89f42ea672b529b4c4d1644463bcaf7c0cb1879b6eda4faf92a8ef59a375beb350482930d962e17d10db3ebb49508d4dfe192e193054216615c1b80ad3efb23a8b29a420bf54e9b5fef66f6eddddfb1f80a2d5b006053bad44d711e65980031615426249bc62c092feb5db72a135b2ba904c82f561ff2099dd9e08bb802adeee7d91a", 0xad}], 0x2, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a40)="1d21ba0cd66e3473c68037fab094c9cbe4565c1161aeb51bee605c71f26915faee4ed9170dfcd774388bdf06b356b4f709160aa83cfc1b63d25602c52b282054cd28085f7215a74e8e2a5e342150886b2a7b18dec8e7ecddccc2d698d14b7f16f2c59781d0a3dfc6908dc69ec4ff2a897ee7277c2ccdff49b79ec664b5f8e7015bbb9f137759961fb67735c695628eeb618270ab32072054c1321f2fcf33141cc6ad4caedcb1d5dea8aeb3906d4b9ad9ddd784a41a28bdcbadcad6a96efe281ade91", 0xc2}, {&(0x7f0000000b40)="e0bc0d024567568d24b0b25317ced07b1cf07ee8ea6e1d0779066864a692139952adfd6c02d61b668d847ea58a9814a019", 0x31}], 0x2}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.423407309s ago: executing program 4 (id=2500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x10b, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000002c40), 0x0, 0x0) 7.339977462s ago: executing program 0 (id=2503): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) 7.338868063s ago: executing program 4 (id=2505): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x2, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x4000009, 0x3c, 0x4, 0x1a, 0x3, 0xc0, 0x5, 0x14c, 0x1}) 6.996881064s ago: executing program 2 (id=2506): open(0x0, 0x143142, 0x0) link(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 6.911721147s ago: executing program 0 (id=2507): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB='\b'], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a0", 0x5e}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c00)}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.517101253s ago: executing program 6 (id=2510): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b", 0xa7}, {&(0x7f0000000640)="43215c74775babf5edd55ac86e504abc04f348ed36a3b40c1f9712ed2e1c", 0x1e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb2", 0x65}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4", 0xbd}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dbaa98ec6c093e8d1e1519164a5f89f42ea672b529b4c4d1644463bcaf7c0cb1879b6eda4faf92a8ef59a375beb350482930d962e17d10db3ebb49508d4dfe192e193054216615c1b80ad3efb23a8b29a420bf54e9b5fef66f6eddddfb1f80a2d5b006053bad44d711e65980031615426249bc62c092feb5db72a135b2ba904c82f561ff2099dd9e08bb802adeee7d91a", 0xad}], 0x2, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a40)="1d21ba0cd66e3473c68037fab094c9cbe4565c1161aeb51bee605c71f26915faee4ed9170dfcd774388bdf06b356b4f709160aa83cfc1b63d25602c52b282054cd28085f7215a74e8e2a5e342150886b2a7b18dec8e7ecddccc2d698d14b7f16f2c59781d0a3dfc6908dc69ec4ff2a897ee7277c2ccdff49b79ec664b5f8e7015bbb9f137759961fb67735c695628eeb618270ab32072054c1321f2fcf33141cc6ad4caedcb1d5dea8aeb3906d4b9ad9ddd784a41a28bdcbadcad6a96efe281ade91", 0xc2}, {&(0x7f0000000b40)="e0bc0d024567568d24b0b25317ced07b1cf07ee8ea6e1d0779066864a692139952adfd6c02d61b668d847ea58a9814a019", 0x31}], 0x2}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.575362023s ago: executing program 0 (id=2511): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.554513574s ago: executing program 2 (id=2512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_io_uring_setup(0x10b, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)}], 0x1}}], 0x1, 0x0) 5.339048904s ago: executing program 6 (id=2514): listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 4.164692144s ago: executing program 6 (id=2516): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5", 0x3a}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 4.149375046s ago: executing program 0 (id=2517): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x21, 0x801, 0xfffffffc, 0xfffffffc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.138174495s ago: executing program 2 (id=2519): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000c40)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x5, 0x2c, 0x66, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @loopback}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x1, 0x2, 0x0, 0x0, 0x9, 0x4, 0x4, 0x4e22, 0x4e20}}}}}}}, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) 3.999249401s ago: executing program 6 (id=2520): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x22, 0x5c9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1}, 0x2, 0xe0, &(0x7f00000000c0)="ac1ca1a61056", 0x6, 0x12, 0xffff5738, 0x0, 0x4008, 0x400, &(0x7f0000000880)="2da64fcedeaa6672ebe687102502928af0012a92740e7f5a9707f9827df35c468d91b9cb200f2a9877ef76c5108af783df23367d1ce35c773385cbe66d7bc904f287a5d29604ba8415faa2a00ec488bcbd4802ad5f17ddee1aa9380da1595c464ee2d5de6f7213017ec313695f557d02f126414dd0a5183a5928e5a73423d83d0515c64ae4b104455ea93a61cf8071a3095d"}) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f00000001c0)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0x0, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$xdp(0x2c, 0x3, 0x0) 3.019390535s ago: executing program 5 (id=2521): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB='\b'], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a0", 0x5e}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c00)}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.930726828s ago: executing program 0 (id=2522): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000243000/0x4000)=nil, 0x4000, 0x8) 2.78080539s ago: executing program 6 (id=2523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x80, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @val, @void, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0xe}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0x30, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0xb}}, @val={0x76, 0x6, {0x4, 0x2, 0x7, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x80}}, 0x24000080) 2.714705158s ago: executing program 5 (id=2524): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x397f64d6b074018, &(0x7f0000001d80)=[{&(0x7f0000000380)=""/131, 0x20001c34}], 0x1, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) syz_clone(0x40108000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000340)=0x1, 0x12) 2.577066545s ago: executing program 5 (id=2525): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x0) getsockopt$nfc_llcp(r1, 0x88, 0x3, 0x0, 0xffffffffffffff2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000700)='./file1\x00', 0x2000775) socket(0xa, 0x2400000001, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f00000005c0)={0x8f, 0x0, 0xa}) 2.564942748s ago: executing program 4 (id=2526): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') lseek(0xffffffffffffffff, 0xffffffffffdffffe, 0x1) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000054) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000001b00)={0x1a, {"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", 0x1000}}, 0x1006) 2.050882195s ago: executing program 5 (id=2527): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.131766592s ago: executing program 6 (id=2528): setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x77359400}}, 0x0) getitimer(0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000002140)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.020555421s ago: executing program 4 (id=2529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x10b, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000002c40), 0x0, 0x0) 38.987385ms ago: executing program 5 (id=2530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_io_uring_setup(0x10b, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)}], 0x1}}], 0x1, 0x0) 0s ago: executing program 5 (id=2531): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="0800c3"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): /dev/bus/usb/001/061 to uid=0, gid=0 failed: No such file or directory [ 609.520774][ T807] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 609.540668][ T807] usb 5-1: device descriptor read/8, error -71 [ 609.798508][ T807] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 609.842659][ T807] usb 5-1: device descriptor read/8, error -71 [ 609.919140][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.920040][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.963066][ T807] usb usb5-port1: unable to enumerate USB device [ 612.540014][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.540364][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.596648][ T9113] binder: BINDER_SET_CONTEXT_MGR already set [ 613.596666][ T9113] binder: 9110:9113 ioctl 4018620d 200000004a80 returned -16 [ 613.661971][ T9116] autofs: Bad value for 'fd' [ 616.256206][ T9141] fuse: Bad value for 'group_id' [ 616.256226][ T9141] fuse: Bad value for 'group_id' [ 616.320046][ T5882] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 616.472713][ T5882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.472769][ T5882] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 616.472791][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.518739][ T5882] usb 6-1: config 0 descriptor?? [ 616.545900][ T5882] pwc: Askey VC010 type 2 USB webcam detected. [ 616.618884][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.631714][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.926855][ T5882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 616.927647][ T5882] pwc: recv_control_msg error -32 req 02 val 2700 [ 616.928566][ T5882] pwc: recv_control_msg error -32 req 02 val 2c00 [ 616.929237][ T5882] pwc: recv_control_msg error -32 req 04 val 1000 [ 616.930144][ T5882] pwc: recv_control_msg error -32 req 04 val 1300 [ 616.963925][ T5882] pwc: recv_control_msg error -32 req 04 val 1400 [ 616.964798][ T5882] pwc: recv_control_msg error -32 req 02 val 2000 [ 616.965648][ T5882] pwc: recv_control_msg error -32 req 02 val 2100 [ 616.966309][ T5882] pwc: recv_control_msg error -32 req 04 val 1500 [ 616.967282][ T5882] pwc: recv_control_msg error -32 req 02 val 2500 [ 616.968106][ T5882] pwc: recv_control_msg error -32 req 02 val 2400 [ 616.971960][ T5882] pwc: recv_control_msg error -32 req 02 val 2600 [ 618.423981][ T5882] pwc: recv_control_msg error -71 req 02 val 2800 [ 618.424685][ T5882] pwc: recv_control_msg error -71 req 04 val 1100 [ 618.425140][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 618.441948][ T5882] pwc: Registered as video103. [ 618.445012][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 618.524133][ T5882] usb 6-1: USB disconnect, device number 21 [ 618.893980][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.894566][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.090718][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.091293][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.259996][ T5882] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 624.432103][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.432160][ T5882] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 624.432179][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.434976][ T5882] usb 1-1: config 0 descriptor?? [ 624.438801][ T5882] pwc: Askey VC010 type 2 USB webcam detected. [ 624.462719][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.462802][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.896456][ T5882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 624.901539][ T5882] pwc: recv_control_msg error -32 req 02 val 2700 [ 624.922064][ T5882] pwc: recv_control_msg error -32 req 02 val 2c00 [ 624.922756][ T5882] pwc: recv_control_msg error -32 req 04 val 1000 [ 624.925060][ T5882] pwc: recv_control_msg error -32 req 04 val 1300 [ 624.961093][ T5882] pwc: recv_control_msg error -32 req 04 val 1400 [ 624.975305][ T5882] pwc: recv_control_msg error -32 req 02 val 2000 [ 624.982180][ T5882] pwc: recv_control_msg error -32 req 02 val 2100 [ 624.985021][ T5882] pwc: recv_control_msg error -32 req 04 val 1500 [ 624.991267][ T5882] pwc: recv_control_msg error -32 req 02 val 2500 [ 624.995421][ T5882] pwc: recv_control_msg error -32 req 02 val 2400 [ 624.996572][ T5882] pwc: recv_control_msg error -32 req 02 val 2600 [ 625.198853][ T5882] pwc: recv_control_msg error -71 req 02 val 2800 [ 625.199298][ T5882] pwc: recv_control_msg error -71 req 04 val 1100 [ 625.199617][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 625.250207][ T5882] pwc: Registered as video103. [ 625.252011][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 625.259603][ T5882] usb 1-1: USB disconnect, device number 62 [ 626.259982][ T5971] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 626.422424][ T5971] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 626.422458][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.422475][ T5971] usb 6-1: Product: syz [ 626.422487][ T5971] usb 6-1: Manufacturer: syz [ 626.422498][ T5971] usb 6-1: SerialNumber: syz [ 626.550000][ T5882] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 626.582960][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.583497][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.719973][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 626.723983][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.724007][ T5882] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 626.724041][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 626.724058][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.740140][ T5882] usb 1-1: config 0 descriptor?? [ 626.883409][ T5971] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 626.883471][ T5971] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 626.884938][ T5971] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 626.884990][ T5971] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 626.885788][ T5971] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 626.971696][ T5971] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 629.225098][ T31] usb 6-1: USB disconnect, device number 22 [ 629.369561][ T36] usb 1-1: USB disconnect, device number 63 [ 629.614780][ T9320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.616880][ T9320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.739955][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 629.779954][ T36] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 629.912062][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.912097][ T31] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 629.912110][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.915822][ T31] usb 6-1: config 0 descriptor?? [ 629.963440][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.963495][ T36] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 629.963519][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 629.963542][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 629.963560][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 629.967601][ T36] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 629.967628][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 629.967645][ T36] usb 1-1: Product: syz [ 629.967658][ T36] usb 1-1: Manufacturer: syz [ 629.967670][ T36] usb 1-1: SerialNumber: syz [ 630.077273][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 630.091072][ T36] usb 1-1: config 0 descriptor?? [ 630.303966][ T36] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 630.304041][ T36] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 630.350339][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 630.353936][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 630.358352][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 630.359641][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 630.377468][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 630.395415][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 630.403675][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 630.417841][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 630.426714][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 630.427438][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 630.428232][ T31] pwc: recv_control_msg error -32 req 02 val 2400 [ 630.429031][ T31] pwc: recv_control_msg error -32 req 02 val 2600 [ 630.443582][ T31] pwc: recv_control_msg error -32 req 02 val 2900 [ 630.605219][ T36] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 630.605391][ T36] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 630.633607][ T36] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 630.933643][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 631.028408][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 631.050305][ T31] pwc: Registered as video103. [ 631.056612][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 631.090407][ T31] usb 6-1: USB disconnect, device number 23 [ 631.590274][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.593224][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.300020][ T31] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 632.480487][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 632.480519][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.480536][ T31] usb 5-1: Product: syz [ 632.480549][ T31] usb 5-1: Manufacturer: syz [ 632.480561][ T31] usb 5-1: SerialNumber: syz [ 632.575653][ T5887] usb 1-1: USB disconnect, device number 64 [ 633.119547][ T9384] warning: `syz.2.1027' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 633.153586][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 633.153639][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 633.154322][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 633.231799][ T31] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 634.145534][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.146008][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.340095][ T1246] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 634.491792][ T1246] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.491817][ T1246] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 634.491864][ T1246] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.538974][ T1246] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.539000][ T1246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.539010][ T1246] usb 6-1: Product: syz [ 634.539017][ T1246] usb 6-1: Manufacturer: syz [ 634.539024][ T1246] usb 6-1: SerialNumber: syz [ 634.604165][ T1246] cdc_mbim 6-1:1.0: skipping garbage [ 634.604186][ T1246] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 634.604232][ T1246] cdc_mbim 6-1:1.0: bind() failure [ 636.688481][ T5882] usb 5-1: USB disconnect, device number 57 [ 637.007987][ T9446] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.098957][ T5882] usb 6-1: USB disconnect, device number 24 [ 637.767111][ T9452] Invalid ELF header magic: != ELF [ 638.749988][ T1246] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 638.792120][ T5882] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 638.879990][ T1246] usb 5-1: device descriptor read/64, error -71 [ 638.940000][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 638.941941][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 638.941986][ T5882] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 638.942005][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.947688][ T5882] usb 6-1: config 0 descriptor?? [ 638.965415][ T5882] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 639.119929][ T1246] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 639.249950][ T1246] usb 5-1: device descriptor read/64, error -71 [ 639.361722][ T1246] usb usb5-port1: attempt power cycle [ 639.650784][ T9475] fuse: Unknown parameter 'grou00000000000000000000' [ 639.729942][ T1246] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 639.750754][ T1246] usb 5-1: device descriptor read/8, error -71 [ 639.989950][ T1246] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 640.010644][ T1246] usb 5-1: device descriptor read/8, error -71 [ 640.054076][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.054575][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.120425][ T1246] usb usb5-port1: unable to enumerate USB device [ 640.329383][ T5882] usb 6-1: USB disconnect, device number 25 [ 640.490386][ T9503] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.733976][ T9510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.734494][ T9510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.093302][ T9536] ieee802154 phy0 wpan0: encryption failed: -22 [ 642.437351][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1077'. [ 642.827183][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.827482][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.779981][ T807] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 643.939973][ T807] usb 1-1: Using ep0 maxpacket: 32 [ 644.001576][ T807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.001622][ T807] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 644.001646][ T807] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 644.001657][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.066383][ T807] usb 1-1: config 0 descriptor?? [ 644.078990][ T807] hub 1-1:0.0: bad descriptor, ignoring hub [ 644.079012][ T807] hub 1-1:0.0: probe with driver hub failed with error -5 [ 644.093908][ T807] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 644.153352][ T9561] ieee802154 phy0 wpan0: encryption failed: -22 [ 644.380335][ T1246] usb 1-1: USB disconnect, device number 65 [ 644.650048][ T1246] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 644.803947][ T1246] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.804007][ T1246] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 644.804031][ T1246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 644.804055][ T1246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 644.804075][ T1246] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 644.881789][ T1246] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 644.881819][ T1246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 644.881837][ T1246] usb 6-1: Product: syz [ 644.881849][ T1246] usb 6-1: Manufacturer: syz [ 644.881862][ T1246] usb 6-1: SerialNumber: syz [ 644.965598][ T1246] usb 6-1: config 0 descriptor?? [ 645.591578][ T1246] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 645.591810][ T1246] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 646.063434][ T9600] ieee802154 phy0 wpan0: encryption failed: -22 [ 646.396597][ T9613] autofs: Unknown parameter '0x0000000000000000' [ 646.517360][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 648.230076][ T36] usb 6-1: USB disconnect, device number 26 [ 648.328548][ T9630] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.286823][ T9648] autofs: Unknown parameter '0x0000000000000000' [ 649.389931][ T31] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 649.601580][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 649.801420][ T31] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 649.801448][ T31] usb 6-1: config 0 has no interface number 0 [ 649.801493][ T31] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 649.836859][ T31] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 649.836888][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.836906][ T31] usb 6-1: Product: syz [ 649.836919][ T31] usb 6-1: Manufacturer: syz [ 649.836932][ T31] usb 6-1: SerialNumber: syz [ 649.842799][ T31] usb 6-1: config 0 descriptor?? [ 649.929907][ T807] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 650.111845][ T807] usb 1-1: Using ep0 maxpacket: 32 [ 650.339005][ T807] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 650.339158][ T807] usb 1-1: config 0 has no interface number 0 [ 650.339639][ T807] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.339663][ T807] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 650.395128][ T807] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 650.395156][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.395166][ T807] usb 1-1: Product: syz [ 650.395173][ T807] usb 1-1: Manufacturer: syz [ 650.395179][ T807] usb 1-1: SerialNumber: syz [ 650.436673][ T31] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 650.452343][ T807] usb 1-1: config 0 descriptor?? [ 650.468352][ T807] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 650.500048][ T31] usb 6-1: USB disconnect, device number 27 [ 650.672027][ T807] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 650.672317][ T807] quatech2 1-1:0.51: probe with driver quatech2 failed with error -90 [ 650.879176][ T807] usb 1-1: USB disconnect, device number 66 [ 651.009674][ T9664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.015843][ T9664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.240309][ T9672] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.730010][ T31] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 651.880001][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 651.886846][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.886878][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.886918][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 651.886939][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.949752][ T31] usb 5-1: config 0 descriptor?? [ 653.698618][ T31] hid (null): unknown global tag 0xd [ 653.755018][ T31] logitech-djreceiver 0003:046D:C537.000A: unknown global tag 0xd [ 653.755042][ T31] logitech-djreceiver 0003:046D:C537.000A: item 0 1 1 13 parsing failed [ 653.755779][ T31] logitech-djreceiver 0003:046D:C537.000A: logi_dj_probe: parse failed [ 653.755847][ T31] logitech-djreceiver 0003:046D:C537.000A: probe with driver logitech-djreceiver failed with error -22 [ 653.926893][ T31] usb 5-1: USB disconnect, device number 62 [ 656.985044][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.985362][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.089390][ T9744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 657.089417][ T9744] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 657.089515][ T9744] vhci_hcd vhci_hcd.0: Device attached [ 657.139646][ T9744] vhci_hcd vhci_hcd.0: port 0 already used [ 657.152013][ T9745] vhci_hcd: connection closed [ 657.152768][ T58] vhci_hcd vhci_hcd.2: stop threads [ 657.152790][ T58] vhci_hcd vhci_hcd.2: release socket [ 657.152826][ T58] vhci_hcd vhci_hcd.2: disconnect device [ 658.309986][ T1246] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 658.462150][ T1246] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.462206][ T1246] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 658.462227][ T1246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.476914][ T1246] usb 6-1: config 0 descriptor?? [ 658.491899][ T36] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 658.532769][ T1246] pwc: Askey VC010 type 2 USB webcam detected. [ 658.575533][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.576081][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.642100][ T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.642216][ T36] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 658.645351][ T36] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.645376][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.645600][ T36] usb 1-1: Product: syz [ 658.645614][ T36] usb 1-1: Manufacturer: syz [ 658.645626][ T36] usb 1-1: SerialNumber: syz [ 658.700148][ T36] cdc_mbim 1-1:1.0: skipping garbage [ 658.701732][ T36] usb 1-1: selecting invalid altsetting 1 [ 658.942870][ T1246] pwc: recv_control_msg error -32 req 02 val 2b00 [ 658.946968][ T1246] pwc: recv_control_msg error -32 req 02 val 2700 [ 658.950975][ T1246] pwc: recv_control_msg error -32 req 02 val 2c00 [ 658.954107][ T1246] pwc: recv_control_msg error -32 req 04 val 1000 [ 658.959423][ T1246] pwc: recv_control_msg error -32 req 04 val 1300 [ 658.960800][ T1246] pwc: recv_control_msg error -32 req 04 val 1400 [ 658.965814][ T1246] pwc: recv_control_msg error -32 req 02 val 2000 [ 658.970160][ T1246] pwc: recv_control_msg error -32 req 02 val 2100 [ 658.975415][ T1246] pwc: recv_control_msg error -32 req 04 val 1500 [ 658.976885][ T1246] pwc: recv_control_msg error -32 req 02 val 2500 [ 658.980779][ T1246] pwc: recv_control_msg error -32 req 02 val 2400 [ 658.982598][ T1246] pwc: recv_control_msg error -32 req 02 val 2600 [ 659.144088][ T36] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 659.144171][ T36] cdc_mbim 1-1:1.0: bind() failure [ 659.200681][ T1246] pwc: recv_control_msg error -71 req 02 val 2800 [ 659.204594][ T1246] pwc: recv_control_msg error -71 req 04 val 1100 [ 659.205077][ T1246] pwc: recv_control_msg error -71 req 04 val 1200 [ 659.230304][ T1246] pwc: Registered as video103. [ 659.247024][ T1246] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 659.288455][ T1246] usb 6-1: USB disconnect, device number 28 [ 660.976550][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1200'. [ 662.465340][ T31] usb 1-1: USB disconnect, device number 67 [ 662.663687][ T9808] autofs: Unknown parameter 'fd0x0000000000000000' [ 662.900598][ T31] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 662.926007][ T9812] 9p: Bad value for 'wfdno' [ 663.065911][ T31] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 663.065940][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.092857][ T31] usb 1-1: config 0 descriptor?? [ 663.679939][ T5882] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 663.829959][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 663.832391][ T5882] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 663.832414][ T5882] usb 6-1: config 0 has no interface number 0 [ 663.832458][ T5882] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 663.834778][ T5882] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 663.834802][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.834821][ T5882] usb 6-1: Product: syz [ 663.834834][ T5882] usb 6-1: Manufacturer: syz [ 663.834846][ T5882] usb 6-1: SerialNumber: syz [ 663.910666][ T5882] usb 6-1: config 0 descriptor?? [ 665.431817][ T36] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 665.580979][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 665.586006][ T36] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 665.586033][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.597979][ T36] usb 5-1: config 0 descriptor?? [ 665.646817][ T36] as10x_usb: device has been detected [ 665.648225][ T36] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 665.648295][ T5887] usb 1-1: USB disconnect, device number 68 [ 665.755076][ T36] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 665.826947][ T5882] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 667.260361][ T5882] usb 6-1: USB disconnect, device number 29 [ 667.361653][ T36] as10x_usb: error during firmware upload part1 [ 667.362316][ T36] Registered device nBox DVB-T Dongle [ 667.385684][ T36] usb 5-1: USB disconnect, device number 63 [ 667.509331][ T36] Unregistered device nBox DVB-T Dongle [ 667.511851][ T36] as10x_usb: device has been disconnected [ 667.758366][ T9865] 9p: Bad value for 'wfdno' [ 668.210066][ T8807] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 668.339958][ T5882] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 668.370837][ T8807] usb 5-1: Using ep0 maxpacket: 16 [ 668.373818][ T8807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.373871][ T8807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 668.373896][ T8807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 668.373914][ T8807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 668.373932][ T8807] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.375565][ T8807] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 668.375589][ T8807] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 668.375607][ T8807] usb 5-1: Manufacturer: syz [ 668.376602][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.396378][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.503500][ T8807] usb 5-1: config 0 descriptor?? [ 668.542925][ T5882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.542979][ T5882] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 668.543052][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.584430][ T5882] usb 6-1: config 0 descriptor?? [ 668.624215][ T5882] pwc: Askey VC010 type 2 USB webcam detected. [ 668.661962][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'. [ 668.869906][ T8807] rc_core: IR keymap rc-hauppauge not found [ 668.869925][ T8807] Registered IR keymap rc-empty [ 668.873584][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.900346][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.930332][ T8807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 668.939587][ T8807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 668.981971][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.000311][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.022634][ T5882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 669.024546][ T5882] pwc: recv_control_msg error -32 req 02 val 2700 [ 669.027766][ T5882] pwc: recv_control_msg error -32 req 02 val 2c00 [ 669.029259][ T5882] pwc: recv_control_msg error -32 req 04 val 1000 [ 669.056483][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.057542][ T5882] pwc: recv_control_msg error -32 req 04 val 1300 [ 669.073789][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.074120][ T5882] pwc: recv_control_msg error -32 req 04 val 1400 [ 669.074902][ T5882] pwc: recv_control_msg error -32 req 02 val 2000 [ 669.075687][ T5882] pwc: recv_control_msg error -32 req 02 val 2100 [ 669.076472][ T5882] pwc: recv_control_msg error -32 req 04 val 1500 [ 669.077404][ T5882] pwc: recv_control_msg error -32 req 02 val 2500 [ 669.120115][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.120368][ T5882] pwc: recv_control_msg error -32 req 02 val 2400 [ 669.121181][ T5882] pwc: recv_control_msg error -32 req 02 val 2600 [ 669.150179][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.170010][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.190207][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.209983][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.241216][ T8807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.294972][ T8807] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 669.294997][ T8807] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 669.324622][ T5882] pwc: recv_control_msg error -71 req 02 val 2800 [ 669.325288][ T5882] pwc: recv_control_msg error -71 req 04 val 1100 [ 669.326683][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 669.357725][ T5882] pwc: Registered as video103. [ 670.801898][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25 [ 670.805412][ T8807] usb 5-1: USB disconnect, device number 64 [ 670.878022][ T5882] usb 6-1: USB disconnect, device number 30 [ 674.111062][ T9950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.111614][ T9950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.217761][ T9931] fuse: Unknown parameter 'group_id00000000000000000000' [ 674.239981][ T36] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 674.392436][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.392492][ T36] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 674.392513][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.397799][ T36] usb 1-1: config 0 descriptor?? [ 674.430982][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 676.207297][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 676.208140][ T36] pwc: recv_control_msg error -32 req 02 val 2700 [ 676.208821][ T36] pwc: recv_control_msg error -32 req 02 val 2c00 [ 676.209523][ T36] pwc: recv_control_msg error -32 req 04 val 1000 [ 676.211874][ T36] pwc: recv_control_msg error -32 req 04 val 1300 [ 676.220360][ T36] pwc: recv_control_msg error -32 req 04 val 1400 [ 676.221027][ T36] pwc: recv_control_msg error -32 req 02 val 2000 [ 676.222148][ T36] pwc: recv_control_msg error -32 req 02 val 2100 [ 676.222809][ T36] pwc: recv_control_msg error -32 req 04 val 1500 [ 676.231874][ T36] pwc: recv_control_msg error -32 req 02 val 2500 [ 676.232855][ T36] pwc: recv_control_msg error -32 req 02 val 2400 [ 676.238136][ T36] pwc: recv_control_msg error -32 req 02 val 2600 [ 676.441031][ T36] pwc: recv_control_msg error -71 req 02 val 2800 [ 676.441662][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 676.442097][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 676.480319][ T36] pwc: Registered as video103. [ 676.483772][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 676.545440][ T36] usb 1-1: USB disconnect, device number 69 [ 676.562312][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.562834][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.120025][ T9982] fuse: Unknown parameter 'group_id00000000000000000000' [ 681.150569][T10021] binder: 10019:10021 ioctl 4018620d 0 returned -22 [ 684.219966][ T8014] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 684.379962][ T8014] usb 1-1: Using ep0 maxpacket: 32 [ 684.382036][ T8014] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 684.382060][ T8014] usb 1-1: config 0 has no interface number 0 [ 684.384732][ T8014] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 684.384757][ T8014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.384775][ T8014] usb 1-1: Product: syz [ 684.384787][ T8014] usb 1-1: Manufacturer: syz [ 684.384800][ T8014] usb 1-1: SerialNumber: syz [ 684.393121][ T8014] usb 1-1: config 0 descriptor?? [ 684.397788][ T8014] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 684.731490][ T8014] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 684.800009][ T8014] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 685.885834][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.885906][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.244549][ T8014] usb 1-1: USB disconnect, device number 70 [ 687.691535][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 687.810863][ T8014] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 687.900814][ T8014] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 687.901346][ T8014] quatech2 1-1:0.51: device disconnected [ 688.488273][ T8014] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 689.139943][ T8014] usb 1-1: Using ep0 maxpacket: 32 [ 689.142327][ T8014] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 689.142352][ T8014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.176560][ T8014] usb 1-1: config 0 descriptor?? [ 689.258074][ T8014] as10x_usb: device has been detected [ 689.266783][ T8014] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 689.301436][ T8014] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 689.329010][ T8014] as10x_usb: error during firmware upload part1 [ 689.329672][ T8014] Registered device nBox DVB-T Dongle [ 689.424512][ T807] usb 1-1: USB disconnect, device number 71 [ 689.467626][ T807] Unregistered device nBox DVB-T Dongle [ 689.490619][ T807] as10x_usb: device has been disconnected [ 689.507530][ T8014] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 689.659994][ T8014] usb 6-1: Using ep0 maxpacket: 32 [ 689.676988][ T8014] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 689.677016][ T8014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.745290][ T8014] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 690.838899][T10086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1317'. [ 691.251137][ T8014] gspca_nw80x: reg_w err -110 [ 691.251233][ T8014] nw80x 6-1:3.0: probe with driver nw80x failed with error -110 [ 692.111181][T10117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.111722][T10117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.340708][ T8014] usb 6-1: USB disconnect, device number 31 [ 699.441798][T10199] Invalid ELF header magic: != ELF [ 700.074122][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 700.215860][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.216382][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.369930][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 700.499991][ T9] usb 5-1: device descriptor read/64, error -71 [ 700.759953][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 700.828855][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 700.899967][ T9] usb 5-1: device descriptor read/64, error -71 [ 702.016399][ T9] usb usb5-port1: attempt power cycle [ 703.851037][T10243] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 704.340000][ T8014] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 704.340182][ T5971] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 704.490047][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 704.490220][ T8014] usb 6-1: Using ep0 maxpacket: 16 [ 704.493495][ T8014] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.493599][ T8014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.493626][ T8014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 704.493645][ T8014] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 704.493725][ T8014] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.496058][ T8014] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 704.496084][ T8014] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 704.496101][ T8014] usb 6-1: Manufacturer: syz [ 704.498390][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.498418][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.498437][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 704.498475][ T5971] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 704.498495][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.519558][ T5971] usb 5-1: config 0 descriptor?? [ 704.529028][ T8014] usb 6-1: config 0 descriptor?? [ 704.879994][ T8014] rc_core: IR keymap rc-hauppauge not found [ 704.880016][ T8014] Registered IR keymap rc-empty [ 704.880273][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 704.904713][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 704.940893][ T8014] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 704.957150][ T5971] usbhid 5-1:0.0: can't add hid device: -71 [ 704.957298][ T5971] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 704.967151][ T5971] usb 5-1: USB disconnect, device number 68 [ 705.044051][ T8014] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 705.062233][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.084852][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.100101][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.120005][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.140069][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.160295][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.180037][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.200038][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.220015][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.240089][ T8014] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 705.301162][ T8014] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 705.301186][ T8014] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 705.361460][ T8014] usb 6-1: USB disconnect, device number 32 [ 706.680129][ T807] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 706.706508][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 706.829965][ T9] usb 5-1: device descriptor read/64, error -71 [ 706.833516][ T807] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.833539][ T807] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.834764][ T807] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 706.834780][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 706.834790][ T807] usb 6-1: SerialNumber: syz [ 707.080513][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 707.145118][T10312] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 707.145145][T10312] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 707.145224][T10312] vhci_hcd vhci_hcd.0: Device attached [ 707.183197][T10296] vhci_hcd vhci_hcd.0: port 0 already used [ 707.186635][T10313] vhci_hcd: connection closed [ 707.186874][ T6286] vhci_hcd vhci_hcd.5: stop threads [ 707.186890][ T6286] vhci_hcd vhci_hcd.5: release socket [ 707.186915][ T6286] vhci_hcd vhci_hcd.5: disconnect device [ 707.210433][ T9] usb 5-1: device descriptor read/64, error -71 [ 707.236900][ T807] usb 6-1: 0:2 : does not exist [ 707.295591][ T807] usb 6-1: USB disconnect, device number 33 [ 707.320408][ T9] usb usb5-port1: attempt power cycle [ 707.560466][ T8530] udevd[8530]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.660051][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 707.680721][ T9] usb 5-1: device descriptor read/8, error -71 [ 707.919927][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 707.951896][ T9] usb 5-1: device descriptor read/8, error -71 [ 708.060639][ T9] usb usb5-port1: unable to enumerate USB device [ 710.750134][ T8014] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 710.909984][ T8014] usb 5-1: Using ep0 maxpacket: 32 [ 710.915576][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.915607][ T8014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.915642][ T8014] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 710.915664][ T8014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.931340][ T8014] usb 5-1: config 0 descriptor?? [ 710.942805][ T8014] hub 5-1:0.0: USB hub found [ 711.353457][ T8014] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 711.381558][ T8014] usbhid 5-1:0.0: can't add hid device: -71 [ 711.384162][ T8014] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 711.464098][ T8014] usb 5-1: USB disconnect, device number 73 [ 712.138996][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.139553][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.111895][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.112434][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.492435][T10427] binder_alloc: 10426: pid 10426 spamming oneway? 1 buffers allocated for a total size of 4096 [ 714.800167][ T8807] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 715.002825][ T8807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.002856][ T8807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.004366][ T8807] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 715.004390][ T8807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 715.004408][ T8807] usb 5-1: SerialNumber: syz [ 715.381749][T10431] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 715.381776][T10431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 715.382282][T10431] vhci_hcd vhci_hcd.0: Device attached [ 715.399688][T10431] vhci_hcd vhci_hcd.0: port 0 already used [ 715.437981][T10466] vhci_hcd: connection closed [ 715.438560][ T1184] vhci_hcd vhci_hcd.4: stop threads [ 715.438678][ T1184] vhci_hcd vhci_hcd.4: release socket [ 715.438717][ T1184] vhci_hcd vhci_hcd.4: disconnect device [ 715.520226][ T8807] usb 5-1: 0:2 : does not exist [ 715.629599][ T8807] usb 5-1: USB disconnect, device number 74 [ 715.793013][ T8530] udevd[8530]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 716.708147][T10512] No control pipe specified [ 716.840003][ T31] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 716.989998][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 716.992376][ T31] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 716.992401][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.039322][ T31] usb 6-1: config 0 descriptor?? [ 717.059020][ T31] as10x_usb: device has been detected [ 717.059544][ T31] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 717.097122][ T31] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 717.124088][ T31] as10x_usb: error during firmware upload part1 [ 717.124437][ T31] Registered device nBox DVB-T Dongle [ 718.580301][ T31] usb 6-1: USB disconnect, device number 34 [ 718.651950][ T31] Unregistered device nBox DVB-T Dongle [ 718.657046][ T31] as10x_usb: device has been disconnected [ 723.270628][T10592] Zero length message leads to an empty skb [ 723.384660][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.385206][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.430067][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.434987][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.389984][ T8014] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 726.565630][ T8014] usb 6-1: Using ep0 maxpacket: 16 [ 726.576205][ T8014] usb 6-1: config 0 has no interfaces? [ 726.580237][ T8014] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 726.580260][ T8014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.580278][ T8014] usb 6-1: Product: syz [ 726.580290][ T8014] usb 6-1: Manufacturer: syz [ 726.580302][ T8014] usb 6-1: SerialNumber: syz [ 726.599683][ T8014] usb 6-1: config 0 descriptor?? [ 728.311242][ T8807] usb 6-1: USB disconnect, device number 35 [ 728.319582][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 728.587328][T10719] autofs: Bad value for 'fd' [ 730.860336][T10752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.860858][T10752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.519155][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1611'. [ 732.952833][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.953313][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.698812][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.699358][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.773795][T10807] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 733.773821][T10807] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 733.773921][T10807] vhci_hcd vhci_hcd.0: Device attached [ 733.804755][T10807] vhci_hcd vhci_hcd.0: port 0 already used [ 733.807638][T10808] vhci_hcd: connection closed [ 733.808277][ T160] vhci_hcd vhci_hcd.2: stop threads [ 733.808298][ T160] vhci_hcd vhci_hcd.2: release socket [ 733.808334][ T160] vhci_hcd vhci_hcd.2: disconnect device [ 735.416924][T10834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.443124][T10834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.797488][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 737.104051][T10858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.126358][T10858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.202418][T10858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 737.202444][T10858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 737.202538][T10858] vhci_hcd vhci_hcd.0: Device attached [ 737.212240][T10858] vhci_hcd vhci_hcd.0: port 0 already used [ 737.215368][T10861] vhci_hcd: connection closed [ 737.215840][ T6047] vhci_hcd vhci_hcd.2: stop threads [ 737.215860][ T6047] vhci_hcd vhci_hcd.2: release socket [ 737.215894][ T6047] vhci_hcd vhci_hcd.2: disconnect device [ 737.951431][T10892] autofs: Unknown parameter '0x0000000000000000' [ 739.928411][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 742.492382][ T8357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 742.496626][ T8357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 742.497749][ T8357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 742.499142][ T8357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 742.500068][ T8357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 742.949958][ T36] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 744.180459][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 744.507852][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.507883][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.507919][ T36] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 744.507939][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.519927][ T8357] Bluetooth: hci1: command tx timeout [ 744.576151][ T36] usb 5-1: config 0 descriptor?? [ 744.618921][ T36] hub 5-1:0.0: USB hub found [ 744.836874][ T36] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 745.817823][T10968] Invalid ELF header magic: != ELF [ 746.600690][ T8357] Bluetooth: hci1: command tx timeout [ 746.628887][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 746.637673][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 746.680939][ T36] usb 5-1: USB disconnect, device number 75 [ 748.225509][ T5971] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 748.230943][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.231014][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.681781][ T8357] Bluetooth: hci1: command tx timeout [ 748.785622][T10940] chnl_net:caif_netlink_parms(): no params data found [ 749.223010][ T41] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.636279][ T8807] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 750.771906][ T8357] Bluetooth: hci1: command tx timeout [ 753.918095][T11018] Invalid ELF header magic: != ELF [ 754.662708][ T41] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.827333][ T807] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 754.949949][ T807] usb 5-1: device descriptor read/64, error -71 [ 755.130477][ T41] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.199993][ T807] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 755.277241][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.284639][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.284877][T10940] bridge_slave_0: entered allmulticast mode [ 755.300045][T10940] bridge_slave_0: entered promiscuous mode [ 755.329972][ T807] usb 5-1: device descriptor read/64, error -71 [ 755.441407][ T807] usb usb5-port1: attempt power cycle [ 755.548483][ T41] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.631990][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.632129][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.632356][T10940] bridge_slave_1: entered allmulticast mode [ 755.648499][T10940] bridge_slave_1: entered promiscuous mode [ 755.746778][T11045] autofs: Unknown parameter '0x0000000000000000' [ 755.779950][ T807] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 755.809034][ T807] usb 5-1: device descriptor read/8, error -71 [ 755.845289][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.870228][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.429974][ T807] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 757.453671][ T807] usb 5-1: device descriptor read/8, error -71 [ 758.949567][ T807] usb usb5-port1: unable to enumerate USB device [ 759.048197][T10940] team0: Port device team_slave_0 added [ 759.212042][T10940] team0: Port device team_slave_1 added [ 759.457940][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.457956][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.457981][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.559492][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.559509][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.559534][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.793230][ T41] bridge_slave_1: left allmulticast mode [ 759.793257][ T41] bridge_slave_1: left promiscuous mode [ 759.793493][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.041809][ T41] bridge_slave_0: left allmulticast mode [ 760.041837][ T41] bridge_slave_0: left promiscuous mode [ 760.042088][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.859976][ T8807] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 767.899993][ T5971] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 767.989933][ T8807] usb 5-1: device descriptor read/64, error -71 [ 768.052941][ T5971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.052996][ T5971] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 768.053018][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.088444][ T5971] usb 6-1: config 0 descriptor?? [ 768.106376][ T5971] pwc: Askey VC010 type 2 USB webcam detected. [ 768.230598][ T8807] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 768.312383][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.370113][ T8807] usb 5-1: device descriptor read/64, error -71 [ 768.392039][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.442968][ T41] bond0 (unregistering): Released all slaves [ 768.480266][ T8807] usb usb5-port1: attempt power cycle [ 768.510528][ T5971] pwc: recv_control_msg error -32 req 02 val 2b00 [ 768.511631][ T5971] pwc: recv_control_msg error -32 req 02 val 2700 [ 768.512336][ T5971] pwc: recv_control_msg error -32 req 02 val 2c00 [ 768.513009][ T5971] pwc: recv_control_msg error -32 req 04 val 1000 [ 768.513853][ T5971] pwc: recv_control_msg error -32 req 04 val 1300 [ 768.514538][ T5971] pwc: recv_control_msg error -32 req 04 val 1400 [ 768.515217][ T5971] pwc: recv_control_msg error -32 req 02 val 2000 [ 768.516087][ T5971] pwc: recv_control_msg error -32 req 02 val 2100 [ 768.516782][ T5971] pwc: recv_control_msg error -32 req 04 val 1500 [ 768.517857][ T5971] pwc: recv_control_msg error -32 req 02 val 2500 [ 768.530618][ T5971] pwc: recv_control_msg error -32 req 02 val 2400 [ 768.531912][ T5971] pwc: recv_control_msg error -32 req 02 val 2600 [ 768.618772][T10940] hsr_slave_0: entered promiscuous mode [ 768.626202][T10940] hsr_slave_1: entered promiscuous mode [ 768.627127][T10940] debugfs: 'hsr0' already exists in 'hsr' [ 768.627147][T10940] Cannot create hsr debugfs directory [ 768.707124][T11170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.707853][T11170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.737047][ T5971] pwc: recv_control_msg error -71 req 02 val 2800 [ 768.737736][ T5971] pwc: recv_control_msg error -71 req 04 val 1100 [ 768.738199][ T5971] pwc: recv_control_msg error -71 req 04 val 1200 [ 768.770791][ T5971] pwc: Registered as video103. [ 768.795728][ T5971] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 768.815548][ T5971] usb 6-1: USB disconnect, device number 38 [ 768.890087][ T8807] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 768.913057][ T8807] usb 5-1: device descriptor read/8, error -71 [ 769.158249][ T8807] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 769.170806][ T8807] usb 5-1: device descriptor read/8, error -71 [ 769.283623][ T8807] usb usb5-port1: unable to enumerate USB device [ 769.408390][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.408940][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.419335][T11197] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 769.419357][T11197] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 769.419648][T11197] vhci_hcd vhci_hcd.0: Device attached [ 769.424950][T11197] vhci_hcd vhci_hcd.0: port 0 already used [ 769.426387][T11198] vhci_hcd: connection closed [ 769.426789][ T160] vhci_hcd vhci_hcd.2: stop threads [ 769.426809][ T160] vhci_hcd vhci_hcd.2: release socket [ 769.426845][ T160] vhci_hcd vhci_hcd.2: disconnect device [ 769.650563][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 769.830035][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 769.832230][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 769.832253][ T10] usb 6-1: config 0 has no interface number 0 [ 769.834588][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 769.834613][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.834631][ T10] usb 6-1: Product: syz [ 769.834644][ T10] usb 6-1: Manufacturer: syz [ 769.834655][ T10] usb 6-1: SerialNumber: syz [ 769.840996][ T10] usb 6-1: config 0 descriptor?? [ 769.849665][ T10] smsc95xx v2.0.0 [ 770.120592][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.122763][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.261324][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 770.261353][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 770.470013][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 770.470308][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 770.549966][ T41] hsr_slave_0: left promiscuous mode [ 770.572468][ T41] hsr_slave_1: left promiscuous mode [ 770.573321][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.573347][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.611615][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.611643][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.766626][ T41] veth1_macvtap: left promiscuous mode [ 770.766728][ T41] veth0_macvtap: left promiscuous mode [ 770.768651][ T41] veth1_vlan: left promiscuous mode [ 770.768830][ T41] veth0_vlan: left promiscuous mode [ 770.779626][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.786753][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.803273][T11249] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 770.803297][T11249] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 770.803777][T11249] vhci_hcd vhci_hcd.0: Device attached [ 770.814982][T11249] vhci_hcd vhci_hcd.0: port 0 already used [ 770.819476][T11250] vhci_hcd: connection closed [ 770.820358][ T6316] vhci_hcd vhci_hcd.2: stop threads [ 770.820379][ T6316] vhci_hcd vhci_hcd.2: release socket [ 770.823285][ T6316] vhci_hcd vhci_hcd.2: disconnect device [ 772.442852][ T10] usb 6-1: USB disconnect, device number 39 [ 774.120109][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 774.385819][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 774.385847][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.385857][ T10] usb 6-1: Product: syz [ 774.385865][ T10] usb 6-1: Manufacturer: syz [ 774.385871][ T10] usb 6-1: SerialNumber: syz [ 774.950207][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 774.950269][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 776.227423][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 776.227456][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 776.227894][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 776.274238][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 777.285449][ T8807] usb 6-1: USB disconnect, device number 40 [ 777.432507][T11369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.433031][T11369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.208236][T11376] Invalid ELF header magic: != ELF [ 779.189966][ T5971] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 779.329967][ T5971] usb 6-1: device descriptor read/64, error -71 [ 779.569972][ T5971] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 779.700632][ T5971] usb 6-1: device descriptor read/64, error -71 [ 779.821027][ T5971] usb usb6-port1: attempt power cycle [ 781.055868][ T41] team0 (unregistering): Port device team_slave_1 removed [ 781.310704][ T41] team0 (unregistering): Port device team_slave_0 removed [ 787.000027][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 787.139958][ T10] usb 5-1: device descriptor read/64, error -71 [ 787.379965][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 787.525707][ T10] usb 5-1: device descriptor read/64, error -71 [ 787.630278][ T10] usb usb5-port1: attempt power cycle [ 787.708253][T10940] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 787.733447][T10940] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 787.846420][T10940] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 787.901055][T10940] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 787.979958][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 788.000741][ T10] usb 5-1: device descriptor read/8, error -71 [ 788.179972][ T31] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 788.241654][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 788.264137][ T10] usb 5-1: device descriptor read/8, error -71 [ 788.265275][T10940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.331216][T10940] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.354297][ T31] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 788.354325][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.372887][ T10] usb usb5-port1: unable to enumerate USB device [ 788.382042][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.386629][ T31] usb 6-1: config 0 descriptor?? [ 788.410127][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.471018][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.475483][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.844941][ T31] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 788.845540][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 788.916560][ T31] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 788.916585][ T31] [drm] Initialized udl on minor 2 [ 788.937050][ T31] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 788.937530][ T31] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 788.938621][ T1246] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 788.939419][ T1246] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 788.939655][ T1246] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 788.964352][ T31] usb 6-1: USB disconnect, device number 44 [ 789.348664][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.762385][T10940] veth0_vlan: entered promiscuous mode [ 792.802496][T10940] veth1_vlan: entered promiscuous mode [ 792.854893][T10940] veth0_macvtap: entered promiscuous mode [ 792.868633][T10940] veth1_macvtap: entered promiscuous mode [ 792.897217][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.962484][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.989042][ T6286] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.989268][ T6286] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.989456][ T6286] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.996297][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.589692][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.589713][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.768927][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.768946][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.981460][T11619] fuse: Unknown parameter 'user_id00000000000000000000' [ 795.480009][ T31] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 795.812830][ T5971] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 796.572246][ T5971] usb 7-1: device descriptor read/64, error -71 [ 796.574486][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.574506][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 796.607371][ T31] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 796.607398][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 796.607415][ T31] usb 6-1: SerialNumber: syz [ 796.819980][ T5971] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 796.949969][ T5971] usb 7-1: device descriptor read/64, error -71 [ 796.974316][T11662] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 796.974334][T11662] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 796.974436][T11662] vhci_hcd vhci_hcd.0: Device attached [ 796.977352][T11662] vhci_hcd vhci_hcd.0: port 0 already used [ 796.991955][T11696] vhci_hcd: connection closed [ 796.992455][ T1169] vhci_hcd vhci_hcd.5: stop threads [ 796.992475][ T1169] vhci_hcd vhci_hcd.5: release socket [ 796.992511][ T1169] vhci_hcd vhci_hcd.5: disconnect device [ 797.053653][ T31] usb 6-1: invalid UAC_HEADER (v1) [ 797.071631][ T5971] usb usb7-port1: attempt power cycle [ 797.189693][T11704] binder: 11703:11704 ioctl c0306201 0 returned -14 [ 797.221899][ T31] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 797.310288][ T31] usb 6-1: USB disconnect, device number 45 [ 797.389695][T11664] udevd[11664]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.410083][ T5971] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 797.430796][ T5971] usb 7-1: device descriptor read/8, error -71 [ 797.679990][ T5971] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 797.700556][ T5971] usb 7-1: device descriptor read/8, error -71 [ 798.731812][ T5971] usb usb7-port1: unable to enumerate USB device [ 801.050292][T11734] fuse: Bad value for 'fd' [ 801.451606][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 801.570130][ T5882] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 801.599916][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 801.601898][ T10] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 801.601913][ T10] usb 6-1: config 0 has no interface number 0 [ 801.604605][ T10] usb 6-1: config 0 interface 214 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 801.606654][ T10] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 801.606670][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.606679][ T10] usb 6-1: Product: syz [ 801.606686][ T10] usb 6-1: Manufacturer: syz [ 801.606692][ T10] usb 6-1: SerialNumber: syz [ 801.609776][ T10] usb 6-1: config 0 descriptor?? [ 801.635037][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 801.700427][ T5882] usb 5-1: device descriptor read/64, error -71 [ 801.781543][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 801.782231][ T9] usb 7-1: no configurations [ 801.782240][ T9] usb 7-1: can't read configurations, error -22 [ 801.910643][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 801.944607][ T5882] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 802.061509][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 802.062146][ T9] usb 7-1: no configurations [ 802.062156][ T9] usb 7-1: can't read configurations, error -22 [ 802.062542][ T9] usb usb7-port1: attempt power cycle [ 802.069965][ T5882] usb 5-1: device descriptor read/64, error -71 [ 802.175864][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.182912][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.190853][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.191037][ T5882] usb usb5-port1: attempt power cycle [ 802.198653][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.199765][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 802.399976][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 802.427419][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 802.428204][ T9] usb 7-1: no configurations [ 802.428218][ T9] usb 7-1: can't read configurations, error -22 [ 802.532043][ T5882] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 802.550043][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 802.555061][ T5882] usb 5-1: device descriptor read/8, error -71 [ 802.564711][T11794] binder: BINDER_SET_CONTEXT_MGR already set [ 802.564723][T11794] binder: 11793:11794 ioctl 4018620d 200000000040 returned -16 [ 802.570716][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 802.571355][ T9] usb 7-1: no configurations [ 802.571369][ T9] usb 7-1: can't read configurations, error -22 [ 802.571906][ T9] usb usb7-port1: unable to enumerate USB device [ 802.642209][T11796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.645606][T11796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.789934][ T5882] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 802.810642][ T5882] usb 5-1: device descriptor read/8, error -71 [ 802.921538][ T5882] usb usb5-port1: unable to enumerate USB device [ 803.156369][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.225674][ T5882] usb 6-1: USB disconnect, device number 46 [ 804.280748][ T5806] Bluetooth: hci5: command tx timeout [ 804.531172][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.681689][T11790] chnl_net:caif_netlink_parms(): no params data found [ 804.830083][ T5882] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 805.185273][ T5882] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 805.185302][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.185320][ T5882] usb 7-1: Product: syz [ 805.185332][ T5882] usb 7-1: Manufacturer: syz [ 805.185344][ T5882] usb 7-1: SerialNumber: syz [ 806.488832][ T5806] Bluetooth: hci5: command tx timeout [ 807.506220][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.559775][ T5806] Bluetooth: hci5: command tx timeout [ 808.566200][ T5882] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 808.566258][ T5882] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 808.778458][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.778534][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.960901][T11837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.963840][T11837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.942911][ T5806] Bluetooth: hci5: command tx timeout [ 811.074763][ T5882] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 811.074814][ T5882] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 811.075459][ T5882] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 811.122744][ T5882] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 811.194656][ T5882] usb 7-1: USB disconnect, device number 24 [ 811.286263][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.409593][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 811.468783][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.469009][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.469177][T11790] bridge_slave_0: entered allmulticast mode [ 811.475329][T11790] bridge_slave_0: entered promiscuous mode [ 811.480174][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.480298][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.480469][T11790] bridge_slave_1: entered allmulticast mode [ 811.484808][T11790] bridge_slave_1: entered promiscuous mode [ 811.540089][ T5882] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 812.489949][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 812.491830][ T5882] usb 7-1: no configurations [ 812.491840][ T5882] usb 7-1: can't read configurations, error -22 [ 812.597096][T11863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.597591][T11863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.633820][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.642854][ T5882] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 812.665885][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.719196][T11790] team0: Port device team_slave_0 added [ 812.734157][T11790] team0: Port device team_slave_1 added [ 812.810083][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 812.811961][ T5882] usb 7-1: no configurations [ 812.811977][ T5882] usb 7-1: can't read configurations, error -22 [ 812.840276][ T5882] usb usb7-port1: attempt power cycle [ 813.089656][T11790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.089673][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.089697][T11790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.092831][T11790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.092855][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.092879][T11790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.250258][ T5882] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 813.281405][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 813.285016][ T5882] usb 7-1: no configurations [ 813.285032][ T5882] usb 7-1: can't read configurations, error -22 [ 813.409932][ T5882] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 813.453744][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 813.455636][ T5882] usb 7-1: no configurations [ 813.455652][ T5882] usb 7-1: can't read configurations, error -22 [ 813.456889][ T5882] usb usb7-port1: unable to enumerate USB device [ 813.876984][T11790] hsr_slave_0: entered promiscuous mode [ 813.879104][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 813.885821][T11790] hsr_slave_1: entered promiscuous mode [ 813.886658][T11790] debugfs: 'hsr0' already exists in 'hsr' [ 813.886680][T11790] Cannot create hsr debugfs directory [ 814.095320][ T58] bridge_slave_1: left allmulticast mode [ 814.095348][ T58] bridge_slave_1: left promiscuous mode [ 814.095586][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.180612][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.181159][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.194581][ T58] bridge_slave_0: left allmulticast mode [ 814.194607][ T58] bridge_slave_0: left promiscuous mode [ 814.194858][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.597932][ T37] audit: type=1326 audit(2000000234.379:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11888 comm="syz.2.2027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f517ecdbf79 code=0x0 [ 818.857173][T11900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.857717][T11900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.584870][ T37] audit: type=1326 audit(2000000239.379:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11910 comm="syz.5.2031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f6039bf79 code=0x0 [ 824.044242][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.110947][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.129521][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 824.173509][ T58] bond0 (unregistering): Released all slaves [ 824.440654][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.441229][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.096196][ T807] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 827.198276][ T807] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 827.198305][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.198322][ T807] usb 5-1: Product: syz [ 827.198334][ T807] usb 5-1: Manufacturer: syz [ 827.198346][ T807] usb 5-1: SerialNumber: syz [ 827.306054][ T37] audit: type=1804 audit(2000000244.139:4): pid=11945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.2038" name="bus" dev="ramfs" ino=33203 res=1 errno=0 [ 827.800053][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 827.800089][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 831.126883][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 831.126939][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 831.127685][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 831.227553][ T807] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 831.375675][ T807] usb 5-1: USB disconnect, device number 92 [ 832.546269][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 832.790107][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 832.952601][ T9] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 832.952631][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.979438][ T9] usb 7-1: config 0 descriptor?? [ 833.100219][ T58] hsr_slave_0: left promiscuous mode [ 833.146255][ T58] hsr_slave_1: left promiscuous mode [ 833.148529][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.170139][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.212187][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.212214][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.481478][ T1246] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 833.527595][ T58] veth1_macvtap: left promiscuous mode [ 833.527706][ T58] veth0_macvtap: left promiscuous mode [ 833.527953][ T58] veth1_vlan: left promiscuous mode [ 833.528121][ T58] veth0_vlan: left promiscuous mode [ 833.632615][ T1246] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.632631][ T1246] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 833.632654][ T1246] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 833.632674][ T1246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.654329][ T1246] usb 5-1: config 0 descriptor?? [ 834.444232][ T9] pegasus 7-1:0.0: can't reset MAC [ 834.444567][ T9] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 834.500633][ T9] usb 7-1: USB disconnect, device number 29 [ 834.980520][ T1246] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 835.137848][ T1246] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.137865][ T1246] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 835.141386][ T1246] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 835.141412][ T1246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 835.141429][ T1246] usb 6-1: SerialNumber: syz [ 836.276200][ T1246] usb 6-1: 0:2 : does not exist [ 836.420022][ T1246] usb 6-1: USB disconnect, device number 47 [ 836.439590][T11960] usb 5-1: USB disconnect, device number 93 [ 836.521708][T11930] udevd[11930]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.950038][T11960] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 837.118789][T11960] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.118805][T11960] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.119996][T11960] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 837.120020][T11960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 837.120038][T11960] usb 5-1: SerialNumber: syz [ 837.393011][T11960] usb 5-1: 0:2 : does not exist [ 837.393063][T11960] usb 5-1: unit 5 not found! [ 837.431325][T11960] usb 5-1: USB disconnect, device number 94 [ 837.514380][T11930] udevd[11930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.801949][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.802445][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.790436][ T58] team0 (unregistering): Port device team_slave_1 removed [ 841.020488][ T58] team0 (unregistering): Port device team_slave_0 removed [ 844.165922][T12016] veth0_to_team: entered promiscuous mode [ 847.386955][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.391946][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.919943][ T807] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 848.922183][T12066] binder: BINDER_SET_CONTEXT_MGR already set [ 848.922195][T12066] binder: 12064:12066 ioctl 4018620d 200000000040 returned -16 [ 848.922527][T12066] binder: 12064:12066 ioctl c0306201 0 returned -14 [ 849.080337][ T807] usb 7-1: Using ep0 maxpacket: 32 [ 849.083804][ T807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.083827][ T807] usb 7-1: config 0 has no interfaces? [ 849.083855][ T807] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 849.083876][ T807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.182312][ T807] usb 7-1: config 0 descriptor?? [ 849.478634][ T807] usb 7-1: USB disconnect, device number 30 [ 851.034621][ T5806] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 851.241816][ T8357] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 857.601232][T11960] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 858.652290][T11960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.652316][T11960] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 858.652351][T11960] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 858.652371][T11960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.657569][T11960] usb 5-1: config 0 descriptor?? [ 859.720302][T11790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 859.773107][T11790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 859.805907][T11790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 859.876040][T11790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 860.125784][ T5882] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 861.029966][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 861.033735][ T5882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.033759][ T5882] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 861.033793][ T5882] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 861.033813][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.093216][ T5882] usb 6-1: config 0 descriptor?? [ 861.176866][ T31] usb 5-1: USB disconnect, device number 95 [ 861.284211][T11790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.328868][T11790] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.351911][ T5882] usb 6-1: USB disconnect, device number 48 [ 861.375893][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.375978][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.381714][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.405251][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.922525][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 864.931559][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 864.946908][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 865.161397][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 865.162165][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 867.171806][T12211] Bluetooth: hci1: command 0x0406 tx timeout [ 867.280060][T12211] Bluetooth: hci4: command tx timeout [ 867.624215][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.625032][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.969978][ T807] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 870.024053][ T5805] Bluetooth: hci4: command tx timeout [ 871.249807][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.249976][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.312536][ T807] usb 5-1: Using ep0 maxpacket: 8 [ 871.347596][ T807] usb 5-1: device descriptor read/all, error -71 [ 871.414838][ T5887] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 871.569985][ T5887] usb 7-1: Using ep0 maxpacket: 32 [ 871.586559][ T5887] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.586636][ T5887] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 871.586673][ T5887] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 871.586694][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.844737][ T5887] usb 7-1: config 0 descriptor?? [ 872.040240][ T5805] Bluetooth: hci4: command tx timeout [ 872.121502][ T5882] usb 7-1: USB disconnect, device number 31 [ 872.449259][T12207] chnl_net:caif_netlink_parms(): no params data found [ 872.831509][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 873.618068][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.618256][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.618473][T12207] bridge_slave_0: entered allmulticast mode [ 873.642821][T12207] bridge_slave_0: entered promiscuous mode [ 873.646110][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.646310][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.646490][T12207] bridge_slave_1: entered allmulticast mode [ 873.649027][T12207] bridge_slave_1: entered promiscuous mode [ 873.726613][T12207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.743802][T12207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.836889][ T5805] Bluetooth: hci4: command tx timeout [ 875.126258][T12207] team0: Port device team_slave_0 added [ 875.439948][T12207] team0: Port device team_slave_1 added [ 875.859748][T12207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.859760][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.859776][T12207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.873526][T12207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.873542][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.873568][T12207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.247487][T12296] fuse: Unknown parameter 'fd0x0000000000000004' [ 876.630071][ T5887] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 876.784985][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.785001][ T5887] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 876.786111][ T5887] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 876.786127][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 876.786136][ T5887] usb 7-1: SerialNumber: syz [ 876.863300][T12207] hsr_slave_0: entered promiscuous mode [ 876.866972][T12207] hsr_slave_1: entered promiscuous mode [ 876.883966][T12207] debugfs: 'hsr0' already exists in 'hsr' [ 876.887475][T12207] Cannot create hsr debugfs directory [ 877.105816][T12305] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 877.105843][T12305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 877.105923][T12305] vhci_hcd vhci_hcd.0: Device attached [ 877.108505][T12305] vhci_hcd vhci_hcd.0: port 0 already used [ 877.185567][T12306] vhci_hcd: connection closed [ 877.201304][ T6317] vhci_hcd vhci_hcd.6: stop threads [ 877.201367][ T6317] vhci_hcd vhci_hcd.6: release socket [ 877.201532][ T6317] vhci_hcd vhci_hcd.6: disconnect device [ 877.238754][ T5887] usb 7-1: invalid UAC_HEADER (v1) [ 879.743955][ T5887] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 879.762557][ T5887] usb 7-1: USB disconnect, device number 32 [ 879.868847][T12123] udevd[12123]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.013371][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 880.061014][T11960] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 880.209998][T11960] usb 6-1: Using ep0 maxpacket: 32 [ 880.213710][T11960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.213735][T11960] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 880.213768][T11960] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 880.213788][T11960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.218845][T11960] usb 6-1: config 0 descriptor?? [ 880.428737][ T160] bridge_slave_1: left allmulticast mode [ 880.428764][ T160] bridge_slave_1: left promiscuous mode [ 880.437024][ T807] usb 6-1: USB disconnect, device number 49 [ 880.450189][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.554028][ T160] bridge_slave_0: left allmulticast mode [ 880.554050][ T160] bridge_slave_0: left promiscuous mode [ 880.554229][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.050825][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.113120][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.154555][ T160] bond0 (unregistering): Released all slaves [ 886.435070][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 887.173223][T12381] netlink: 'syz.2.2128': attribute type 7 has an invalid length. [ 887.173247][T12381] netlink: 'syz.2.2128': attribute type 8 has an invalid length. [ 888.909941][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 889.066493][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 889.066522][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.101911][ T9] usb 6-1: config 0 descriptor?? [ 889.254394][ T160] hsr_slave_0: left promiscuous mode [ 889.291320][ T160] hsr_slave_1: left promiscuous mode [ 889.292239][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.610335][ T9] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 890.712294][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.757577][ T5887] usb 6-1: USB disconnect, device number 50 [ 892.931766][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 895.461125][ T160] team0 (unregistering): Port device team_slave_1 removed [ 895.670075][ T31] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 895.690481][ T160] team0 (unregistering): Port device team_slave_0 removed [ 895.862866][ T31] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 895.862894][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.864352][ T31] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 895.864376][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 895.864386][ T31] usb 7-1: SerialNumber: syz [ 896.112308][ T31] usb 7-1: 0:2 : does not exist [ 896.112361][ T31] usb 7-1: unit 5 not found! [ 896.130482][ T31] usb 7-1: USB disconnect, device number 33 [ 896.192103][T12378] udevd[12378]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.931473][T12458] netlink: 'syz.6.2142': attribute type 3 has an invalid length. [ 898.220566][ T5887] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 898.390078][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 898.393614][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 898.395379][ T5887] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 898.395402][ T5887] usb 7-1: config 0 has no interface number 0 [ 898.395446][ T5887] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 898.395470][ T5887] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 898.395491][ T5887] usb 7-1: config 0 interface 88 has no altsetting 0 [ 898.398773][ T5887] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 898.398797][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 898.398815][ T5887] usb 7-1: Product: syz [ 898.398827][ T5887] usb 7-1: Manufacturer: syz [ 898.398840][ T5887] usb 7-1: SerialNumber: syz [ 898.594126][ T5887] usb 7-1: config 0 descriptor?? [ 899.534577][ T5887] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input29 [ 900.302351][ T5887] usb 7-1: USB disconnect, device number 34 [ 900.522391][T12426] udevd[12426]: Error opening device "/dev/input/event4": No such file or directory [ 900.522523][T12426] udevd[12426]: Unable to EVIOCGABS device "/dev/input/event4" [ 900.522628][T12426] udevd[12426]: Unable to EVIOCGABS device "/dev/input/event4" [ 900.659404][ T37] audit: type=1804 audit(2000000317.489:5): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2149" name="bus" dev="ramfs" ino=35446 res=1 errno=0 [ 901.940094][T12207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 902.980404][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 903.109997][T12207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 910.239976][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 910.390755][ T9] usb 6-1: no configurations [ 910.390774][ T9] usb 6-1: can't read configurations, error -22 [ 910.520050][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 910.580125][T12532] veth0_to_team: entered promiscuous mode [ 911.553272][T12207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 911.811640][T12207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 913.606654][T12581] : Can't lookup blockdev [ 914.959220][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.959764][T12573] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.768475][T12573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.776500][T12573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.732357][ T1184] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.733572][ T1184] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.733980][ T1184] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.734017][ T1184] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.695500][T12207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.759498][T12207] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.808343][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.815101][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.818099][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.818231][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.148545][T12650] netlink: 'syz.4.2174': attribute type 7 has an invalid length. [ 922.148564][T12650] netlink: 'syz.4.2174': attribute type 8 has an invalid length. [ 923.249202][T12207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.634176][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2179'. [ 926.307216][T12211] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.322463][T12211] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.327460][T12211] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 926.352384][T12211] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 926.356842][T12211] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 928.796608][T12211] Bluetooth: hci5: command tx timeout [ 929.233662][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'. [ 930.872313][T12673] chnl_net:caif_netlink_parms(): no params data found [ 931.060246][T12211] Bluetooth: hci5: command tx timeout [ 931.998516][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.998583][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.818936][T12211] Bluetooth: hci5: command tx timeout [ 935.119550][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2200'. [ 936.858950][T12211] Bluetooth: hci5: command tx timeout [ 937.015444][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.015517][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.015644][T12673] bridge_slave_0: entered allmulticast mode [ 937.020902][T12673] bridge_slave_0: entered promiscuous mode [ 937.059428][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.059507][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.059666][T12673] bridge_slave_1: entered allmulticast mode [ 937.070060][T12673] bridge_slave_1: entered promiscuous mode [ 942.284913][T12673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.299215][T12673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.629348][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 943.978200][T12673] team0: Port device team_slave_0 added [ 944.190558][T12673] team0: Port device team_slave_1 added [ 944.767033][T12812] : Can't lookup blockdev [ 945.596592][T12673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.596607][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.596625][T12673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.548473][T12673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.548494][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.548519][T12673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.917928][T12830] hub 8-0:1.0: USB hub found [ 947.933161][T12830] hub 8-0:1.0: 1 port detected [ 947.985687][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2225'. [ 952.633878][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2230'. [ 956.283538][T12853] fuse: Bad value for 'fd' [ 956.781782][T12673] hsr_slave_0: entered promiscuous mode [ 956.783785][T12673] hsr_slave_1: entered promiscuous mode [ 956.784675][T12673] debugfs: 'hsr0' already exists in 'hsr' [ 956.784698][T12673] Cannot create hsr debugfs directory [ 957.382714][T12862] : Can't lookup blockdev [ 960.034369][ T36] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 960.285641][ T5971] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 961.576481][ T36] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.576507][ T36] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.576542][ T36] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 961.576561][ T36] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 961.579123][ T36] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 961.579149][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 961.579167][ T36] usb 6-1: SerialNumber: syz [ 961.663772][ T5971] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 961.663797][ T5971] usb 7-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 961.663831][ T5971] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 961.663852][ T5971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.842477][ T36] usb 6-1: 0:2 : does not exist [ 961.842565][ T36] usb 6-1: unit 5 not found! [ 961.875569][ T36] usb 6-1: USB disconnect, device number 53 [ 961.960263][ T1169] bridge_slave_1: left allmulticast mode [ 961.960290][ T1169] bridge_slave_1: left promiscuous mode [ 961.960533][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.001897][T12868] udevd[12868]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.054552][ T1169] bridge_slave_0: left allmulticast mode [ 962.054579][ T1169] bridge_slave_0: left promiscuous mode [ 962.054828][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.272321][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'. [ 962.778775][T12909] hub 8-0:1.0: USB hub found [ 962.783601][T12909] hub 8-0:1.0: 1 port detected [ 963.607200][T12914] : Can't lookup blockdev [ 963.608875][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2245'. [ 964.898157][ T36] usb 7-1: USB disconnect, device number 35 [ 965.270495][ T37] audit: type=1326 audit(2000000382.099:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.6.2247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60955cbf79 code=0x0 [ 965.810741][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.870774][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.902780][ T1169] bond0 (unregistering): Released all slaves [ 971.851141][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 972.004513][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 972.007331][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 972.008906][ T9] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 972.008929][ T9] usb 7-1: config 0 has no interface number 0 [ 972.008974][ T9] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 972.008998][ T9] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 972.009018][ T9] usb 7-1: config 0 interface 88 has no altsetting 0 [ 972.069019][ T9] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 972.069048][ T9] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 972.069067][ T9] usb 7-1: Product: syz [ 972.069079][ T9] usb 7-1: Manufacturer: syz [ 972.069092][ T9] usb 7-1: SerialNumber: syz [ 972.129422][ T9] usb 7-1: config 0 descriptor?? [ 972.264162][T12977] netlink: 620 bytes leftover after parsing attributes in process `syz.4.2259'. [ 973.144053][ T9] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input30 [ 973.411404][ T9] usb 7-1: USB disconnect, device number 36 [ 973.426109][ T1169] hsr_slave_0: left promiscuous mode [ 973.439957][ T1169] hsr_slave_1: left promiscuous mode [ 973.440875][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.462260][T12980] udevd[12980]: Error opening device "/dev/input/event4": No such file or directory [ 973.462387][T12980] udevd[12980]: Unable to EVIOCGABS device "/dev/input/event4" [ 973.462490][T12980] udevd[12980]: Unable to EVIOCGABS device "/dev/input/event4" [ 973.500780][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.181006][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 977.420698][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 980.478812][T13011] hub 8-0:1.0: USB hub found [ 980.483589][T13011] hub 8-0:1.0: 1 port detected [ 980.529991][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2267'. [ 981.275784][T13004] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.277385][T13004] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.493061][T13004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.498383][T13004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.489951][ T1184] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.620739][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 984.650308][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 984.651830][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 984.654249][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 984.655100][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 984.734027][ T1184] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.737225][ T1184] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.737590][ T1184] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.919443][T13037] hub 8-0:1.0: USB hub found [ 984.922085][T13037] hub 8-0:1.0: 1 port detected [ 984.963840][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 986.371890][T13042] veth0_to_team: entered promiscuous mode [ 986.932227][ T5805] Bluetooth: hci4: command tx timeout [ 990.314991][T12211] Bluetooth: hci4: command tx timeout [ 991.360452][T13057] mmap: syz.6.2278 (13057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 992.128470][T13068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'. [ 992.772751][T12211] Bluetooth: hci4: command tx timeout [ 993.089397][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.089466][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.492499][T13095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.493024][T13095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.745765][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2286'. [ 996.427096][T12211] Bluetooth: hci4: command tx timeout [ 996.542076][T13028] chnl_net:caif_netlink_parms(): no params data found [ 996.588846][T13107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2290'. [ 996.854717][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.855259][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.310530][T13028] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.310658][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.310886][T13028] bridge_slave_0: entered allmulticast mode [ 999.313473][T13028] bridge_slave_0: entered promiscuous mode [ 999.328018][T13028] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.328139][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.328315][T13028] bridge_slave_1: entered allmulticast mode [ 999.338458][T13028] bridge_slave_1: entered promiscuous mode [ 1000.316386][T13028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.355772][T13028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.372807][T13144] netlink: 620 bytes leftover after parsing attributes in process `syz.6.2282'. [ 1000.482801][T13146] hub 8-0:1.0: USB hub found [ 1000.490002][T13146] hub 8-0:1.0: 1 port detected [ 1000.526901][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 1002.202301][T13028] team0: Port device team_slave_0 added [ 1002.268488][T13156] binder: 13154:13156 ioctl 541b 0 returned -22 [ 1003.014599][ T36] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1005.483894][ T36] usb 6-1: device descriptor read/all, error -71 [ 1006.023913][T13028] team0: Port device team_slave_1 added [ 1006.981200][T13188] netlink: 620 bytes leftover after parsing attributes in process `syz.5.2310'. [ 1007.181414][T13028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.181432][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.181457][T13028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.191276][T13028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.191292][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.191316][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.375067][ T67] bridge_slave_1: left allmulticast mode [ 1007.375095][ T67] bridge_slave_1: left promiscuous mode [ 1007.375326][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.711981][ T67] bridge_slave_0: left allmulticast mode [ 1007.712011][ T67] bridge_slave_0: left promiscuous mode [ 1007.712297][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.090887][ T5971] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1009.166534][T13222] hub 8-0:1.0: USB hub found [ 1009.172238][T13222] hub 8-0:1.0: 1 port detected [ 1009.527712][ T5971] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.547121][ T5971] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1009.547972][ T5971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.995607][ T5971] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1011.340633][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.401989][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.466708][ T67] bond0 (unregistering): Released all slaves [ 1011.584868][T13028] hsr_slave_0: entered promiscuous mode [ 1011.591484][T13028] hsr_slave_1: entered promiscuous mode [ 1011.594109][T13028] debugfs: 'hsr0' already exists in 'hsr' [ 1011.594134][T13028] Cannot create hsr debugfs directory [ 1012.119711][T13247] netlink: 608 bytes leftover after parsing attributes in process `syz.2.2321'. [ 1012.950263][ T9] usb 7-1: USB disconnect, device number 37 [ 1013.440024][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1015.334741][ T9] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1015.334767][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1015.336576][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1015.336602][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1015.336620][ T9] usb 7-1: SerialNumber: syz [ 1015.530007][ T67] hsr_slave_0: left promiscuous mode [ 1016.335466][ T9] usb 7-1: 0:2 : does not exist [ 1016.335568][ T9] usb 7-1: unit 5 not found! [ 1016.449916][ T9] usb 7-1: USB disconnect, device number 38 [ 1016.507781][ T67] hsr_slave_1: left promiscuous mode [ 1016.515382][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.557193][T13282] udevd[13282]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.570686][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.759959][T13290] hub 8-0:1.0: USB hub found [ 1016.764588][T13290] hub 8-0:1.0: 1 port detected [ 1016.807503][T13290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2331'. [ 1019.190299][T13302] netlink: 608 bytes leftover after parsing attributes in process `syz.2.2334'. [ 1021.230450][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1021.330455][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1024.530456][T13028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1025.531016][T13028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1026.528739][T13341] hub 8-0:1.0: USB hub found [ 1026.533366][T13341] hub 8-0:1.0: 1 port detected [ 1026.575563][T13028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1026.904879][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2343'. [ 1027.762525][T13028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1033.527237][T13028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.783161][T13028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.800716][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.801493][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.831286][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.835955][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.058342][T13028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1037.433255][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.583819][T13028] veth0_vlan: entered promiscuous mode [ 1037.608885][T13028] veth1_vlan: entered promiscuous mode [ 1037.706177][T13028] veth0_macvtap: entered promiscuous mode [ 1037.740269][T13028] veth1_macvtap: entered promiscuous mode [ 1037.804787][T13028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.825850][T13028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.846543][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.846774][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.846808][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.846840][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.520326][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.520347][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.759605][ T6286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.759627][ T6286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.888451][ T5805] Bluetooth: hci5: command 0x1003 tx timeout [ 1044.888761][T12211] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1046.975987][T13471] netlink: 608 bytes leftover after parsing attributes in process `syz.4.2376'. [ 1054.557980][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.558161][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.293318][T13554] No control pipe specified [ 1063.499189][T13549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1066.545247][T13601] No control pipe specified [ 1072.937102][T13628] hub 8-0:1.0: USB hub found [ 1072.940043][T13628] hub 8-0:1.0: 1 port detected [ 1072.985938][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2413'. [ 1074.389366][T13631] overlayfs: overlapping lowerdir path [ 1075.424518][T13639] No control pipe specified [ 1077.891261][T13662] overlayfs: overlapping lowerdir path [ 1078.420329][T13642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1081.620202][T13698] hub 8-0:1.0: USB hub found [ 1081.620963][T13698] hub 8-0:1.0: 1 port detected [ 1081.624707][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2431'. [ 1085.450088][ T5882] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1086.399953][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 1086.406441][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.406470][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.406489][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1086.406526][ T5882] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1086.406547][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.449953][ T31] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1086.477807][ T5882] usb 7-1: config 0 descriptor?? [ 1086.600745][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1086.602967][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1086.602990][ T31] usb 5-1: config 0 has no interface number 0 [ 1086.603040][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1086.609266][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1086.609292][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.609310][ T31] usb 5-1: Product: syz [ 1086.609323][ T31] usb 5-1: Manufacturer: syz [ 1086.609336][ T31] usb 5-1: SerialNumber: syz [ 1086.636807][ T31] usb 5-1: config 0 descriptor?? [ 1086.642893][ T31] smsc75xx v1.0.0 [ 1086.699603][T13727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.718566][T13727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.885874][ T5882] usbhid 7-1:0.0: can't add hid device: -71 [ 1087.885988][ T5882] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1087.927479][ T5882] usb 7-1: USB disconnect, device number 39 [ 1089.253264][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1089.253294][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1089.262179][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1089.262204][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1089.262220][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1089.262237][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1089.262517][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1089.265867][T13771] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1089.382906][ T31] usb 5-1: USB disconnect, device number 98 [ 1091.243773][T13805] overlayfs: overlapping lowerdir path [ 1094.000883][T13840] overlayfs: overlapping lowerdir path [ 1097.909476][T13904] Bluetooth: hci5: Frame reassembly failed (-84) [ 1097.909739][T13904] Bluetooth: hci5: Frame reassembly failed (-84) [ 1097.910003][T13904] Bluetooth: hci5: Frame reassembly failed (-84) [ 1097.910227][T13904] Bluetooth: hci5: Frame reassembly failed (-84) [ 1098.319752][T13912] overlayfs: overlapping lowerdir path [ 1100.287611][ T5805] Bluetooth: hci5: command 0x1003 tx timeout [ 1100.287923][T12211] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1103.142247][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2516'. [ 1105.205995][T13985] overlayfs: overlapping lowerdir path [ 1106.331964][T13993] hub 8-0:1.0: USB hub found [ 1106.334984][T13993] hub 8-0:1.0: 1 port detected [ 1106.384913][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2519'. [ 1108.717967][T11960] ------------[ cut here ]------------ [ 1108.717982][T11960] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1108.718003][T11960] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#1: kworker/1:5/11960 [ 1108.718044][T11960] Modules linked in: [ 1108.718072][T11960] CPU: 1 UID: 0 PID: 11960 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.718088][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1108.718100][T11960] Workqueue: events drm_fb_helper_damage_work [ 1108.718129][T11960] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1108.718151][T11960] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 af 2b dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1108.718166][T11960] RSP: 0018:ffffc9001de1f8e0 EFLAGS: 00010246 [ 1108.718180][T11960] RAX: 1ffff110048b6600 RBX: ffffffff8f53c2c0 RCX: 0000000000000000 [ 1108.718190][T11960] RDX: ffffffff8b9eef60 RSI: ffffffff8ba0acc0 RDI: ffffffff8f53c2c0 [ 1108.718203][T11960] RBP: ffffc9001de1f9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1108.718214][T11960] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffffffff8ba0acc0 [ 1108.718227][T11960] R13: ffff8880245b3000 R14: 1ffff92003bc3f20 R15: ffffffff8b9eef60 [ 1108.718240][T11960] FS: 0000000000000000(0000) GS:ffff88812669c000(0000) knlGS:0000000000000000 [ 1108.718254][T11960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.718266][T11960] CR2: 00007f582d8e5180 CR3: 000000000d9ba000 CR4: 00000000003526f0 [ 1108.718281][T11960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000400 [ 1108.718289][T11960] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1108.718299][T11960] Call Trace: [ 1108.718308][T11960] [ 1108.718319][T11960] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1108.718339][T11960] ? rt_spin_unlock+0x14f/0x200 [ 1108.718359][T11960] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1108.718379][T11960] ? rt_spin_unlock+0x160/0x200 [ 1108.718401][T11960] ? drm_vblank_get+0x147/0x260 [ 1108.718423][T11960] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1108.718446][T11960] drm_fb_helper_damage_work+0x131/0x6f0 [ 1108.718472][T11960] ? process_scheduled_works+0xa0f/0x17a0 [ 1108.718503][T11960] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1108.718524][T11960] ? process_scheduled_works+0xa0f/0x17a0 [ 1108.718537][T11960] ? process_scheduled_works+0xa0f/0x17a0 [ 1108.718556][T11960] process_scheduled_works+0xaec/0x17a0 [ 1108.718597][T11960] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.718610][T11960] ? do_raw_spin_lock+0x12b/0x2f0 [ 1108.718626][T11960] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1108.718649][T11960] worker_thread+0xda6/0x1360 [ 1108.718678][T11960] ? __kthread_parkme+0x19c/0x1f0 [ 1108.718698][T11960] kthread+0x388/0x470 [ 1108.718715][T11960] ? __pfx_worker_thread+0x10/0x10 [ 1108.718728][T11960] ? __pfx_kthread+0x10/0x10 [ 1108.718747][T11960] ret_from_fork+0x51e/0xb90 [ 1108.718766][T11960] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.718779][T11960] ? __switch_to+0xc82/0x1410 [ 1108.718797][T11960] ? __pfx_kthread+0x10/0x10 [ 1108.718814][T11960] ret_from_fork_asm+0x1a/0x30 [ 1108.718846][T11960] [ 1108.718859][T11960] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1108.718870][T11960] CPU: 1 UID: 0 PID: 11960 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.718886][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1108.718895][T11960] Workqueue: events drm_fb_helper_damage_work [ 1108.718915][T11960] Call Trace: [ 1108.718921][T11960] [ 1108.718926][T11960] vpanic+0x1e0/0x670 [ 1108.718947][T11960] panic+0xc5/0xd0 [ 1108.718963][T11960] ? __pfx_panic+0x10/0x10 [ 1108.718986][T11960] ? ret_from_fork_asm+0x1a/0x30 [ 1108.719008][T11960] __warn+0x315/0x4a0 [ 1108.719024][T11960] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1108.719043][T11960] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1108.719061][T11960] __report_bug+0x29a/0x540 [ 1108.719086][T11960] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1108.719104][T11960] ? __pfx___report_bug+0x10/0x10 [ 1108.719137][T11960] report_bug_entry+0x19a/0x290 [ 1108.719155][T11960] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 1108.719171][T11960] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 1108.719188][T11960] handle_bug+0xca/0x200 [ 1108.719204][T11960] exc_invalid_op+0x1a/0x50 [ 1108.719218][T11960] asm_exc_invalid_op+0x1a/0x20 [ 1108.719231][T11960] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1108.719249][T11960] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 af 2b dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1108.719260][T11960] RSP: 0018:ffffc9001de1f8e0 EFLAGS: 00010246 [ 1108.719272][T11960] RAX: 1ffff110048b6600 RBX: ffffffff8f53c2c0 RCX: 0000000000000000 [ 1108.719281][T11960] RDX: ffffffff8b9eef60 RSI: ffffffff8ba0acc0 RDI: ffffffff8f53c2c0 [ 1108.719291][T11960] RBP: ffffc9001de1f9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1108.719299][T11960] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffffffff8ba0acc0 [ 1108.719310][T11960] R13: ffff8880245b3000 R14: 1ffff92003bc3f20 R15: ffffffff8b9eef60 [ 1108.719336][T11960] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1108.719353][T11960] ? rt_spin_unlock+0x14f/0x200 [ 1108.719370][T11960] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1108.719388][T11960] ? rt_spin_unlock+0x160/0x200 [ 1108.719406][T11960] ? drm_vblank_get+0x147/0x260 [ 1108.719426][T11960] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1108.719445][T11960] drm_fb_helper_damage_work+0x131/0x6f0 [ 1108.719467][T11960] ? process_scheduled_works+0xa0f/0x17a0 [ 1108.719495][T11960] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1108.719519][T11960] ? process_scheduled_works+0xa0f/0x17a0 [ 1108.719533][T11960] ? process_scheduled_works+0xa0f/0x17a0 [ 1108.719548][T11960] process_scheduled_works+0xaec/0x17a0 [ 1108.719583][T11960] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.719596][T11960] ? do_raw_spin_lock+0x12b/0x2f0 [ 1108.719613][T11960] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1108.719635][T11960] worker_thread+0xda6/0x1360 [ 1108.719662][T11960] ? __kthread_parkme+0x19c/0x1f0 [ 1108.719683][T11960] kthread+0x388/0x470 [ 1108.719700][T11960] ? __pfx_worker_thread+0x10/0x10 [ 1108.719713][T11960] ? __pfx_kthread+0x10/0x10 [ 1108.719730][T11960] ret_from_fork+0x51e/0xb90 [ 1108.719749][T11960] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.719763][T11960] ? __switch_to+0xc82/0x1410 [ 1108.719780][T11960] ? __pfx_kthread+0x10/0x10 [ 1108.719797][T11960] ret_from_fork_asm+0x1a/0x30 [ 1108.719838][T11960] [ 1108.720638][T11960] Kernel Offset: disabled