last executing test programs: 17m38.205647703s ago: executing program 2 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x4, 0x10001}, {0x6, 0x0, 0x7, 0xfffffffe}]}, 0x10) 17m37.111267286s ago: executing program 2 (id=260): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 17m33.473540222s ago: executing program 2 (id=266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 17m32.120257549s ago: executing program 2 (id=270): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000c40)}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17m29.861957748s ago: executing program 2 (id=278): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3", 0x12}], 0x1}}], 0x1, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b9", 0x1c}], 0x1}}], 0x2, 0x4000900) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 17m27.728301326s ago: executing program 2 (id=280): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000000)=""/26, 0xfffffffffffffdb9}, 0x7068}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/111, 0xffffffe2}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001a00)=""/171}], 0x0, &(0x7f00000018c0)=""/176, 0x7}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 17m11.001154295s ago: executing program 32 (id=280): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000000)=""/26, 0xfffffffffffffdb9}, 0x7068}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/111, 0xffffffe2}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001a00)=""/171}], 0x0, &(0x7f00000018c0)=""/176, 0x7}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 39.162395902s ago: executing program 5 (id=4201): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000001000030400008000000000", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x20, 0xb, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x80, 0x101, 0x4}]}}}}}}}, 0x0) 38.247759343s ago: executing program 5 (id=4202): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xc0b1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1, @empty, 0x8}}]}, 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e076940052", 0x18}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 36.445519659s ago: executing program 5 (id=4210): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc01000000"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}, {0x1, 0x7, 0xba, 0x5}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.361251338s ago: executing program 5 (id=4213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x400}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4000}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x4800) 33.579375625s ago: executing program 5 (id=4217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x4, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0xf7dd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x4000002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x5, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x3, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000005, 0x0, 0x2000003, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0x80000001]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x20000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x7ff, 0xd, 0x4000e18, 0x172d, 0x6, 0x7, 0x6, 0x3]}}) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 29.597833077s ago: executing program 5 (id=4223): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 9.355636722s ago: executing program 0 (id=4276): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @hyper, 0x9, 0x0, 0x4000000f8, 0x8, 0x0, 0x4000000, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c166ba2100a067ee66ba2000b000ee6d2f2f820000c0d23266bac000533066b808008ed0660f38806f008ee0", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x18002, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.77507209s ago: executing program 3 (id=4279): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d65746100000000140002800800"], 0xc0}}, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x54}}, 0x20008000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x72}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r4, 0x8937, &(0x7f0000000080)="2e5819c0fca27c74ae7d133a") r5 = dup3(r0, r3, 0x80000) r6 = dup(r5) read(r6, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(r2, 0x0, &(0x7f0000000580)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8.186245063s ago: executing program 0 (id=4282): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1b59, 0x20407, @private2, 0x200}}, 0x24) syz_usb_connect(0x2, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500a36e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010000001a220824050503"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101c02, 0x0) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) getrusage(0x1, &(0x7f0000000600)) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r7, 0x37, 0x0, 0xfffffffb, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0]}, 0x40) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x521c, 0x1, 0x61, 0x0, 0x18) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r9 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="14", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="140000008400df000000000002008f04000026b7262d0fdae3"], 0x14, 0x8001}], 0x1, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r11 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20048005}, 0x24000000) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r11, 0x0, 0x0) read(r1, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) syz_emit_ethernet(0xe26, &(0x7f00000013c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0xdf0, 0x3a, 0x1, @remote, @mcast2, {[@srh={0x3a, 0x2, 0x4, 0x1, 0x6, 0x30, 0x1, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x67, 0x4, 0x4, 0x2, 0x1, 0x18, 0x5, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2]}, @hopopts={0x2e}, @srh={0x0, 0x10, 0x4, 0x8, 0x9, 0x40, 0xd933, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x1d}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x1}, @empty, @mcast1]}, @hopopts={0x0, 0xe, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x8, [0x9, 0x7]}}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x9, [0x1, 0x7, 0xca3a, 0xffffffffffffff15, 0xf8, 0xe]}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x1, [0x0]}, @pad1]}, @hopopts={0xd, 0x182, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0xc00, "d4714b7a54cece9f5e2c6b5dd23b00cfdc6c05790fcd2be99dcb17a1687a7b030d28bb6a72a4a836d5c5447a7461c90360a3ecd10bee486af1fb6cd09280a11082fb839624661ccb6dd2349b7606af30577c77244c34c5b31afed31387d7424dd9b002101e690286e86b6ff4dfdf72955d3c5456a93d4487f7f859c04c7fbc963b5f40e8263d8982e76dc312be6870e8a61b538304fbbf7a40fd4f5cea5cb59974c6fcb71649fa8c676cebaf309ec60e2b49db4f5aaf8251330b8c2e99ac2ad9129612dc8bf128686f74a58c492fb6e1f0d178e4ebcd5af0a515d409a730fe0a96de01f9f0e6953eea24aef7cc53c0fc592242c8f86fe07a9a758e5ac0b07c2d9c6a58d99b16e4e1396bcd9c8f965f1c15cf8779e9ed14bb2e2bce194aac4e9ab52d61ab7142e29aa1c3f9267bb124fb9dca32e0d329b5e239f941a28aec31d5460ce3344a8d5bf7e8e205210d84ac8c3bd08ac38f59def3281c31335996931de47fcb5083d111ef6805d10cbd7a82280fff37e3adc2d790756ee0c9a60bbfe0a4203397f66187d1c4bdbf830e340a78d5d6ab998806f1a0fdd6c8906213f2e16b4bcdca89b969a9a713294299ce1bde80726efd62edec022f00a7c98e58f8d172e171897111daedcd38539d842b8eba50e6d19369db52a1e0fd448bb8e21f3d1bbe523c0a2aeffeacf4b20e149d5d884df14686de1167d7c98a76371627d16940b287c89e406f46d4a4d7c2a6e0311ee8dae3771d130fea7da1903919931a7db8b02d1323559013aad37dbd46b7148b003132428cc2083535697f50b935582ef4ef1dcbdffa9c95a0f90532b176ba17bf6e17631c30708f9886a6763cf86781fe874bde915df93d1f9379036f59666f89e9f9da1eaebaaebb7fa63987387d8f51cb6aaa8856f9ad55b9e9542a700f208390f13f863fcc78cc318e5103b0458d74596cd000a5d15f7232723e971144495de3701aff4e6c83a77b27b01adb1bf58f82828c666574d56e9ff486a901ed560ec7381ac6b698d1e627f9a01d41c1ca1990cff8d1f35e3a0ea40f02f429cac6586e425638c9a430fbfc509d6ac937d24e49a95dd0d89ecf43b439a6d6dc35fdb21b01e1782192a35161d3716fd0ba44b5fbb66e68457b7e5f232eda68cf740a4e319419e17d4536287edc25ed45c1ab69012a23282100f359e4604ca47931b25036b8163bc074360a2f53c5e22ea357811847b3790011aafa6622360c9b157c51860035cca5192768eeadc4b0bdf31b9deb956a1c01495c72b4a621ebab341b5a84ab3dd33d3933a6975c73415c45552c67c53bcde137b45bd2529bd6b03c815efe1cfc2ade98f97ba365cbd52a2f29c92934f3eb113ed4887987e42a9d042bf5c665304f3df5e9434e689b9269e29276415e2f7b4d875d8fa5aa08d527b996a0c52a57fec3935b10d7357216e60a36122639cb10a1724c44243ee96c86a8b745bd460c4abcdbcdcfea7ec8feceaea8df23a473f2520f5fdca5ff579cfd8b0a2b878f204abae75c7ca3afe7bc880c90c9a16d9e44d07bf22adb8df0c34bce0e9caf87093490f9ca7dcf1b777475e37265d7ff5656ab0649dbe2f1faa6144c8c31648f65c689eb8f4c8b9f3bc92719cd2c7f9a238a5db8c3fbe6abf47bc549f44ccf2e212d25367ec6f2045f5743d9290a784f8a3870d3da2cacca0de9fc7305c344cae16c3d71cf3b01488e943d323b08a9dcae5a231bb88df5a7d5243b99b912c30352a2a6bff9542fb30f1da82d55f65f71ed8748eb4ba32ca3930ca18965226881e56f47c6548e1df7aeb81ab52eef0d962afdcf22058d8316cc845b306819824038197d251ac76cd559c5887c3739c849ad71bf91496dc47027c9ec24bc6f173e6b298b24f587d5451c985ec8a49bfa7f6013a8f4f5018ba6a310864e65fe0bf8a568e80176ee7b79f8bafb1d1d58450d58e2d25f3c7eb676f154aa73968d67b97878e84e57abae5360cb61590187e8d2f7aa42084ab27a65080b3d3268fec1987ba1d093e142d70c98393d70b2f577f356432e188f62263ea9d989f62a60c38f8b4aaca7de097f72ad3b8c53f51d0bf744e27de86c365d37552aa9b983c109dfa954734b84a63bb95893185736a4a82e2053ec0331adfa519ebb51c388d9a19c442bc07b91e2ffa0e4ef51f6b6cde8a44ec6a6fc2126e0b9cd5ff49c132c0c09c00896c99ea9f34eebf7b384f9914e762c495852ae944f5000f7c9b371fe9ff998ea67a9d598d55f0290ab7f9bfece47bab8b1e8b39a32dd1a4452f5686ac5527d24a60305cd37febc891bbc608b38d60847db35469b2d64e57e62b263da9f515714bda02f27fc7e75c0025252b932daabca87482bfcaa05ef5e566c858916081cb2919e84ee6161219118cdfb096c5fdc4b1cc2bebdd0c7d0e3084c0d627d8127e73cf8955e7e9eb31ebcfb5b016019e53651f682c0fa7919c188188559ad70bdcecd0c34f7d698017c4377e6025b2d69060d37466a512f351ddc0ca406d3ca5b458a6ac924b25aa8e2957bce00292cd4b4ff9aa73eac0d89e16257b9fa97c9108c387637236f6f4e0b9130a4bc09bb63e4244e579350c87327916c97bc95a119d30951a6dd475e6da8241faad06f8d80e1d6b24c013b686ba31911a1037fb3b6017e0677d192e09535f980e57600f0504d47ab9189e3038218b984d6e3cc71f0866cf6fcb270862a6dfa99ec2b234cc317a5070df397244862e5bec16af89d0437ee7ccf0042c79e4d26fb088008771bc5a787a010940472a8df7dcc060211c8c54d93b13936c882cb0125a4526fd563fa4678764cd570f25d915289c2bad891ce85a8a230135a457b1b8aa06d2ca51affd617bfae5ddea43eaeab75a79bd6ce3999ee791e77ea69738e8e021bf92a0d895d19cdf0625b3432d8bfdb928fb577815bdda327b1594916355775c5f2dbac8e74a4ac945bc499f7c514f1ad9cb20fd730a8f4924da85b8c7fc7113febb5f505d63bffa12ee51abf6cadf94c6db3b8405c68954ca21f58bd9acfde8aa8ce7a5dfea02c578a60408ad10cacf17fc0f8e617e55585d8cffa359cb3152559f8bb48d81a8a4b02707ef3216c988c24bc372bc07a9fe3529ab4f4e181bd90b1b255b620a21701dd5c0bf0428f65ced3869bc1c9ad54d70e518e8d64400905dc0b58a3fa932edf9e1c47e47e65ff44a4c7ea219b76a073cb4a31f5afe30cbb9d66a21817b0a54c3603b89be7a113b6754957ac9e5a0520107f6fbd0ca9b5e1077822eafc57ac4ae647ce71bf9bf17f9d21114982f3784c8e167af12e34c03bab75ecc878de9d9da1ca1bd22fbab12235afa9799ba99c822d5c40dd6fac174cda05b81c0e771346c183c6379923cee40a46fb7f709f5fb2fbd7c8af3a3bae22794268b7da04a642592b01ba1554ca7554b85bb2d336c39cc6d86bd1ba75c9b5ace3a51d346e79a64e4cf68ba23470abc672cbc59a7ef7d2aa7019a213cb3c0719a59e0dde0c7cda4cbe3ece0582853d4368b4d4bc9773a9e273910470270566be23d4e36d5a3637db906947113b24d576cc91c599f7459f66c88a417e6a91239068de8f29a869389713ac16b4714d0558a29e9195e7b1e713d451df96f0211c2e900eff343f6b9a2582274f3bd9afb7f3cf3d6f7eae90e3126813d09664ee6155001c58c2f93f4dbc81730c44b7f77b143d4471711a0eb1f8e645375ccf27dec750af80915a57f961d29bef89e453b223a93f520a88958b312bf654c69c3fc80f17d059993d90c20e2f09a06e16cd3ed8f0c4c4957d2c579ca34236128a19bc510046d05780cb1f605fd031e6ac236568bbbbd5c52900c64eaad87553b4745b61bb78a1009a2025b8c43086500c18aabbd2e5fb7574591efaa47cd89ee30d2d0bbec5b274e9eefe0923fe62101d198527b609ebc8c2e00f07d6c605fb27607dcd321569df23424810e4bcabae16f6b6dfc7939e0ac88cbcd24c078d977101ffb7ae58be33ace98f441fc5946efcbef4a2c952d7ac881679ebb3108c9044de8cc24c723803ad8d2fff594d913596a893283f22b7ce626c0a97ed7623f0507394e2b7565b22166745b5b0822dd870869d271ffc4edb967b6778d18fa7983ec65b2b45943ba9b7d27bd2ff9db6f0b81bdcea2061524c11891fd8882137d52f5279b3c4b93ca2321bce22b87572f0c4ac4e6cfb79e279f303f87ca03d3fddfdf8fe6a20d8c94cd970c24a15e2729922997ea15c3be841604c1bfc80746ac1fe2f91ec248abfff1cb6b24afb5f912c685961e5667198e83885b5d675f4b8d8dad3c669ccd33e5942682e5bfd6268396bd227f099f7afe7d6f5edb82987cf77ea1e"}, @pad1, @calipso={0x7, 0x8, {0x1, 0x0, 0x3, 0xffaf}}]}, @routing={0x2b, 0x8, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, @dstopts={0x2c}], @param_prob={0x4, 0x2, 0x0, 0x6, {0xc, 0x6, "fdcd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@hopopts={0x2b}]}}}}}}}, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000440)={@local, @link_local, @val={@void, {0x8100, 0x3, 0x0, 0x4}}, {@ipv6={0x86dd, @udp={0xc, 0x6, "d06a19", 0x9c, 0x11, 0xff, @local, @empty, {[], {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "621c4ef48b00f208f6e6a6efc293398eff6e4e1f7e523c450328af28a08d2d4e", "2b584cad4be4f966739060d8d00ea3abfce030b3f79a6d2bff4390cd1aa78ac47e1c26733a00a96a80e30f1c96bcee26", "7b4f0f85c4ef3c0aeb6c2de7946ea0ae3500ba7e55550c43f32b7f43", {"5a96e9cd5d2fcbf2c108be46c1fc6f61", "daffa5b527c12da4d247891b73917528"}}}}}}}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) 7.445689183s ago: executing program 1 (id=4283): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x5452, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c166ba2100a067ee66ba2000b000ee6d2f2f820000c0d23266bac000533066b808008ed0660f38806f008ee0", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x18002, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.594831606s ago: executing program 1 (id=4284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x6}]}, 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf030000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) mmap$panthor(&(0x7f0000212000/0x2000)=nil, 0x2000, 0x6, 0x8010, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) 5.096558076s ago: executing program 0 (id=4285): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 4.917448355s ago: executing program 1 (id=4286): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x7}) mount(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038c08", 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x3fc, 0xba}]}}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) writev(r3, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, 0x0) 4.690497361s ago: executing program 0 (id=4288): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x5452, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x18002, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.42382532s ago: executing program 3 (id=4289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a320000000014000000110001"], 0xc0}}, 0x0) close(r0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) preadv(r3, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000100)=""/24, 0x18}], 0x2, 0x5, 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x4c}}, 0x20008000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x72}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r5, 0x8937, &(0x7f0000000080)="2e5819c0fca27c74ae7d133a") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0xa, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x7, 0x80, 0x5, 0x3}}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000680)={r6, @loopback, @multicast1}, 0xc) writev(r1, 0x0, 0x0) 3.377798938s ago: executing program 1 (id=4291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0b45545, &(0x7f0000000040)=0x1000) socket(0x10, 0x3, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x30) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x40086603, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 3.176443812s ago: executing program 0 (id=4292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa00000000000000000800030004000000200004000a004e2300000005fe88000000000000000000000000010100100000060005000121000098000980940000800600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e000000205000300030000000600010002000000080002007f0000010500030003000000200004000a004e220000000dff020000000000000000000000000001020000000800030002000000c4000080240002007dc2e1ed365e02e2513ddefadb5de99be4d95fbf6f0b98b29ab06005070592c8200004000a004e2300010001ff0200000000000000000000000000010000000024000200a38ae58757ed082bbaf191266cd5eb3c1344d5c85f7027ed57243ad50f65917924000100000000000000000000000000000000000000000000000000000000000000000024000200d480776c593a9340566d58a953561005070bd09967d97ee699d5643ffb8edcd2080009800400008008000a"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000200), 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x4, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0xf7dd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x4000002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x5, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x3, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000005, 0x0, 0x2000003, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0x80000001]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x20000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x7ff, 0xd, 0x4000e18, 0x172d, 0x6, 0x7, 0x6, 0x3]}}) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x2) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.221653383s ago: executing program 4 (id=4294): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000340)}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r5], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2.035237165s ago: executing program 1 (id=4295): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x84) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="1201010200000040"], 0x0) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x3, 0x1, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb2e, 0x6, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf, 0xab, {0x8, 0x25, 0x1, 0x81, 0x33, 0xfa, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x3, 0xe, 0x8}}}}}}}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000340)) 1.872541455s ago: executing program 4 (id=4296): syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x8080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x2000000, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf8, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xf8}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f00000000c0)='erofs\x00', 0x20e0000, &(0x7f0000000800)='acl=\x8cB\xd0\x02\x91\x91mt\x15\x85\xe4\xf2\xdd\r@B\xa7\x88\xbe\r\x82\x9c\x16h~u\xd0\xba\xc8f\xc2\x12!\xc1\xeek\xa5~\x8f\x9c\xbe\n\xcd\x9dK\xf7:\x91<\xac\x9f\xaa$Q\xae\b\x9c\xe2v&\xbc\xab\xf7\x90\x84\xb6\x17\xf6\xabWt<4\'\x93\x87\xcfP\xa0h\xc0\xc4L\x1f\x11\x86\xfe\xccPSh\xb3#\\\x89}\xacB') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = dup3(0xffffffffffffffff, r2, 0x80000) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2, 0x13, r3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 1.66534351s ago: executing program 4 (id=4297): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x7}) mount(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038c08", 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x3fc, 0xba}]}}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) writev(r3, &(0x7f0000000a40)=[{&(0x7f0000000040)="9de24dfccd00", 0x6}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x2968, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x84, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x51}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x0, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x81, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x8, '\x00', 0x3}, {0x3, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x2}, {0x6, 0xc, 0x3, '\x00', 0x8}]}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.372587692s ago: executing program 0 (id=4298): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d65746100000000140002800800"], 0xc0}}, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x54}}, 0x20008000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x72}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r4, 0x8937, &(0x7f0000000080)="2e5819c0fca27c74ae7d133a") r5 = dup3(r0, r3, 0x80000) r6 = dup(r5) read(r6, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(r2, 0x0, &(0x7f0000000580)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.292046935s ago: executing program 3 (id=4299): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0x303, 0x0, 0x96}]}) 1.087966899s ago: executing program 3 (id=4300): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x240403, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$inet6(0xa, 0x80002, 0x0) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1.017675311s ago: executing program 3 (id=4301): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 939.909781ms ago: executing program 3 (id=4302): syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x2000000, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf8, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xf8}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f00000000c0)='erofs\x00', 0x20e0000, &(0x7f0000000800)='acl=\x8cB\xd0\x02\x91\x91mt\x15\x85\xe4\xf2\xdd\r@B\xa7\x88\xbe\r\x82\x9c\x16h~u\xd0\xba\xc8f\xc2\x12!\xc1\xeek\xa5~\x8f\x9c\xbe\n\xcd\x9dK\xf7:\x91<\xac\x9f\xaa$Q\xae\b\x9c\xe2v&\xbc\xab\xf7\x90\x84\xb6\x17\xf6\xabWt<4\'\x93\x87\xcfP\xa0h\xc0\xc4L\x1f\x11\x86\xfe\xccPSh\xb3#\\\x89}\xacB') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = dup3(0xffffffffffffffff, r2, 0x80000) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2, 0x13, r3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 847.288532ms ago: executing program 4 (id=4303): syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x2000000, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf8, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xf8}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f00000000c0)='erofs\x00', 0x20e0000, &(0x7f0000000800)='acl=\x8cB\xd0\x02\x91\x91mt\x15\x85\xe4\xf2\xdd\r@B\xa7\x88\xbe\r\x82\x9c\x16h~u\xd0\xba\xc8f\xc2\x12!\xc1\xeek\xa5~\x8f\x9c\xbe\n\xcd\x9dK\xf7:\x91<\xac\x9f\xaa$Q\xae\b\x9c\xe2v&\xbc\xab\xf7\x90\x84\xb6\x17\xf6\xabWt<4\'\x93\x87\xcfP\xa0h\xc0\xc4L\x1f\x11\x86\xfe\xccPSh\xb3#\\\x89}\xacB') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup3(0xffffffffffffffff, r1, 0x80000) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2, 0x13, r2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 479.759213ms ago: executing program 4 (id=4304): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './cgroup.cpu/cgroup.procs\x00'}) readv(r1, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2424}, {0x0}], 0x5) r2 = openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x13}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r4, 0xc0189436, 0x1ffffffe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000005c0)=0xd) ioctl$sock_SIOCADDDLCI(r5, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000200)) 129.397489ms ago: executing program 1 (id=4305): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) 0s ago: executing program 4 (id=4306): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x7}) mount(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038c08", 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x3fc, 0xba}]}}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) writev(r3, &(0x7f0000000a40)=[{&(0x7f0000000040)="9de24dfccd00", 0x6}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x2968, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x84, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x51}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x0, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x81, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x8, '\x00', 0x3}, {0x3, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x2}, {0x6, 0xc, 0x3, '\x00', 0x8}]}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): entered promiscuous mode [ 1077.942881][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.207154][T17394] veth0_macvtap: entered promiscuous mode [ 1078.358821][T17394] veth1_macvtap: entered promiscuous mode [ 1078.415211][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 1078.415229][ T36] audit: type=1326 audit(1785133417.741:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.415278][ T36] audit: type=1326 audit(1785133417.741:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.415322][ T36] audit: type=1326 audit(1785133417.741:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.415363][ T36] audit: type=1326 audit(1785133417.751:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.430783][ T36] audit: type=1326 audit(1785133417.761:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.430845][ T36] audit: type=1326 audit(1785133417.761:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.447906][ T36] audit: type=1326 audit(1785133417.771:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.447958][ T36] audit: type=1326 audit(1785133417.781:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.448001][ T36] audit: type=1326 audit(1785133417.781:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.505049][ T36] audit: type=1326 audit(1785133417.831:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17780 comm="syz.5.3795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1078.530504][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3795'. [ 1078.734121][ T198] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1078.769508][T17394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.853533][T17394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.892352][ T198] usb 5-1: Using ep0 maxpacket: 32 [ 1078.894955][ T198] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1078.894990][ T198] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1078.895023][ T198] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1078.895047][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.927007][T10581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.930409][ T198] usb 5-1: config 0 descriptor?? [ 1078.936942][T10581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.938219][T10581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.938273][T10581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.829820][ T198] corsair-cpro 0003:1B1C:0C10.004F: item fetching failed at offset 3/5 [ 1079.830623][ T198] corsair-cpro 0003:1B1C:0C10.004F: probe with driver corsair-cpro failed with error -22 [ 1079.875622][ T7406] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1080.144975][ T7406] usb 4-1: Using ep0 maxpacket: 32 [ 1080.260421][ T7406] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1080.260455][ T7406] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1080.260487][ T7406] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1080.260510][ T7406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.445834][ T7406] usb 4-1: config 0 descriptor?? [ 1080.616748][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.616764][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.684442][ T6168] usb 5-1: USB disconnect, device number 69 [ 1082.040305][T10511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.040380][T10511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.405553][ T7406] corsair-cpro 0003:1B1C:0C10.0050: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1082.459843][T17810] bridge0: port 3(dummy0) entered disabled state [ 1082.460608][T17810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.538731][T17810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.550909][T17811] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1083.580697][ T7406] corsair-cpro 0003:1B1C:0C10.0050: probe with driver corsair-cpro failed with error -71 [ 1083.586736][ T7406] usb 4-1: USB disconnect, device number 106 [ 1083.848523][T17825] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3806'. [ 1085.462539][ T6773] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 1085.638093][ T6773] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1085.644265][ T6773] usb 6-1: not running at top speed; connect to a high speed hub [ 1085.673782][ T6773] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1085.673811][ T6773] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.673830][ T6773] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1085.673850][ T6773] usb 6-1: config 128 has no interface number 0 [ 1085.673892][ T6773] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1085.673924][ T6773] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1085.673946][ T6773] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1085.676264][ T6773] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1085.676294][ T6773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.676313][ T6773] usb 6-1: Product: syz [ 1085.676326][ T6773] usb 6-1: Manufacturer: syz [ 1085.676340][ T6773] usb 6-1: SerialNumber: syz [ 1085.911911][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1086.064137][ T9] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1086.064165][ T9] usb 4-1: config 1 has no interface number 0 [ 1086.064209][ T9] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1086.064331][ T9] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1086.064359][ T9] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.196197][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1086.196286][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.196308][ T9] usb 4-1: Product: syz [ 1086.196322][ T9] usb 4-1: Manufacturer: syz [ 1086.196337][ T9] usb 4-1: SerialNumber: syz [ 1086.598930][T17845] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1089.851879][ T9] usb 4-1: Error in usbnet_get_endpoints (-71) [ 1090.073821][ T9] usb 4-1: USB disconnect, device number 107 [ 1090.411819][ T7406] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1090.412228][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 1091.123906][ T7406] usb 2-1: device descriptor read/64, error -32 [ 1091.414102][ T6773] usb 6-1: USB disconnect, device number 92 [ 1091.461725][ T7406] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1091.510578][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1092.130999][ T7406] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1092.133643][ T7406] usb 2-1: not running at top speed; connect to a high speed hub [ 1092.136357][ T7406] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 1092.136383][ T7406] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.136403][ T7406] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1092.136423][ T7406] usb 2-1: config 128 has no interface number 0 [ 1092.136465][ T7406] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1092.136478][ T7406] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1092.136490][ T7406] usb 2-1: config 128 interface 127 has no altsetting 0 [ 1092.139020][ T7406] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1092.139049][ T7406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.139068][ T7406] usb 2-1: Product: syz [ 1092.139081][ T7406] usb 2-1: Manufacturer: syz [ 1092.139090][ T7406] usb 2-1: SerialNumber: syz [ 1092.423097][T17876] netlink: 'syz.3.3823': attribute type 10 has an invalid length. [ 1092.423113][T17876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3823'. [ 1092.426185][T17876] bridge0: port 3(dummy0) entered blocking state [ 1092.426255][T17876] bridge0: port 3(dummy0) entered disabled state [ 1092.426472][T17876] dummy0: entered allmulticast mode [ 1092.428073][T17876] dummy0: entered promiscuous mode [ 1093.358100][T17892] batadv_slave_1: entered promiscuous mode [ 1093.373733][T17892] 9pnet_virtio: no channels available for device syz [ 1093.504835][ T6168] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1093.682032][ T6168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.682064][ T6168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.682102][ T6168] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1093.682124][ T6168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.786142][T17887] netlink: 'syz.5.3826': attribute type 10 has an invalid length. [ 1093.786157][T17887] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3826'. [ 1093.786328][T17887] bridge0: port 3(dummy0) entered blocking state [ 1093.786391][T17887] bridge0: port 3(dummy0) entered disabled state [ 1093.786551][T17887] dummy0: entered allmulticast mode [ 1093.788232][T17887] dummy0: entered promiscuous mode [ 1094.887928][ T6168] usb 4-1: config 0 descriptor?? [ 1095.470061][T17891] batadv_slave_1: left promiscuous mode [ 1095.853747][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 1095.853797][ T36] audit: type=1326 audit(1785133435.191:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1095.975160][ T36] audit: type=1326 audit(1785133435.191:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1095.976450][ T36] audit: type=1326 audit(1785133435.311:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1095.977414][ T36] audit: type=1326 audit(1785133435.311:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1095.978629][ T36] audit: type=1326 audit(1785133435.311:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1096.108779][ T36] audit: type=1326 audit(1785133435.441:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1096.173304][ T36] audit: type=1326 audit(1785133435.481:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1096.173410][ T36] audit: type=1326 audit(1785133435.481:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1096.242010][ T36] audit: type=1326 audit(1785133435.571:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1096.376077][ T43] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 1096.502863][ T36] audit: type=1326 audit(1785133435.811:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17905 comm="syz.0.3831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83740cde99 code=0x7ffc0000 [ 1096.536178][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.536241][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1096.536271][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.536296][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1096.536321][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1096.539478][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.539536][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1096.539561][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.539585][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1096.539610][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1096.547662][ T6168] cp2112 0003:10C4:EA90.0051: unknown main item tag 0x0 [ 1096.549123][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.549175][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1096.549200][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.549224][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1096.549247][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1096.567687][ T43] usb 6-1: string descriptor 0 read error: -22 [ 1096.567841][ T43] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1096.567864][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.696081][ T6168] cp2112 0003:10C4:EA90.0051: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1096.777040][ T6168] cp2112 0003:10C4:EA90.0051: error requesting version [ 1096.790095][ T6168] cp2112 0003:10C4:EA90.0051: probe with driver cp2112 failed with error -32 [ 1096.799975][ T43] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1096.827262][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3831'. [ 1097.041843][ T7406] usb 2-1: USB disconnect, device number 74 [ 1097.336464][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1097.593348][ T7406] usb 6-1: USB disconnect, device number 93 [ 1097.894810][ T6168] usb 4-1: USB disconnect, device number 108 [ 1098.402335][ T6168] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1098.551711][ T6168] usb 4-1: Using ep0 maxpacket: 8 [ 1098.553869][ T6168] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1098.553895][ T6168] usb 4-1: config 0 has no interface number 0 [ 1098.553950][ T6168] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1098.553971][ T6168] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1098.553995][ T6168] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1098.554020][ T6168] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1098.554058][ T6168] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1098.554079][ T6168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.665083][ T6168] usb 4-1: config 0 descriptor?? [ 1098.693774][ T6168] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1099.188615][ T5715] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1099.407485][ T5715] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.424314][ T5715] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1099.424464][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.424485][ T5715] usb 6-1: Product: syz [ 1099.424500][ T5715] usb 6-1: Manufacturer: syz [ 1099.424516][ T5715] usb 6-1: SerialNumber: syz [ 1099.503571][ T5715] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1099.763975][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-1) [ 1099.786101][ T7406] usb 4-1: USB disconnect, device number 109 [ 1099.786416][ T5715] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1099.786868][ T5715] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1099.786917][ T5715] usb 6-1: media controller created [ 1099.868849][ T7406] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1099.908520][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1100.128396][ T5715] usb 6-1: USB disconnect, device number 94 [ 1100.201778][ T43] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1100.265622][T17949] netlink: 'syz.1.3839': attribute type 10 has an invalid length. [ 1100.265663][T17949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3839'. [ 1100.371691][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1100.373765][ T43] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1100.373784][ T43] usb 5-1: config 0 has no interface number 0 [ 1100.373809][ T43] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1100.373822][ T43] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1100.373835][ T43] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1100.373848][ T43] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1100.373872][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1100.373884][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.378847][ T43] usb 5-1: config 0 descriptor?? [ 1100.487744][ T43] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1101.297017][ T6773] usb 5-1: USB disconnect, device number 70 [ 1101.333050][ T6773] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1101.781803][ T43] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 1101.935623][ T43] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1101.935678][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1101.935703][ T43] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1101.935726][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1101.935758][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1101.998424][ T43] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1101.998468][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1101.998483][ T43] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1101.998497][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1101.998510][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1102.011920][ T43] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1102.011959][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1102.011974][ T43] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1102.011988][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1102.012001][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1102.094660][ T43] usb 4-1: string descriptor 0 read error: -22 [ 1102.094752][ T43] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1102.094765][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.171846][ T7406] usb 6-1: new low-speed USB device number 95 using dummy_hcd [ 1102.264852][ T43] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1102.386325][ T7406] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1102.386362][ T7406] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1102.386377][ T7406] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1102.386391][ T7406] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1102.386405][ T7406] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1102.404417][ T7406] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1102.404480][ T7406] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1102.404508][ T7406] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1102.404551][ T7406] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1102.404578][ T7406] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1102.409452][ T7406] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1102.409531][ T7406] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1102.409557][ T7406] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1102.409582][ T7406] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1102.409607][ T7406] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1102.754236][ T7406] usb 6-1: string descriptor 0 read error: -22 [ 1102.754413][ T7406] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1102.754437][ T7406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.730605][ T7406] usb 6-1: can't set config #168, error -71 [ 1106.119280][T17972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1106.119521][T17972] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1106.147133][ T7406] usb 6-1: USB disconnect, device number 95 [ 1106.243976][T17972] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1106.244130][T17972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1106.244231][T17972] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1106.526345][ T5728] usb 4-1: USB disconnect, device number 110 [ 1106.812749][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 1107.109616][T17993] batadv_slave_1: entered promiscuous mode [ 1107.224120][T17985] netlink: 'syz.5.3848': attribute type 10 has an invalid length. [ 1107.224134][T17985] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3848'. [ 1107.393755][T17314] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1107.656245][T17999] netlink: 'syz.0.3853': attribute type 10 has an invalid length. [ 1107.656389][T17999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3853'. [ 1107.678086][T17999] bridge0: port 3(dummy0) entered blocking state [ 1107.678904][T17999] bridge0: port 3(dummy0) entered disabled state [ 1107.682612][T17999] dummy0: entered allmulticast mode [ 1107.902866][T17999] dummy0: entered promiscuous mode [ 1108.213671][T17999] bridge0: port 3(dummy0) entered blocking state [ 1108.213876][T17999] bridge0: port 3(dummy0) entered forwarding state [ 1108.226435][T17314] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.228908][T17314] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1108.228937][T17314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.228956][T17314] usb 2-1: Product: syz [ 1108.228970][T17314] usb 2-1: Manufacturer: syz [ 1108.228985][T17314] usb 2-1: SerialNumber: syz [ 1108.248639][T17314] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1108.251991][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 1108.334935][ T5608] Bluetooth: hci4: command 0x040f tx timeout [ 1108.334975][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 1108.334999][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 1108.548511][T17314] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1108.549092][T17314] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1108.549144][T17314] usb 2-1: media controller created [ 1108.784293][T17314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1110.485544][T18009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1110.485695][T18009] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1110.485795][T18009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1110.485904][T18009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1110.486020][T18009] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1110.863238][T17314] usb 2-1: USB disconnect, device number 75 [ 1110.906818][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 1110.908143][T18025] netlink: 'syz.4.3857': attribute type 10 has an invalid length. [ 1110.908178][T18025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1111.251872][T17314] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1111.414080][T17314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.414101][T17314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.414123][T17314] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1111.414135][T17314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.428866][T17314] usb 2-1: config 0 descriptor?? [ 1111.518300][T17993] batadv_slave_1: left promiscuous mode [ 1112.530219][ T5608] Bluetooth: hci4: command 0x040f tx timeout [ 1112.530321][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 1112.530618][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 1112.530716][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 1112.758813][T17314] cp2112 0003:10C4:EA90.0052: unknown main item tag 0x0 [ 1113.434048][T17314] cp2112 0003:10C4:EA90.0052: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1113.493224][T17314] cp2112 0003:10C4:EA90.0052: error requesting version [ 1113.513150][T17314] cp2112 0003:10C4:EA90.0052: probe with driver cp2112 failed with error -32 [ 1113.711953][ T7406] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1113.734155][T18049] batadv_slave_1: entered promiscuous mode [ 1113.736383][T18049] 9pnet_virtio: no channels available for device syz [ 1113.881683][ T7406] usb 6-1: Using ep0 maxpacket: 32 [ 1113.886989][ T7406] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1113.887030][ T7406] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1113.887063][ T7406] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1113.887148][ T7406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.945726][ T7406] usb 6-1: config 0 descriptor?? [ 1114.840665][T17314] usb 2-1: USB disconnect, device number 76 [ 1114.870927][ T7406] corsair-cpro 0003:1B1C:0C10.0053: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1115.435570][T18061] netlink: 'syz.1.3867': attribute type 10 has an invalid length. [ 1115.435614][T18061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3867'. [ 1115.972636][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.975612][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.106303][ T7406] corsair-cpro 0003:1B1C:0C10.0053: probe with driver corsair-cpro failed with error -71 [ 1116.127867][ T7406] usb 6-1: USB disconnect, device number 96 [ 1117.939541][T18049] batadv_slave_1: left promiscuous mode [ 1118.653305][ T5715] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1118.827035][ T7406] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1118.862865][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.862946][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.863045][ T5715] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1118.863115][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.435929][ T5715] usb 6-1: config 0 descriptor?? [ 1119.681838][ T7406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.681871][ T7406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.681912][ T7406] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1119.681934][ T7406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.687198][ T7406] usb 5-1: config 0 descriptor?? [ 1119.807173][T18100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1119.807486][T18100] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1119.839268][T18100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1119.854846][T18100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1119.855315][T18100] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1120.101377][ T5715] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1120.131436][ T5715] cp2112 0003:10C4:EA90.0054: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1120.249889][ T7406] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1120.279941][ T7406] cp2112 0003:10C4:EA90.0055: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1120.350134][T18091] cp2112 0003:10C4:EA90.0054: pid 18091 passed too short report [ 1120.366490][ T5715] cp2112 0003:10C4:EA90.0054: error requesting version [ 1120.541076][ T5715] cp2112 0003:10C4:EA90.0054: probe with driver cp2112 failed with error -32 [ 1120.571508][ T7406] cp2112 0003:10C4:EA90.0055: error requesting version [ 1120.587513][ T7406] cp2112 0003:10C4:EA90.0055: probe with driver cp2112 failed with error -32 [ 1121.558360][T18122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1121.771961][T16241] Bluetooth: hci1: command 0x0406 tx timeout [ 1121.863307][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 1121.863364][T16241] Bluetooth: hci0: command 0x0406 tx timeout [ 1121.931903][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 1121.931961][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1121.985650][ T7406] usb 6-1: USB disconnect, device number 97 [ 1122.061711][ T5715] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1122.218575][ T5715] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1122.218602][ T5715] usb 2-1: config 1 has no interface number 0 [ 1122.218645][ T5715] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1122.218671][ T5715] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1122.218697][ T5715] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.221203][ T5715] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1122.221233][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.221252][ T5715] usb 2-1: Product: syz [ 1122.221266][ T5715] usb 2-1: Manufacturer: syz [ 1122.221281][ T5715] usb 2-1: SerialNumber: syz [ 1122.320389][T18125] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1122.330991][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1122.331007][ T36] audit: type=1326 audit(1785133461.661:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.334045][ T36] audit: type=1326 audit(1785133461.661:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.335827][ T36] audit: type=1326 audit(1785133461.671:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.338145][ T36] audit: type=1326 audit(1785133461.671:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.338198][ T36] audit: type=1326 audit(1785133461.671:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.338670][ T36] audit: type=1326 audit(1785133461.671:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.340960][ T36] audit: type=1326 audit(1785133461.671:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.352901][ T36] audit: type=1326 audit(1785133461.681:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.352957][ T36] audit: type=1326 audit(1785133461.681:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.352999][ T36] audit: type=1326 audit(1785133461.681:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.5.3879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c186ede99 code=0x7ffc0000 [ 1122.457563][T18127] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3879'. [ 1122.501839][ T7406] usb 5-1: USB disconnect, device number 71 [ 1122.664203][ T5715] usb 2-1: Error in usbnet_get_endpoints (-71) [ 1122.712546][ T5715] usb 2-1: USB disconnect, device number 77 [ 1122.729490][T17515] udevd[17515]: setting mode of /dev/bus/usb/002/077 to 020664 failed: No such file or directory [ 1122.729672][T17515] udevd[17515]: setting owner of /dev/bus/usb/002/077 to uid=0, gid=0 failed: No such file or directory [ 1123.081756][ T5736] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 1123.180018][T17314] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1123.602111][T18140] netlink: 'syz.0.3884': attribute type 10 has an invalid length. [ 1123.602320][T18140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3884'. [ 1123.686623][ T5736] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1123.686688][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1123.686715][ T5736] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1123.686740][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1123.686766][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1123.688046][ T5736] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1123.688095][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1123.688121][ T5736] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1123.688145][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1123.688170][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1123.689527][ T5736] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1123.689571][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1123.689598][ T5736] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1123.689634][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1123.689704][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1123.761904][T17314] usb 6-1: Using ep0 maxpacket: 32 [ 1123.765107][T17314] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1123.765141][T17314] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1123.765180][T17314] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1123.765203][T17314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.798736][T17314] usb 6-1: config 0 descriptor?? [ 1123.806278][ T5736] usb 4-1: string descriptor 0 read error: -22 [ 1123.806420][ T5736] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1123.806443][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.966874][ T5736] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1124.045336][ T5728] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1124.222671][ T5728] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1124.222698][ T5728] usb 5-1: config 1 has no interface number 0 [ 1124.222798][ T5728] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1124.222823][ T5728] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1124.222848][ T5728] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.227940][T18148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3887'. [ 1124.230425][ T5728] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1124.230838][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.230861][ T5728] usb 5-1: Product: syz [ 1124.230876][ T5728] usb 5-1: Manufacturer: syz [ 1124.230890][ T5728] usb 5-1: SerialNumber: syz [ 1124.340559][T18143] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1126.918628][T17314] corsair-cpro 0003:1B1C:0C10.0056: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1126.949780][ T5728] usb 5-1: Error in usbnet_get_endpoints (-71) [ 1126.988698][ T5728] usb 5-1: USB disconnect, device number 72 [ 1127.337299][T17314] corsair-cpro 0003:1B1C:0C10.0056: probe with driver corsair-cpro failed with error -71 [ 1127.349337][T17314] usb 6-1: USB disconnect, device number 98 [ 1127.438635][T18160] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1127.438895][T18160] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1127.438997][T18160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1127.439095][T18160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1127.439193][T18160] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1128.330729][T18176] netlink: 'syz.0.3891': attribute type 10 has an invalid length. [ 1128.330744][T18176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3891'. [ 1128.491206][T18167] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1128.491438][T18167] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1128.491682][T18167] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1128.491808][T18167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1128.491944][T18167] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1129.762540][ T5736] usb 4-1: USB disconnect, device number 111 [ 1129.771831][T16241] Bluetooth: hci1: command 0x0406 tx timeout [ 1130.571841][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1130.571891][T16241] Bluetooth: hci3: command 0x0c1a tx timeout [ 1130.571919][T16241] Bluetooth: hci0: command 0x0406 tx timeout [ 1130.572044][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 1130.622479][ T5728] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1130.850940][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 1130.927310][ T5728] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1130.927354][ T5728] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1130.927468][ T5728] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1130.927526][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.988469][ T5728] usb 5-1: config 0 descriptor?? [ 1131.946261][T18210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1132.161987][T18210] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1132.162326][T18210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1132.162528][T18210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1132.167016][T18210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1132.505766][ T5728] corsair-cpro 0003:1B1C:0C10.0057: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1132.661766][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 1132.796421][ T5728] corsair-cpro 0003:1B1C:0C10.0057: probe with driver corsair-cpro failed with error -71 [ 1132.802528][ T5728] usb 5-1: USB disconnect, device number 73 [ 1132.881043][T18219] fido_id[18219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1133.011748][ T5715] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1134.322237][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 1134.412016][ T60] Bluetooth: hci4: command 0x040f tx timeout [ 1134.412060][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 1134.412096][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 1134.437235][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1134.438968][ T5715] usb 4-1: not running at top speed; connect to a high speed hub [ 1134.451315][ T5715] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1134.451344][ T5715] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.451364][ T5715] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1134.451384][ T5715] usb 4-1: config 128 has no interface number 0 [ 1134.451430][ T5715] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1134.451465][ T5715] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1134.451486][ T5715] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1134.489785][ T5715] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1134.489815][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.489835][ T5715] usb 4-1: Product: syz [ 1134.489850][ T5715] usb 4-1: Manufacturer: syz [ 1134.489864][ T5715] usb 4-1: SerialNumber: syz [ 1134.779266][T18234] batadv_slave_1: entered promiscuous mode [ 1134.800780][T18234] 9pnet_virtio: no channels available for device syz [ 1135.020243][T18238] bridge0: port 3(dummy0) entered disabled state [ 1135.042706][T18238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.065754][T18238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.016500][T18233] batadv_slave_1: left promiscuous mode [ 1137.059253][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3913'. [ 1137.276739][ T5715] usb 4-1: USB disconnect, device number 112 [ 1137.402969][ T5728] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1137.592005][ T5728] usb 6-1: Using ep0 maxpacket: 8 [ 1137.611260][ T5728] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1137.611344][ T5728] usb 6-1: config 0 has no interface number 0 [ 1137.611462][ T5728] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1137.611539][ T5728] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1137.699006][ T5728] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1137.699071][ T5728] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1137.699117][ T5728] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1137.699140][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.762584][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.806873][ T5728] usb 6-1: config 0 descriptor?? [ 1138.830331][ T5728] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1141.572092][T18276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1141.572480][T18276] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1141.572823][T18276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1141.573298][T18276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1141.593754][T18276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1141.672492][T17314] usb 6-1: USB disconnect, device number 99 [ 1141.689903][T17314] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1142.284578][T18294] netlink: 'syz.4.3927': attribute type 10 has an invalid length. [ 1142.284698][T18294] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3927'. [ 1142.647597][T17314] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1142.816250][T17314] usb 6-1: Using ep0 maxpacket: 8 [ 1142.817955][T17314] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1142.817971][T17314] usb 6-1: config 0 has no interface number 0 [ 1142.817996][T17314] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1142.818008][T17314] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1142.818021][T17314] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1142.818035][T17314] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1142.818057][T17314] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1142.818069][T17314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.919920][T17314] usb 6-1: config 0 descriptor?? [ 1142.953003][T17314] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1143.320278][T18288] misc userio: Invalid payload size [ 1143.437506][T18312] overlay: Unknown parameter '/' [ 1143.557484][ T5715] usb 6-1: USB disconnect, device number 100 [ 1143.575248][ T5715] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1143.622898][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 1143.622940][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.622968][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 1143.623036][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1144.236993][T18320] netlink: 'syz.4.3934': attribute type 10 has an invalid length. [ 1144.237036][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3934'. [ 1144.533779][T18306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1144.533936][T18306] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1144.534060][T18306] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1144.534160][T18306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1144.534257][T18306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1144.791819][T17314] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1145.274914][T17314] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.277556][T17314] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1145.277585][T17314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.277605][T17314] usb 2-1: Product: syz [ 1145.277619][T17314] usb 2-1: Manufacturer: syz [ 1145.277634][T17314] usb 2-1: SerialNumber: syz [ 1145.413657][T17314] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1145.455799][T16241] Bluetooth: hci1: command 0x0406 tx timeout [ 1145.596763][T17314] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1145.597046][T17314] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1145.597075][T17314] usb 2-1: media controller created [ 1145.797120][T18329] netlink: 'syz.0.3937': attribute type 10 has an invalid length. [ 1145.797142][T18329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3937'. [ 1145.823642][T18326] netlink: 'syz.3.3935': attribute type 10 has an invalid length. [ 1145.823656][T18326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3935'. [ 1145.845249][T17314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1146.549072][T17314] usb 2-1: USB disconnect, device number 78 [ 1146.625985][T16241] Bluetooth: hci5: command 0x0406 tx timeout [ 1146.626065][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1146.626091][T16241] Bluetooth: hci3: command 0x0c1a tx timeout [ 1146.626119][T16241] Bluetooth: hci0: command 0x0406 tx timeout [ 1147.271755][ T6168] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 1147.424394][ T6168] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1147.424439][ T6168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1147.424454][ T6168] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1147.424468][ T6168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1147.424481][ T6168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1147.425380][ T6168] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1147.425418][ T6168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1147.425444][ T6168] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1147.425470][ T6168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1147.425503][ T6168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1147.426445][ T6168] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1147.426474][ T6168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1147.426493][ T6168] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1147.426518][ T6168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1147.426542][ T6168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1147.429227][ T6168] usb 4-1: string descriptor 0 read error: -22 [ 1147.429321][ T6168] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1147.429334][ T6168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.642026][ T6168] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1148.061785][T17314] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1148.237450][T17314] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.239351][T17314] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1148.239369][T17314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.239380][T17314] usb 5-1: Product: syz [ 1148.239387][T17314] usb 5-1: Manufacturer: syz [ 1148.239395][T17314] usb 5-1: SerialNumber: syz [ 1148.295033][T17314] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1148.810151][T17314] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1148.812061][T17314] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1148.812270][T17314] usb 5-1: media controller created [ 1148.957073][T17314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1149.596430][T17314] usb 5-1: USB disconnect, device number 74 [ 1150.972502][ T5736] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 1151.273081][T18404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1151.273229][T18404] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1151.273347][T18404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1151.273462][T18404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1151.273561][T18404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1151.338565][ T5736] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1151.339101][ T5736] usb 6-1: not running at top speed; connect to a high speed hub [ 1151.340884][ T5736] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1151.340908][ T5736] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.340933][ T5736] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1151.340952][ T5736] usb 6-1: config 128 has no interface number 0 [ 1151.340991][ T5736] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1151.341021][ T5736] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1151.341042][ T5736] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1151.432254][ T5736] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1151.432285][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.432304][ T5736] usb 6-1: Product: syz [ 1151.432318][ T5736] usb 6-1: Manufacturer: syz [ 1151.432332][ T5736] usb 6-1: SerialNumber: syz [ 1151.621790][T17314] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1151.741973][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 1151.741992][ T36] audit: type=1326 audit(1785133491.081:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18415 comm="syz.1.3966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdedcade99 code=0x7ffc0000 [ 1151.743118][ T36] audit: type=1326 audit(1785133491.081:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18415 comm="syz.1.3966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdedcade99 code=0x7ffc0000 [ 1151.812889][ T36] audit: type=1326 audit(1785133491.141:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18415 comm="syz.1.3966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcdedcade99 code=0x7ffc0000 [ 1151.812990][ T36] audit: type=1326 audit(1785133491.141:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18415 comm="syz.1.3966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdedcade99 code=0x7ffc0000 [ 1151.813033][ T36] audit: type=1326 audit(1785133491.141:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18415 comm="syz.1.3966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdedcade99 code=0x7ffc0000 [ 1151.814845][T17314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1151.815545][T17314] usb 5-1: not running at top speed; connect to a high speed hub [ 1151.817351][T17314] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 1151.817376][T17314] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.817394][T17314] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1151.817414][T17314] usb 5-1: config 128 has no interface number 0 [ 1151.817457][T17314] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1151.817484][T17314] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1151.817506][T17314] usb 5-1: config 128 interface 127 has no altsetting 0 [ 1151.819198][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3966'. [ 1151.821115][T17314] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1151.821141][T17314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.821159][T17314] usb 5-1: Product: syz [ 1151.821174][T17314] usb 5-1: Manufacturer: syz [ 1151.821188][T17314] usb 5-1: SerialNumber: syz [ 1152.491821][ T6168] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1152.646520][ T6168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.646607][ T6168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.646646][ T6168] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1152.646668][ T6168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.659920][ T6168] usb 2-1: config 0 descriptor?? [ 1153.103659][ T6168] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 1153.120080][ T6168] cp2112 0003:10C4:EA90.0058: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1153.156686][ T6773] usb 4-1: USB disconnect, device number 113 [ 1153.344995][ T5736] usb 6-1: USB disconnect, device number 101 [ 1153.346645][T18422] cp2112 0003:10C4:EA90.0058: pid 18422 passed too short report [ 1153.377970][ T6168] cp2112 0003:10C4:EA90.0058: error requesting version [ 1153.389581][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 1153.389625][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 1153.389656][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 1153.389765][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 1153.389810][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1153.794822][ T6168] cp2112 0003:10C4:EA90.0058: probe with driver cp2112 failed with error -32 [ 1153.860787][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.071869][ T5736] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1154.247159][T17314] usb 5-1: USB disconnect, device number 75 [ 1154.305316][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.361664][ T5736] usb 6-1: Using ep0 maxpacket: 32 [ 1154.368228][ T5736] usb 6-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1154.368257][ T5736] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1154.368291][ T5736] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1154.368314][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.583797][ T5736] usb 6-1: config 0 descriptor?? [ 1155.445493][ T5736] usbhid 6-1:0.0: can't add hid device: -71 [ 1155.445800][ T5736] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1155.535479][ T5736] usb 6-1: USB disconnect, device number 102 [ 1156.301426][ T5715] usb 2-1: USB disconnect, device number 79 [ 1156.311170][T18453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1156.322454][T18453] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1156.322836][T18453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1156.322989][T18453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1156.325158][T18453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1156.734646][T17314] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1156.940834][T17314] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.966702][T17314] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1156.966735][T17314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.966755][T17314] usb 5-1: Product: syz [ 1156.966777][T17314] usb 5-1: Manufacturer: syz [ 1156.966791][T17314] usb 5-1: SerialNumber: syz [ 1156.988540][T17314] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1157.831732][ T5736] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1157.879032][T17314] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1157.879323][T17314] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1157.879353][T17314] usb 5-1: media controller created [ 1157.944200][T17314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1157.981704][ T5736] usb 2-1: Using ep0 maxpacket: 32 [ 1157.983689][ T5736] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1157.983719][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1157.983752][ T5736] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1157.983775][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.990956][ T5736] usb 2-1: config 0 descriptor?? [ 1158.071798][ T5715] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1158.254261][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.254292][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.254373][ T5715] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1158.254394][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.325387][ T5715] usb 6-1: config 0 descriptor?? [ 1158.338459][T18432] Bluetooth: hci3: command 0x0c1a tx timeout [ 1158.338501][T18432] Bluetooth: hci1: command 0x0406 tx timeout [ 1158.338531][T18432] Bluetooth: hci4: command 0x040f tx timeout [ 1158.338562][T18432] Bluetooth: hci0: command 0x0406 tx timeout [ 1158.338592][T18432] Bluetooth: hci5: command 0x0406 tx timeout [ 1158.751229][T17314] usb 5-1: USB disconnect, device number 76 [ 1158.835199][ T5715] cp2112 0003:10C4:EA90.0059: unknown main item tag 0x0 [ 1158.893646][ T5715] cp2112 0003:10C4:EA90.0059: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1158.993122][T18493] batadv_slave_1: entered promiscuous mode [ 1159.077430][T18489] cp2112 0003:10C4:EA90.0059: pid 18489 passed too short report [ 1159.081197][ T5715] cp2112 0003:10C4:EA90.0059: error requesting version [ 1159.336266][ T5715] cp2112 0003:10C4:EA90.0059: probe with driver cp2112 failed with error -32 [ 1159.382963][ T5736] corsair-cpro 0003:1B1C:0C10.005A: hidraw1: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 1159.706079][ T5736] corsair-cpro 0003:1B1C:0C10.005A: probe with driver corsair-cpro failed with error -71 [ 1159.737752][ T5736] usb 2-1: USB disconnect, device number 80 [ 1159.858546][T18505] fido_id[18505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1160.549565][T18508] netlink: 'syz.3.3988': attribute type 10 has an invalid length. [ 1160.549581][T18508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3988'. [ 1160.614567][T18492] batadv_slave_1: left promiscuous mode [ 1160.687134][T18506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1160.687276][T18506] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1160.687376][T18506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1160.687491][T18506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1160.687603][T18506] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1160.852880][ T6773] usb 6-1: USB disconnect, device number 103 [ 1161.692657][T18432] Bluetooth: hci1: command 0x0406 tx timeout [ 1162.417674][T18536] netlink: 'syz.0.3998': attribute type 10 has an invalid length. [ 1162.417825][T18536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3998'. [ 1162.742056][T16281] Bluetooth: hci3: command 0x0c1a tx timeout [ 1162.742100][T16281] Bluetooth: hci0: command 0x0406 tx timeout [ 1162.742131][T16281] Bluetooth: hci5: command 0x0406 tx timeout [ 1162.742209][T18432] Bluetooth: hci4: command 0x040f tx timeout [ 1164.141904][T18543] netlink: 'syz.3.3999': attribute type 10 has an invalid length. [ 1164.141980][T18543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1165.681820][ T5736] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1165.834677][ T5736] usb 2-1: Using ep0 maxpacket: 32 [ 1165.838116][ T5736] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1165.838154][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1165.838195][ T5736] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1165.838221][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.893626][ T5736] usb 2-1: config 0 descriptor?? [ 1167.372320][ T5736] corsair-cpro 0003:1B1C:0C10.005B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 1167.740129][T18586] netlink: 'syz.4.4012': attribute type 10 has an invalid length. [ 1167.740182][T18586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4012'. [ 1170.196689][ T5736] corsair-cpro 0003:1B1C:0C10.005B: probe with driver corsair-cpro failed with error -71 [ 1170.270160][ T5736] usb 2-1: USB disconnect, device number 81 [ 1170.468045][T18603] overlay: Unknown parameter '/' [ 1170.607647][T18612] netlink: 'syz.1.4017': attribute type 10 has an invalid length. [ 1170.607765][T18612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4017'. [ 1171.077274][T18602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1171.077452][T18602] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1171.077558][T18602] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1171.077659][T18602] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1171.077769][T18602] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1171.394768][ T6773] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1171.563341][ T6773] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.565340][ T6773] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1171.565359][ T6773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.565369][ T6773] usb 6-1: Product: syz [ 1171.565377][ T6773] usb 6-1: Manufacturer: syz [ 1171.565385][ T6773] usb 6-1: SerialNumber: syz [ 1171.573966][ T6773] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1172.124773][ T6773] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1172.125162][ T6773] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1172.125206][ T6773] usb 6-1: media controller created [ 1172.153150][ T6773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1172.501839][T16241] Bluetooth: hci1: command 0x0406 tx timeout [ 1172.726178][ T6773] usb 6-1: USB disconnect, device number 104 [ 1172.737866][ T6168] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1172.801746][ T5736] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1172.881715][ T6168] usb 5-1: Using ep0 maxpacket: 32 [ 1172.885671][ T6168] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1172.885703][ T6168] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1172.885736][ T6168] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1172.885759][ T6168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.943451][ T6168] usb 5-1: config 0 descriptor?? [ 1172.963086][ T5736] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1172.963909][ T5736] usb 2-1: not running at top speed; connect to a high speed hub [ 1172.967093][ T5736] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 1172.967120][ T5736] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.967139][ T5736] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1172.967160][ T5736] usb 2-1: config 128 has no interface number 0 [ 1172.967205][ T5736] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1172.967230][ T5736] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1172.967251][ T5736] usb 2-1: config 128 interface 127 has no altsetting 0 [ 1172.970807][ T5736] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1172.970838][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.970858][ T5736] usb 2-1: Product: syz [ 1172.970872][ T5736] usb 2-1: Manufacturer: syz [ 1172.970886][ T5736] usb 2-1: SerialNumber: syz [ 1173.131792][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1173.131835][T16241] Bluetooth: hci3: command 0x0c1a tx timeout [ 1173.131864][T16241] Bluetooth: hci0: command 0x0406 tx timeout [ 1173.131893][T16241] Bluetooth: hci5: command 0x0406 tx timeout [ 1173.365525][T18649] netlink: 'syz.3.4030': attribute type 10 has an invalid length. [ 1173.366597][T18649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4030'. [ 1173.851946][T17314] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1174.024685][T17314] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1174.026455][T17314] usb 6-1: not running at top speed; connect to a high speed hub [ 1174.028274][T17314] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1174.028301][T17314] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.028320][T17314] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1174.028339][T17314] usb 6-1: config 128 has no interface number 0 [ 1174.028383][T17314] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1174.028408][T17314] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1174.028429][T17314] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1174.064336][T17314] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1174.064367][T17314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.064387][T17314] usb 6-1: Product: syz [ 1174.064401][T17314] usb 6-1: Manufacturer: syz [ 1174.064415][T17314] usb 6-1: SerialNumber: syz [ 1174.383709][ T6168] corsair-cpro 0003:1B1C:0C10.005C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1174.788691][ T6168] corsair-cpro 0003:1B1C:0C10.005C: probe with driver corsair-cpro failed with error -71 [ 1174.825338][ T6168] usb 5-1: USB disconnect, device number 77 [ 1175.628827][T18663] netlink: 'syz.3.4033': attribute type 10 has an invalid length. [ 1175.628932][T18663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4033'. [ 1176.832892][T18666] netlink: 'syz.1.4034': attribute type 10 has an invalid length. [ 1176.832917][T18666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4034'. [ 1176.903235][ T5736] usb 2-1: USB disconnect, device number 82 [ 1176.981406][T17857] udevd[17857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1177.373927][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.373996][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.192544][T17314] usb 6-1: USB disconnect, device number 105 [ 1178.348792][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1178.491906][ T5736] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1178.766766][ T5736] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.941504][ T5736] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1178.941535][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.990131][ T5736] usb 2-1: Product: syz [ 1178.990153][ T5736] usb 2-1: Manufacturer: syz [ 1178.990167][ T5736] usb 2-1: SerialNumber: syz [ 1179.483713][ T5736] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1179.713262][ T5736] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1179.713742][ T5736] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1179.718826][ T5736] usb 2-1: media controller created [ 1179.773013][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1180.314293][ T5736] usb 2-1: USB disconnect, device number 83 [ 1180.351703][T18703] netlink: 'syz.0.4048': attribute type 10 has an invalid length. [ 1180.351719][T18703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4048'. [ 1181.492062][T18716] netlink: 'syz.5.4052': attribute type 10 has an invalid length. [ 1181.492076][T18716] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4052'. [ 1181.707939][T18707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1181.708162][T18707] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1181.708357][T18707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1181.708485][T18707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1181.708584][T18707] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1181.830148][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4056'. [ 1182.426964][ T6773] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1182.604172][ T6773] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.607555][ T6773] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1182.607585][ T6773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.607605][ T6773] usb 2-1: Product: syz [ 1182.607619][ T6773] usb 2-1: Manufacturer: syz [ 1182.607634][ T6773] usb 2-1: SerialNumber: syz [ 1182.637740][ T6773] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1182.847138][ T6773] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1182.847584][ T6773] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1182.847617][ T6773] usb 2-1: media controller created [ 1183.372553][T16241] Bluetooth: hci1: command 0x0406 tx timeout [ 1183.685413][ T6773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1183.905974][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1183.906027][T16241] Bluetooth: hci3: command 0x0c1a tx timeout [ 1183.906056][T16241] Bluetooth: hci0: command 0x0406 tx timeout [ 1183.906084][T16241] Bluetooth: hci5: command 0x0406 tx timeout [ 1184.521235][ T6773] usb 2-1: USB disconnect, device number 84 [ 1184.551855][T17314] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1184.631791][ T5728] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1184.676704][T18767] netlink: 'syz.5.4070': attribute type 10 has an invalid length. [ 1184.676720][T18767] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4070'. [ 1184.711959][T17314] usb 5-1: Using ep0 maxpacket: 32 [ 1184.716789][T17314] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1184.716820][T17314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.751383][T17314] usb 5-1: config 0 descriptor?? [ 1184.793828][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 1184.805750][ T5728] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1184.805785][ T5728] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1184.805819][ T5728] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1184.805841][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.882837][ T5728] usb 4-1: config 0 descriptor?? [ 1184.890648][T17314] as10x_usb: device has been detected [ 1184.944213][T17314] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1185.234275][T18773] netlink: 'syz.5.4072': attribute type 10 has an invalid length. [ 1185.234291][T18773] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4072'. [ 1185.587646][T17314] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1185.786444][ T5728] corsair-cpro 0003:1B1C:0C10.005D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1186.157793][ T5728] corsair-cpro 0003:1B1C:0C10.005D: probe with driver corsair-cpro failed with error -71 [ 1186.633453][ T5728] usb 4-1: USB disconnect, device number 114 [ 1187.090432][T18787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1187.090633][T18787] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1187.090792][T18787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1187.091022][T18787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1187.091164][T18787] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1187.398081][T17314] as10x_usb: error during firmware upload part1 [ 1187.398688][T17314] Registered device nBox DVB-T Dongle [ 1187.417730][T17314] usb 5-1: USB disconnect, device number 78 [ 1187.521796][ T5728] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1187.539632][T17800] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1187.579265][T18799] netlink: 'syz.0.4080': attribute type 10 has an invalid length. [ 1187.579279][T18799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4080'. [ 1187.673482][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 1187.676106][ T5728] usb 4-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1187.676134][ T5728] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1187.676174][ T5728] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1187.676196][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.704329][T17800] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.706533][T17800] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1187.706562][T17800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.706581][T17800] usb 2-1: Product: syz [ 1187.706596][T17800] usb 2-1: Manufacturer: syz [ 1187.706611][T17800] usb 2-1: SerialNumber: syz [ 1187.801777][ T9] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 1187.969450][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1187.970192][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1187.972934][ T9] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1187.972960][ T9] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.972979][ T9] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1187.973000][ T9] usb 6-1: config 128 has no interface number 0 [ 1187.973044][ T9] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1187.973069][ T9] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1187.973091][ T9] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1187.977338][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1187.977368][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.977387][ T9] usb 6-1: Product: syz [ 1187.977460][ T9] usb 6-1: Manufacturer: syz [ 1187.977477][ T9] usb 6-1: SerialNumber: syz [ 1188.170412][ T5728] usb 4-1: config 0 descriptor?? [ 1188.201340][T17800] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1188.365339][T17314] Unregistered device nBox DVB-T Dongle [ 1188.698955][T16241] Bluetooth: hci1: command 0x0406 tx timeout [ 1188.737767][T17314] as10x_usb: device has been disconnected [ 1188.935517][T18801] trusted_key: syz.5.4077 sent an empty control message without MSG_MORE. [ 1188.996246][T18805] netlink: 'syz.0.4082': attribute type 10 has an invalid length. [ 1188.996261][T18805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4082'. [ 1189.075822][ T5728] corsair-cpro 0003:1B1C:0C10.005E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1189.103736][T17800] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1189.105531][T17800] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1189.105857][T17800] usb 2-1: media controller created [ 1189.132484][T18432] Bluetooth: hci3: command 0x0c1a tx timeout [ 1189.132531][T18432] Bluetooth: hci0: command 0x0406 tx timeout [ 1189.132564][T18432] Bluetooth: hci5: command 0x0406 tx timeout [ 1189.132610][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1190.320647][T17800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1190.324796][ T5728] corsair-cpro 0003:1B1C:0C10.005E: probe with driver corsair-cpro failed with error -38 [ 1190.509561][ T5728] usb 4-1: USB disconnect, device number 115 [ 1191.402065][T17800] usb 2-1: USB disconnect, device number 85 [ 1191.425684][ T9] usb 6-1: USB disconnect, device number 106 [ 1191.662856][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1191.977338][T18825] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1191.977632][T18825] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1191.977895][T18825] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1191.978162][T18825] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1191.978439][T18825] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1192.281868][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1192.441896][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1192.444551][ T9] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1192.444583][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.476965][ T9] usb 4-1: config 0 descriptor?? [ 1192.494418][ T9] as10x_usb: device has been detected [ 1192.495323][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1192.601273][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1192.667579][ T9] as10x_usb: error during firmware upload part1 [ 1192.667971][ T9] Registered device nBox DVB-T Dongle [ 1192.714827][ T9] usb 4-1: USB disconnect, device number 116 [ 1192.773590][ T9] Unregistered device nBox DVB-T Dongle [ 1192.776055][ T9] as10x_usb: device has been disconnected [ 1192.801746][ T5736] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 1192.961873][ T5736] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1192.961929][ T5736] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1192.961956][ T5736] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1192.961986][ T5736] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1192.962010][ T5736] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1192.963576][ T5736] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1192.963637][ T5736] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1192.963665][ T5736] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1192.963692][ T5736] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1192.963717][ T5736] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1192.964911][ T5736] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1192.964976][ T5736] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1192.965000][ T5736] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1192.965014][ T5736] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1192.965028][ T5736] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1193.022475][ T5736] usb 2-1: string descriptor 0 read error: -22 [ 1193.022614][ T5736] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1193.022642][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.452285][T16241] Bluetooth: hci1: command 0x0406 tx timeout [ 1194.013198][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1194.013247][T16241] Bluetooth: hci3: command 0x0c1a tx timeout [ 1194.013277][T16241] Bluetooth: hci0: command 0x0406 tx timeout [ 1194.013305][T16241] Bluetooth: hci5: command 0x0406 tx timeout [ 1195.018468][ T5736] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1195.314833][ T5736] usb 2-1: USB disconnect, device number 86 [ 1195.551769][ T9] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1195.726241][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1195.727164][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1195.731506][ T9] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1195.731534][ T9] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.768481][ T9] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1195.768506][ T9] usb 4-1: config 128 has no interface number 0 [ 1195.768555][ T9] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1195.768579][ T9] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1195.768602][ T9] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1195.819381][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1195.819410][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.819428][ T9] usb 4-1: Product: syz [ 1195.819442][ T9] usb 4-1: Manufacturer: syz [ 1195.819456][ T9] usb 4-1: SerialNumber: syz [ 1197.096352][T18871] netlink: 'syz.5.4100': attribute type 10 has an invalid length. [ 1197.096367][T18871] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4100'. [ 1198.574523][T18884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1198.574749][T18884] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1198.574924][T18884] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1198.575049][T18884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1198.575147][T18884] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1198.845657][T18899] netlink: 'syz.3.4109': attribute type 10 has an invalid length. [ 1198.845679][T18899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1198.862526][ T5728] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 1198.959916][ T9] usb 4-1: USB disconnect, device number 117 [ 1199.029105][ T5728] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1199.029236][ T5728] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1199.029282][ T5728] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1199.029319][ T5728] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1199.029380][ T5728] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1199.075410][ T5728] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1199.077214][ T5728] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1199.077258][ T5728] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1199.077296][ T5728] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1199.077333][ T5728] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1199.162413][ T5728] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1199.162563][ T5728] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1199.162606][ T5728] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1199.162642][ T5728] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1199.162680][ T5728] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1199.240934][ T5728] usb 2-1: string descriptor 0 read error: -22 [ 1199.248283][ T5728] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1199.248310][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.299774][ T5728] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1199.384569][T18900] netlink: 'syz.4.4108': attribute type 10 has an invalid length. [ 1199.384594][T18900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1199.402787][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1199.532078][T18432] Bluetooth: hci1: command 0x0406 tx timeout [ 1199.834847][ T5736] usb 2-1: USB disconnect, device number 87 [ 1200.298231][ T9] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 1200.611161][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1200.651788][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 1200.651832][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 1200.651862][ T60] Bluetooth: hci4: command 0x040f tx timeout [ 1200.651922][T18432] Bluetooth: hci3: command 0x0c1a tx timeout [ 1200.672445][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1200.728225][ T9] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1200.728254][ T9] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.728284][ T9] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1200.728305][ T9] usb 4-1: config 128 has no interface number 0 [ 1200.728350][ T9] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1200.728456][ T9] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1200.728480][ T9] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1200.992648][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1200.992678][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.992698][ T9] usb 4-1: Product: syz [ 1200.992712][ T9] usb 4-1: Manufacturer: syz [ 1200.992727][ T9] usb 4-1: SerialNumber: syz [ 1201.690333][T18929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1201.740465][T18929] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1201.797153][T18929] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1201.797481][T18929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1201.797808][T18929] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1202.670282][T17314] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1202.828731][T18946] netlink: 'syz.5.4123': attribute type 10 has an invalid length. [ 1202.828746][T18946] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4123'. [ 1203.225408][T17314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1203.227019][T17314] usb 5-1: not running at top speed; connect to a high speed hub [ 1203.228728][T17314] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 1203.228755][T17314] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.228772][T17314] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1203.228783][T17314] usb 5-1: config 128 has no interface number 0 [ 1203.228856][T17314] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1203.228871][T17314] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1203.228882][T17314] usb 5-1: config 128 interface 127 has no altsetting 0 [ 1203.230906][T17314] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1203.230924][T17314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.230934][T17314] usb 5-1: Product: syz [ 1203.230941][T17314] usb 5-1: Manufacturer: syz [ 1203.230949][T17314] usb 5-1: SerialNumber: syz [ 1203.371777][T18432] Bluetooth: hci1: command 0x0406 tx timeout [ 1203.573707][T18949] netlink: 'syz.1.4122': attribute type 10 has an invalid length. [ 1203.573729][T18949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4122'. [ 1203.725729][ T9] usb 4-1: USB disconnect, device number 118 [ 1203.773590][T16241] Bluetooth: hci5: command 0x0406 tx timeout [ 1203.773649][T18432] Bluetooth: hci0: command 0x0406 tx timeout [ 1203.853142][T16241] Bluetooth: hci3: command 0x0c1a tx timeout [ 1203.853199][T18432] Bluetooth: hci4: command 0x040f tx timeout [ 1203.872791][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1204.101799][ T9] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 1204.141798][ T5736] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1204.266454][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1204.266576][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1204.266603][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1204.266628][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1204.266653][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1204.268639][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1204.268728][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1204.268743][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1204.268767][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1204.268793][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1204.270092][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1204.270132][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1204.270147][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1204.270198][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1204.270214][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1204.295761][ T5736] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1204.296342][ T5736] usb 2-1: not running at top speed; connect to a high speed hub [ 1204.298146][ T5736] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 1204.298173][ T5736] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.298192][ T5736] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1204.298212][ T5736] usb 2-1: config 128 has no interface number 0 [ 1204.298263][ T5736] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1204.298289][ T5736] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1204.298311][ T5736] usb 2-1: config 128 interface 127 has no altsetting 0 [ 1204.315123][ T5736] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1204.315155][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.315174][ T5736] usb 2-1: Product: syz [ 1204.315189][ T5736] usb 2-1: Manufacturer: syz [ 1204.315203][ T5736] usb 2-1: SerialNumber: syz [ 1204.547957][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1204.548185][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1204.548268][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.606086][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1205.190710][ T9] usb 4-1: USB disconnect, device number 119 [ 1205.459259][T17314] usb 5-1: USB disconnect, device number 79 [ 1205.626257][T17857] udevd[17857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1206.022247][T18984] netlink: 'syz.3.4132': attribute type 10 has an invalid length. [ 1206.022270][T18984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4132'. [ 1207.491463][T19004] netlink: 'syz.1.4139': attribute type 10 has an invalid length. [ 1207.491485][T19004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4139'. [ 1207.846568][ T5736] usb 2-1: USB disconnect, device number 88 [ 1207.953669][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.988489][T19009] netlink: 'syz.3.4140': attribute type 10 has an invalid length. [ 1207.989147][T19009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4140'. [ 1208.221798][ T6168] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 1208.441272][ T6168] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.441509][ T6168] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1208.441680][ T6168] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.441739][ T6168] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1208.441764][ T6168] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1208.541904][ T6168] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.542197][ T6168] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1208.542236][ T6168] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.542378][ T6168] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1208.542410][ T6168] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1208.742390][ T6168] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.742760][ T6168] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1208.742824][ T6168] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.742885][ T6168] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1208.742919][ T6168] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1209.095297][ T6168] usb 6-1: string descriptor 0 read error: -22 [ 1209.095783][ T6168] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1209.095816][ T6168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.561930][T19021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1209.608707][ T6168] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1209.665895][T19021] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1209.686624][T19021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1209.744494][T19021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1209.753639][T19021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1210.241339][ T6168] usb 6-1: USB disconnect, device number 107 [ 1210.431764][T17314] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1210.582137][T17314] usb 5-1: Using ep0 maxpacket: 32 [ 1210.583595][T17314] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1210.583621][T17314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1210.583640][T17314] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1210.583652][T17314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.586791][T17314] usb 5-1: config 0 descriptor?? [ 1210.848097][T19036] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1211.131770][T18432] Bluetooth: hci1: command 0x0406 tx timeout [ 1211.622914][T18432] Bluetooth: hci5: command 0x0406 tx timeout [ 1211.691796][T18432] Bluetooth: hci0: command 0x0406 tx timeout [ 1211.699049][T17314] corsair-cpro 0003:1B1C:0C10.005F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1211.771984][T16241] Bluetooth: hci3: command 0x0c1a tx timeout [ 1211.772101][T18432] Bluetooth: hci4: command 0x040f tx timeout [ 1213.297852][T17314] corsair-cpro 0003:1B1C:0C10.005F: probe with driver corsair-cpro failed with error -71 [ 1213.321943][T17314] usb 5-1: USB disconnect, device number 80 [ 1213.447237][T19062] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1214.053839][T17314] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1214.211777][T17314] usb 4-1: Using ep0 maxpacket: 32 [ 1214.214793][T17314] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1214.214822][T17314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.221298][T17314] usb 4-1: config 0 descriptor?? [ 1214.263133][T17314] as10x_usb: device has been detected [ 1214.264164][T17314] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1214.309362][T17314] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1214.329448][T17314] as10x_usb: error during firmware upload part1 [ 1214.330082][T17314] Registered device nBox DVB-T Dongle [ 1215.340225][T17314] usb 4-1: USB disconnect, device number 120 [ 1215.598229][T17314] Unregistered device nBox DVB-T Dongle [ 1215.607868][T17314] as10x_usb: device has been disconnected [ 1217.054643][T19105] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4170'. [ 1217.911919][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1218.085442][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1218.088893][ T9] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1218.088929][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1218.088962][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1218.089085][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.163829][ T9] usb 5-1: config 0 descriptor?? [ 1219.604044][T19140] netlink: 'syz.5.4182': attribute type 10 has an invalid length. [ 1219.604231][T19140] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4182'. [ 1220.383563][ T9] corsair-cpro 0003:1B1C:0C10.0060: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1220.460945][T19151] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4185'. [ 1220.542744][ T9] corsair-cpro 0003:1B1C:0C10.0060: probe with driver corsair-cpro failed with error -71 [ 1220.569680][ T9] usb 5-1: USB disconnect, device number 81 [ 1220.615639][T19152] fido_id[19152]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1221.158054][T19167] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1221.901784][T12403] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1221.999340][T19184] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4198'. [ 1222.056483][T12403] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1222.057019][T12403] usb 5-1: not running at top speed; connect to a high speed hub [ 1222.058876][T12403] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 1222.058893][T12403] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.058903][T12403] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1222.058918][T12403] usb 5-1: config 128 has no interface number 0 [ 1222.058949][T12403] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1222.058963][T12403] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1222.058974][T12403] usb 5-1: config 128 interface 127 has no altsetting 0 [ 1222.063770][T12403] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1222.063801][T12403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.063820][T12403] usb 5-1: Product: syz [ 1222.063834][T12403] usb 5-1: Manufacturer: syz [ 1222.063847][T12403] usb 5-1: SerialNumber: syz [ 1222.223527][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4196'. [ 1222.536303][T19187] netlink: 'syz.1.4200': attribute type 10 has an invalid length. [ 1222.536523][T19187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1223.091222][T19192] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4201'. [ 1225.604109][T19221] overlayfs: overlapping lowerdir path [ 1226.906162][T19231] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4211'. [ 1226.964260][T19218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1226.964550][T19218] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1226.964715][T19218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1227.010303][T12403] usb 5-1: USB disconnect, device number 82 [ 1227.120575][T19218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1227.120723][T19218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1227.121113][T19219] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1227.186304][T17515] udevd[17515]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1227.569118][T19239] netlink: 'syz.0.4212': attribute type 10 has an invalid length. [ 1227.569210][T19239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4212'. [ 1228.892315][T18432] Bluetooth: hci1: command 0x0406 tx timeout [ 1228.972526][T16241] Bluetooth: hci5: command 0x0406 tx timeout [ 1228.972630][T18432] Bluetooth: hci0: command 0x0406 tx timeout [ 1229.131923][T18432] Bluetooth: hci4: command 0x040f tx timeout [ 1229.132004][T16241] Bluetooth: hci3: command 0x0c1a tx timeout [ 1229.340327][T19253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1229.340636][T19253] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1229.340897][T19253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1229.352544][T19253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1229.352665][T19253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1231.292471][T16241] Bluetooth: hci1: command 0x0406 tx timeout [ 1231.382736][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 1231.382826][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 1231.382981][T18432] Bluetooth: hci3: command 0x0c1a tx timeout [ 1231.383112][T16241] Bluetooth: hci4: command 0x040f tx timeout [ 1231.857751][T19269] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4222'. [ 1232.221991][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1232.384423][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1232.640301][ T9] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1232.640323][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1232.640347][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1232.640360][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.702541][ T9] usb 5-1: config 0 descriptor?? [ 1236.124641][ T9] corsair-cpro 0003:1B1C:0C10.0061: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1236.245275][T19280] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1236.576464][T19284] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1236.748142][ T9] corsair-cpro 0003:1B1C:0C10.0061: probe with driver corsair-cpro failed with error -71 [ 1236.779248][ T9] usb 5-1: USB disconnect, device number 83 [ 1237.071754][T19297] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1238.416403][T18432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1238.493450][T18432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1238.514152][T18432] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1238.516802][T18432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1238.517598][T18432] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1238.821399][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.899585][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.429375][T19326] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1240.768914][T19333] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1240.895080][T18432] Bluetooth: hci2: command tx timeout [ 1241.161695][T19346] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1241.272989][T19330] kvm: pic: non byte read [ 1241.341075][T19330] kvm: pic: level sensitive irq not supported [ 1241.341415][T19330] kvm: pic: non byte read [ 1241.342491][T19330] kvm: pic: level sensitive irq not supported [ 1241.342852][T19330] kvm: pic: non byte read [ 1241.343122][T19330] kvm: pic: level sensitive irq not supported [ 1241.343291][T19330] kvm: pic: non byte read [ 1241.343525][T19330] kvm: pic: level sensitive irq not supported [ 1241.423936][T19330] kvm: pic: non byte read [ 1241.424112][T19330] kvm: pic: level sensitive irq not supported [ 1241.424193][T19330] kvm: pic: non byte read [ 1241.424299][T19330] kvm: pic: level sensitive irq not supported [ 1241.424336][T19330] kvm: pic: non byte read [ 1241.424475][T19330] kvm: pic: level sensitive irq not supported [ 1241.424520][T19330] kvm: pic: non byte read [ 1241.424687][T19330] kvm: pic: level sensitive irq not supported [ 1241.424733][T19330] kvm: pic: non byte read [ 1241.424917][T19330] kvm: pic: level sensitive irq not supported [ 1241.424996][T19330] kvm: pic: non byte read [ 1241.425101][T19330] kvm: pic: level sensitive irq not supported [ 1242.217305][ T1027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.516672][T19365] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1242.971888][T18432] Bluetooth: hci2: command tx timeout [ 1243.128417][ T1027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.211968][T12403] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1243.361780][T12403] usb 2-1: Using ep0 maxpacket: 32 [ 1243.413737][T12403] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1243.413770][T12403] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1243.413795][T12403] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1243.413807][T12403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.832692][T12403] usb 2-1: config 0 descriptor?? [ 1244.680116][T12403] corsair-cpro 0003:1B1C:0C10.0062: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 1244.711883][T19389] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1244.836590][T19394] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1244.870352][T19395] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1245.056821][T18432] Bluetooth: hci2: command tx timeout [ 1245.277557][T12403] corsair-cpro 0003:1B1C:0C10.0062: probe with driver corsair-cpro failed with error -71 [ 1245.349023][ T1027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.372624][T12403] usb 2-1: USB disconnect, device number 89 [ 1245.836921][T19408] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1245.965821][ T1027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.170283][T19303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.173632][T19303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.173905][T19303] bridge_slave_0: entered allmulticast mode [ 1246.176202][T19303] bridge_slave_0: entered promiscuous mode [ 1246.179285][T19303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.179493][T19303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.179711][T19303] bridge_slave_1: entered allmulticast mode [ 1246.184907][T19303] bridge_slave_1: entered promiscuous mode [ 1247.141879][T18432] Bluetooth: hci2: command tx timeout [ 1247.300219][T19303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.315576][T19303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.583638][T19303] team0: Port device team_slave_0 added [ 1247.598774][T19303] team0: Port device team_slave_1 added [ 1247.767600][T19424] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1247.806000][T19303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.806016][T19303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.806042][T19303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.824425][T19303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.824441][T19303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.824467][T19303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.010758][T19430] Bluetooth: MGMT ver 1.23 [ 1249.626967][T19303] hsr_slave_0: entered promiscuous mode [ 1249.627977][T19303] hsr_slave_1: entered promiscuous mode [ 1249.628660][T19303] debugfs: 'hsr0' already exists in 'hsr' [ 1249.628677][T19303] Cannot create hsr debugfs directory [ 1249.705290][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4269'. [ 1249.721197][T19437] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1249.721320][T19437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1249.721419][T19437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1249.721515][T19437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1249.721847][T19437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1249.722444][T19437] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1250.796184][T19437] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1251.103258][T19473] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1251.141741][T12403] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1251.172770][ T1027] dummy0: left allmulticast mode [ 1251.239005][ T1027] dummy0: left promiscuous mode [ 1251.265976][ T1027] bridge0: port 3(dummy0) entered disabled state [ 1251.300125][T19481] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1251.313683][T19465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.315304][T19465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.431783][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1251.474502][ T1027] bridge_slave_1: left allmulticast mode [ 1251.544404][ T1027] bridge_slave_1: left promiscuous mode [ 1251.546427][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.601766][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1251.605128][ T9] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1251.605158][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.641058][ T9] usb 2-1: config 0 descriptor?? [ 1251.661067][ T9] as10x_usb: device has been detected [ 1251.668156][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1251.695983][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1251.748730][ T9] as10x_usb: error during firmware upload part1 [ 1251.750093][ T9] Registered device nBox DVB-T Dongle [ 1251.763636][ T1027] bridge_slave_0: left allmulticast mode [ 1251.763661][ T1027] bridge_slave_0: left promiscuous mode [ 1251.773559][T18432] Bluetooth: hci0: command 0x0406 tx timeout [ 1251.773610][T18432] Bluetooth: hci3: command 0x0c1a tx timeout [ 1251.781919][T16241] Bluetooth: hci2: command 0x0c1a tx timeout [ 1251.782777][T18432] Bluetooth: hci4: command 0x040f tx timeout [ 1251.782815][T18432] Bluetooth: hci5: command 0x0406 tx timeout [ 1251.888085][ T9] usb 2-1: USB disconnect, device number 90 [ 1251.946491][ T9] Unregistered device nBox DVB-T Dongle [ 1251.950141][ T9] as10x_usb: device has been disconnected [ 1251.986795][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.050911][T17600] udevd[17600]: setting owner of /dev/dvb/adapter1/dvr0 to uid=0, gid=28 failed: No such file or directory [ 1252.181279][T12403] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1252.184655][T12403] usb 4-1: no configurations [ 1252.184679][T12403] usb 4-1: can't read configurations, error -22 [ 1252.369083][T19493] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1252.635582][T19498] UDC core: g1: couldn't find an available UDC or it's busy [ 1252.701963][ T1027] bond_slave_0: left promiscuous mode [ 1252.702051][ T1027] bond_slave_1: left promiscuous mode [ 1253.272239][T12403] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 1253.401737][T12403] usb 4-1: device descriptor read/64, error -71 [ 1253.522037][T12403] usb usb4-port1: attempt power cycle [ 1253.854240][T16241] Bluetooth: hci2: command 0x0c1a tx timeout [ 1253.871163][ T1027] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1253.871800][T12403] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 1253.892604][T12403] usb 4-1: device descriptor read/8, error -71 [ 1254.141809][T12403] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 1254.162595][T12403] usb 4-1: device descriptor read/8, error -71 [ 1254.184724][T19512] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1254.272710][T12403] usb usb4-port1: unable to enumerate USB device [ 1254.967143][ T1027] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1256.076859][T16241] Bluetooth: hci2: command 0x0c1a tx timeout [ 1256.107438][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.162439][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.229029][ T1027] bond0 (unregistering): Released all slaves [ 1256.241436][ T1027] bond1 (unregistering): Released all slaves [ 1256.261876][ T1027] bond2 (unregistering): Released all slaves [ 1256.282193][ T1027] bond3 (unregistering): Released all slaves [ 1256.302427][ T1027] bond4 (unregistering): Released all slaves [ 1256.322570][ T1027] bond5 (unregistering): Released all slaves [ 1256.664956][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1257.088487][T19531] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1257.612805][ T5736] usb 4-1: new low-speed USB device number 125 using dummy_hcd [ 1257.817271][ T5736] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1257.817323][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1257.817347][ T5736] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1257.817370][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1257.817393][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1257.818379][ T5736] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1257.818427][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1257.818451][ T5736] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1257.818485][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1257.818508][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1257.819629][ T5736] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1257.819672][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1257.819696][ T5736] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1257.819720][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1257.819747][ T5736] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1258.023249][ T5736] usb 4-1: string descriptor 0 read error: -22 [ 1258.023404][ T5736] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1258.023428][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.072743][ T5736] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1259.751837][ T9] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1259.916853][T19579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.917919][T19579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.161176][ T6168] usb 4-1: USB disconnect, device number 125 [ 1260.508135][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1260.687909][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1260.691787][ T9] usb 2-1: no configurations [ 1260.691804][ T9] usb 2-1: can't read configurations, error -22 [ 1261.772047][T10613] ------------[ cut here ]------------ [ 1261.772065][T10613] in_task() && kcov_mode_enabled(mode) [ 1261.772083][T10613] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5bb/0x6f0, CPU#0: kworker/u8:61/10613 [ 1261.772213][T10613] Modules linked in: [ 1261.772253][T10613] CPU: 0 UID: 0 PID: 10613 Comm: kworker/u8:61 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1261.772314][T10613] Tainted: [L]=SOFTLOCKUP [ 1261.772322][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1261.772336][T10613] Workqueue: events_unbound cfg80211_wiphy_work [ 1261.772468][T10613] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 1261.772507][T10613] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 2c fd 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 d7 f6 7d 09 89 c0 48 c7 c7 c0 82 9e [ 1261.772525][T10613] RSP: 0018:ffffc90006d779f8 EFLAGS: 00010202 [ 1261.772549][T10613] RAX: 0000000000000000 RBX: ffff88802994be00 RCX: 0000000080000001 [ 1261.772564][T10613] RDX: 0000000000000000 RSI: ffffffff8bca7760 RDI: ffffffff8bca7720 [ 1261.772579][T10613] RBP: ffff88803efaca00 R08: ffffffff8b4609a0 R09: 0000000000000000 [ 1261.772603][T10613] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 1261.772627][T10613] R13: ffff888059319ef8 R14: 0000000000000000 R15: ffff888058671180 [ 1261.772642][T10613] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 1261.772660][T10613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1261.772675][T10613] CR2: 0000001b3081bff8 CR3: 0000000028e86000 CR4: 00000000003526f0 [ 1261.772698][T10613] Call Trace: [ 1261.772744][T10613] [ 1261.772812][T10613] ieee80211_iface_work+0x20c/0x1010 [ 1261.772927][T10613] cfg80211_wiphy_work+0x29e/0x420 [ 1261.772966][T10613] ? process_scheduled_works+0xa20/0x14e0 [ 1261.773062][T10613] process_scheduled_works+0xa8e/0x14e0 [ 1261.773113][T10613] ? __pfx_process_scheduled_works+0x10/0x10 [ 1261.773146][T10613] ? assign_work+0x3cf/0x5d0 [ 1261.773177][T10613] worker_thread+0xa47/0xfb0 [ 1261.773220][T10613] ? __kthread_parkme+0x71/0x1f0 [ 1261.773293][T10613] kthread+0x388/0x470 [ 1261.773326][T10613] ? __pfx_worker_thread+0x10/0x10 [ 1261.773350][T10613] ? __pfx_kthread+0x10/0x10 [ 1261.773383][T10613] ret_from_fork+0x514/0xb70 [ 1261.773546][T10613] ? __pfx_ret_from_fork+0x10/0x10 [ 1261.773578][T10613] ? __switch_to+0xc89/0x1420 [ 1261.773689][T10613] ? __pfx_kthread+0x10/0x10 [ 1261.773722][T10613] ret_from_fork_asm+0x1a/0x30 [ 1261.773799][T10613] [ 1261.773811][T10613] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1261.773830][T10613] CPU: 0 UID: 0 PID: 10613 Comm: kworker/u8:61 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1261.773857][T10613] Tainted: [L]=SOFTLOCKUP [ 1261.773865][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1261.773879][T10613] Workqueue: events_unbound cfg80211_wiphy_work [ 1261.773914][T10613] Call Trace: [ 1261.773923][T10613] [ 1261.773931][T10613] vpanic+0x56c/0xa60 [ 1261.773962][T10613] ? __pfx__printk+0x10/0x10 [ 1261.773987][T10613] ? __pfx_vpanic+0x10/0x10 [ 1261.774006][T10613] ? is_bpf_text_address+0x292/0x2b0 [ 1261.774062][T10613] ? is_bpf_text_address+0x26/0x2b0 [ 1261.774095][T10613] panic+0xc5/0xd0 [ 1261.774112][T10613] ? __pfx_panic+0x10/0x10 [ 1261.774138][T10613] ? ret_from_fork_asm+0x1a/0x30 [ 1261.774162][T10613] __warn+0x315/0x4c0 [ 1261.774181][T10613] ? kcov_remote_start+0x5bb/0x6f0 [ 1261.774216][T10613] ? kcov_remote_start+0x5bb/0x6f0 [ 1261.774243][T10613] __report_bug+0x276/0x570 [ 1261.774318][T10613] ? kcov_remote_start+0x5bb/0x6f0 [ 1261.774347][T10613] ? __pfx___report_bug+0x10/0x10 [ 1261.774372][T10613] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1261.774429][T10613] ? rt_spin_lock+0x1e0/0x400 [ 1261.774489][T10613] ? rt_spin_lock+0x1e0/0x400 [ 1261.774522][T10613] ? kcov_remote_start+0x5bb/0x6f0 [ 1261.774553][T10613] report_bug+0x16a/0x220 [ 1261.774580][T10613] ? kcov_remote_start+0x5bb/0x6f0 [ 1261.774609][T10613] ? kcov_remote_start+0x5bd/0x6f0 [ 1261.774648][T10613] handle_bug+0x9c/0x200 [ 1261.774738][T10613] exc_invalid_op+0x1a/0x50 [ 1261.774766][T10613] asm_exc_invalid_op+0x1a/0x20 [ 1261.774808][T10613] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 1261.774839][T10613] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 2c fd 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 d7 f6 7d 09 89 c0 48 c7 c7 c0 82 9e [ 1261.774857][T10613] RSP: 0018:ffffc90006d779f8 EFLAGS: 00010202 [ 1261.774875][T10613] RAX: 0000000000000000 RBX: ffff88802994be00 RCX: 0000000080000001 [ 1261.774891][T10613] RDX: 0000000000000000 RSI: ffffffff8bca7760 RDI: ffffffff8bca7720 [ 1261.774906][T10613] RBP: ffff88803efaca00 R08: ffffffff8b4609a0 R09: 0000000000000000 [ 1261.774921][T10613] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 1261.774937][T10613] R13: ffff888059319ef8 R14: 0000000000000000 R15: ffff888058671180 [ 1261.774958][T10613] ? rt_spin_lock+0x1e0/0x400 [ 1261.774995][T10613] ? kcov_remote_start+0xda/0x6f0 [ 1261.775029][T10613] ieee80211_iface_work+0x20c/0x1010 [ 1261.775070][T10613] cfg80211_wiphy_work+0x29e/0x420 [ 1261.775105][T10613] ? process_scheduled_works+0xa20/0x14e0 [ 1261.775131][T10613] process_scheduled_works+0xa8e/0x14e0 [ 1261.775185][T10613] ? __pfx_process_scheduled_works+0x10/0x10 [ 1261.775217][T10613] ? assign_work+0x3cf/0x5d0 [ 1261.775248][T10613] worker_thread+0xa47/0xfb0 [ 1261.775289][T10613] ? __kthread_parkme+0x71/0x1f0 [ 1261.775328][T10613] kthread+0x388/0x470 [ 1261.775359][T10613] ? __pfx_worker_thread+0x10/0x10 [ 1261.775384][T10613] ? __pfx_kthread+0x10/0x10 [ 1261.775416][T10613] ret_from_fork+0x514/0xb70 [ 1261.775452][T10613] ? __pfx_ret_from_fork+0x10/0x10 [ 1261.775484][T10613] ? __switch_to+0xc89/0x1420 [ 1261.775515][T10613] ? __pfx_kthread+0x10/0x10 [ 1261.775547][T10613] ret_from_fork_asm+0x1a/0x30 [ 1261.775586][T10613] [ 1261.775929][T10613] Kernel Offset: disabled