last executing test programs: 15.768365653s ago: executing program 0 (id=400): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 14.940259984s ago: executing program 0 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.640897456s ago: executing program 0 (id=408): syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r0 = getpid() syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 11.155634577s ago: executing program 1 (id=412): r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x10000, 0x3, 0x101, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.643780496s ago: executing program 2 (id=417): mkdir(&(0x7f0000000300)='./file0\x00', 0x62) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020}, 0x2025) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x1) listen(r2, 0xe) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d100378013000300717472283414d6bba919736d34290000080008"], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 7.794283178s ago: executing program 1 (id=420): memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 7.601144213s ago: executing program 1 (id=421): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000640)) 7.385393989s ago: executing program 1 (id=423): syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x800, 0x4, 0x9, 0x20000000000009a}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x2}, 0x48) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40044160, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4a21, 0xdec, @private2, 0x6}], 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r5 = getpid() syz_pidfd_open(r5, 0x0) 7.316539931s ago: executing program 0 (id=424): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x7b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xb}}}}}}}]}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)=""/234, 0xea}], 0x1}, 0x1f01) keyctl$clear(0x3, 0xfffffffffffffffd) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000480)={0x0, 0x6}, 0x0, 0x0}) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000380)=')\x80', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@gettaction={0xf0, 0x32, 0x2, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffeffff}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x2, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x53, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), 0x2, 0x0, 0xcccccccc}) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x1c}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x80) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x87, &(0x7f0000000700)=@string={0x87, 0x3, "bab1ecbe63c9cf71975735f4df784273ac60f004440cb705e511ed8d1d204926af42d46bc793231ee3295d0aeb101b5279ac39930d7cce24357304cd9752bec961b6b7f0904ea3e5d45662c36158fa917bfb61e7217a39d15f17c5a0f4ebbc7e0267a283fe4ee557b44cf093f9c23a767040fdedbfbb0a074f6275ffff5517d71d2208d381"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x6a, &(0x7f0000000540)=@string={0x6a, 0x3, "3b084370a62c0333fc249ebab30b4b76ba2864afaf6ea24faa6758f0e3b02c2916c781f513e18022b97e72997080de57ff8526642f6d18a5d3478229a35f47df751189d7cb5aabbdbae828bac73d05acade2bfcf5ce53e4144e6f03450b221442266c5107b8f44ea"}}]}) 7.218843241s ago: executing program 2 (id=425): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_gstrings={0x25, 0x7}}) 6.885157683s ago: executing program 2 (id=427): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1440}], 0x0, 0x0, 0x0}) 6.769281585s ago: executing program 4 (id=428): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, 0x0, 0xc}, 0x94) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) 6.679360346s ago: executing program 2 (id=429): socketpair(0x28, 0x20000000000001, 0x9, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) r3 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0xf23, 0x0, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x80, 0x80000000, 0x27, @loopback, @mcast2, 0x700, 0x20, 0xffffff7f, 0xfffffffb}}) 5.213024456s ago: executing program 4 (id=430): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 5.083336959s ago: executing program 1 (id=431): r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x10000, 0x3, 0x101, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.782642207s ago: executing program 4 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.456970447s ago: executing program 3 (id=434): syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r0 = getpid() syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 3.996999259s ago: executing program 3 (id=435): memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 3.864486275s ago: executing program 0 (id=436): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x694, @mcast1, 0x3}, {0xa, 0x4e20, 0x80000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x6}, r3, 0x1}}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) write(0xffffffffffffffff, &(0x7f0000000640)="bdd2b42667e2a3475fea422540731f27a6bb6b834bfe23a90e685866dae9c03ee5810f885fe0fe0ab56b3aaa090cec9bc56f989d7cad282c84eca95d1d7784a147028b11200d2ff9510c7d534fa99e5b13447dababf63e83db7ce0c1eb359d3b3dd24b59993b83d494f2e9a8700a708e230304f43102c902699bcc15075d94bff55567f6d934415b91140de0d7", 0x8d) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = timerfd_create(0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x1000000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x2614a4, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r6, @ANYRES64, @ANYRES64]) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)) 3.66152073s ago: executing program 4 (id=437): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x18d107) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000"], 0x122}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="db84fd4c4ce9627c6278392c6c0000000008010300000000000000000500000306000240891400000500030021000000340004800800014000000004080001400000000708000140fffffff6080001400000004f080001ad6c31e161a6681ee75744c6d940000000000800014000000009"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 3.578283324s ago: executing program 3 (id=438): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x1b, 0x0, &(0x7f0000000000)="9dbaac999f69835fbc2825cd64f15b99bacc2f3083c48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.200145979s ago: executing program 4 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 1.980147168s ago: executing program 3 (id=440): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, 0x0, 0xc}, 0x94) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) 1.619307805s ago: executing program 2 (id=441): syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x800, 0x4, 0x9, 0x20000000000009a}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x2}, 0x48) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40044160, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4a21, 0xdec, @private2, 0x6}], 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r5 = getpid() syz_pidfd_open(r5, 0x0) 794.238154ms ago: executing program 3 (id=442): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 425.966193ms ago: executing program 1 (id=443): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)="cc572808a82d787bc9be76d3f492f23805ca7ad4584581d51509c125cb9089cbdeba1222de5f87ba0a7b578907eb50a6dddb54249580cad220bd602924ff7ad9cfee0d1d84126e27a34d66cd5c6b91ec7cca5c7b4c6119cbdca65acc963fc650634b46e3f490b1c6d2336eccd078cd4ecabc82cc73e13fbd4b551736a272da1d7a47ec29f5234bf588d77da0d3dfea8263cd3d6da43768cdf941743043612ec0bc2f7b4688c48624eee45a312e6f2a94fafe76484b114ac8008a0efbf8393e7b018bf598fc38f148a0cccacae28f9b1e8832bfac43c1b6be0a73ee93da364fd07d840469fcfa61c8e74be7ef519c2853fd3115ae98e44582f0f2f3504568875a1ba0aa63282cad770ba763234646ae34b1fff58d057961013848f73f5ec1932d79130c345a0c2a7abc0aba24f1857bc12fd9a88e48b48f37888a242320826614246f3a2a8e7b7b3df0ddc9efbf57801126f86b7b388ea0414b522fe54b8c50cd091afecdbb008626bc7b62470053664ae695812174ec3df65ac54dd90e1f37f9648ff8ba1c52a6091de60bb5d4fa723fc05947f9dc67bce63961b966cccd73b366cc1d8f95b31e27eb00d564903dca32c1e602e38d7726f4b88863b82303c1021b097f398f0ab3ccc00c47d9f86c6964feb77575ec9e305b3e43a7396b43eb541f9fad998c067ba069a4babc6c54151f6682f682c7789de66800981e9610bdbba5d9511ef22de4a8758e139f8945665c7ef8107394eb4f73c38878080c9e612074f988a9a8d56d83f50f2ce4f018d43eb5f1e697f86a426fcf3ee1431949746aae56d556a0bf50104544eb4b650d28a041c093cf5faa93796ef4c282de1c614d684f0013a8b0096affc12523783ec4569784ef57123cd59b307da12dd8891e4404f9b86080fba74771b24f55c55fc615d5b9b48d3be724c7c67e102fb54fd4422ece77cc0c4b8e6033a02f16d25eb9ef7ec24869f0ae7efbcd45cd6ca4578d2e7e08caf6743f3df92726553330f0528bbe9dd5f31bcec7fe21d843e94bd389e3abeae16b983794b833bbe47a1856c54e225d0c52d1f4d374e1ddd4fe1d9b14d14ee1c87f464e9d8ccbc232c68dc1a5b7b91b229d2f3cf6e43384890bd9c8c067e873900dab8634f03f8e525a97a8bdea5333a5cb6b5e9478f6e4a2061b40e852c3b95ae3925a322abab62d33e0419c719cc4046d3be5414102389431b3ec674340ec23bcfc0d219f20d11809c88d50124c5ddc068d09b241b2f60084e40b6c3e69a3b84a633db792a6eaa292b3544a4d1ead870114103330d296d670d72c73ea8410e34209b62415a4906dd0873660fb3b9949af5aad8dd9b262867ba2232bc30a7c90036977d53a762f8dcdbf0ba173c300293ee3b13598bf7500645367eab61bb757f145c1d8e5e52d8d17e4be124a3cf3e3bed2551dce19ed22b0478c092c1b40eca105ef1cbf75b742653be8ced6b851c556f66d4255152e7a55c94ec3c0c03954b2a7e209b6f17a5e8277422dbe1f5de97cacdbe27233e6c7bd9d83fddd8a00cd32d2e6fffd1cb1a00f5b305f4fd5b93c225c2f409a2a52d4c3439dfc424bede2f69b1f8eb7cf15d81e761a49e63b515fb8a84b80e52798da24a72aadc50cd40784dcfb8da851dedbf19cb949212f503bb1b4a5ad87d0882ebbdb27bef9a3f40428c065217874bee13b7dffccb5aa18e043ed9c30930967124bece883c84a3bacf26064178c9bd886feb96679c348fad3a3403f1305b8175d6657de50a66c7b61aa398bf9a74a0fcac5c3197cc070cf4592d96a889f63f65c4266b8004018b3bff00960b6516e4903f40f017b87ef63a9dd5084ebe9054223e7bdc8174cde824839963467697c6a61aa461bda825e952d6f806fe12a8f3464aa550026d9a800c881b44094152d1761e01463d21f3a96539f26a65be0daf1afbeaa7002ae309e398370f9bc0b5d5c196284e854b55d6d8b11339104c23c5921b1e73782315acc5e0a3fdc3cbf7479f372cc651500f9b1a072e37073848cf4e5f631850c0cda8a33ce0ce7d0673efdbb0efc78995abea7613f0e02a723b109ef9528e5430da2ced5dc500f3c50652170dbd83dfacf2627423afc12a5ca839c5c6b0a25a4e366014437e1f8d1b9f05ba910baa22b6f53f47c76bb6dbbcc3d217fa2f2370301d054124e49fd802d2fd1c6e479c6b33bd961621a9d963a68b4f4c4a5173ac486047f67135525bf6119920fe3f25e3cda4d08c12cebcccc26de7ccfb41231d2f639b68773315955c7581d4c4868674a63cc8cbf9ad7d10eae024fc8a96c1d90ed602738588f4265d0981d56eba67946bafff5f530f0b24ed139d7b2e3b047a915efb21f33f43c47f53d9adb98f414f5a18e43490ae6224e6fa63b3791f5c9429f01c6e47259e36d90352c03412691d4e1c617ac90fd4c81faba12c0ffabf9bae448a09dfd5f9db976398a2766b071cc7f5e01877e28d1f563e93f461806860207a42dac1e3589baf6a85f8ef9245447d433a2b2f9dd8e7fa1421f168538799ccf63571c3cdbdce6308a1e5cfda2beecae1ab098ffeb7a908a95421cb2ccfc8ffd778653c27eb523d5413af27e0c91fd0c80d822a752682b777976f967c14304a956aeb3fbb7e5731736a94293ce8ff143c57f4960ddbaf8b9bdb560b20069a763168c7dc8fb8d237cf70644d7aae8a57f51090488dc7a2c6a12bb0414b4bdc6253d482f8b64571ccb3c9b82f9ff8bc907ab1c22a0a2d566d729a14430991aed9ea257c5fd4b7a387c87081c4bf5c7e97c3554650a18b4c34881e5eaaeb1283f047fff9a1d89ba58de57d37444e700af1852d3b2d08e635ff5d05a3c0e9d32a2264cbd0cc75a649169ddddb1137e1b86fbb945a0908fa80d47ea8e55c07e3161225e6770bee0adf5bd9efd2e13fdd1d35a77c5972a3e820098397ab484e3e5cc8e7def8de90f28caf5ab061df5f0c7ccb625bac04fd5247fa7729da5fda4b174640ec40f039f23221cd32387b309edb2589dd2246f6873b1b038b64b35cad190c197d7cd935e5de7278a8499d979b4a581c479a61b5f35f6d771bbab5b126f6ea9ffb81c5aae9bdb45fd229ff672f098132dfe741a57317efa480c50942ad18103bd328f53f9f89dbff476e9ad98e47eb92b61f29dcf59283bcc4fb1896985b549a46dadf44d7e855b65d8d19127f7e33ffa742f8bd0d88c92b60ab6258c91159eca7206a60dd6599c90abf3302293d4316a95c8f2eaa9d438a5156ea6dcc0bb88c29db8f973fc384373eecf7c51521227390bf86e0b62a8b0d05efcda0db7b61cfb15c2f6c7f8f93a2260e064f6b0652a90056db5ba048cb434f21e247bf2ce71e3d1d9f5d9901b28070097ca51eb85a807c0beec911ec4643be9a8bf2ca5bc16afb90f004b4fa33ccf95b3eef4b780aa722fd7b90defe87d69a73765d509b21c07183c25d0830b38116439b7ed107cef82225f6ec2d91355bbf6896039779aeec1e1fa2bffca49b5a48b9f1e231b15478206936c0df1b15b745428ea1740479445a82aed2af2d61f4110275b720f050653a8f6896f7ae8981769ec854fed1c2087290094e2eca3c82e3803b5b15698c0baec13a97c74ad833ed5dc8c4b0f3176892f93136d22265b40c161636ec63df0dd28a8d0ad3645ba285e9d80a591579227d32981286440ff8445a2e4dabccf09f0ade6505a27eec9955e6f7e9799d6b1e89dccc81a4b6d6991e6059d3f02ee87b68461689ee6d706b75dc115fbb20de410777f9e9a87dc626269fda590000033db47e44e824ce7dcb6831997d4c046fe99ff19e6e1d7e49383879c272ca2bfd7d7c76812494f2b7ed5b761dd6862758ab49226ff91e5f6e67842a9934decd037c1e650639eb17a826bf0c069f0b4ddad1f5099f2caf5193bdf0d2da29ebcc10b0eecc38a2321c948dbec6c39cbe0b905be6f03a4254bbfe6bab7605f76e8014a1ffb4457c661e7ecd47ecd2d87325956f349400ca11933a1f928837570c9c95cd77bcc636d965df2aaf14bcbe9230fe15e8a1df64f3392aa92f9f0c57888d05207575ef95ab4f7f70a3b6a2f75f05a9a7bf654f326b4c37f75888f92116bca4146b090b772ee83127f008ce25efa8bb1246e7dd465d6294af486d912680eda46f008e58b004238acc05e430a5d471cfb489e3eab467c86093d97e8104739ead70307b5d3ea6d8c1986a2ab181afa13a2a8b0bd41a26478337f6c81b2c8ee0a7c4b727fb81d564931d02102d6390a0280f1d0e69bb241ed4a171fdeb421705f4fddf60aa7e1b27282e3167203ab51d9c8244b11930d2f59dbac15a4594a47d03b271edec67e39a07bdd44179ad710d6c32b192743220f168b77739df1489d7adc5d87b64efe5374a7f622129ab5b75e0f050169f75544b69e02d24dbddaef29628a55148c7038cbaa147f7e40b394a8587c07ec41e6fd7d25300df11c850eb115878ea0d067d43702545215dba243e15471dac4fdd99849c4d4e064faa89ceb68d9cc3f2b0baa9152a992077fa3bfa0011a1a8a0eef4142bdf163431ec62c500ca82eef98d235461b68ac167fa91eead274d0cfcf1f58d71dff8b3feb1a0881c9260a185b27796a2f9040827d65d6d31bf3ca101940f9b8ac9bcdc692d6393ddec7d61e69e8991ea4cd31b6b274676ff94ff6ddeb7fc546f60a7f3d9ea56a28b0908c5e5ae339ae2f930ef20dbbbfd184cd4d1d70ab741f19be87d86586a74898a97b7cc6f49d91827b38dd8da6264a992df7798143188f54b423c4b15676c36dfbc88b8d191f8c918b6e0b189e93f4e8d28df939d72f1e866174def528b4dfc853c05fb2a3cdea52a4fd3b794fdf65a45ec79b42ea9a75302ad7c786a46b9fb9cf3e3d3193368af4b51fab4d1db87e4af3f7c28e5e9e55234b9a577f077411a7597913e4c3e6384cf85c92b90e21c7cb03fd21164d96b4bba4f83e27eb745f3183048742bea36b561e8c6e9de6a6baa538a4df7d3251c45fb66a53ea8b3f1dc323d955115b78a6790adfd823daf334867d058165e56ea25b3bb641feeb5f3e720004c9c8590bdfcd98b5975799b80dd1604dcd00bf5b6c2d9c15c1bbfcc63b1cf64c053bc6f5a6f03ac05d117089273a6890172e07e2e7a8a159ecfefe0575278f379e5a34b69a726a27277002303fe8b90d5c99bd73fb39a630c756606ece1c06b054787278aafbca790eb505ff780ae27b0481c1b95961c642ef8416c9bbc32c15159a955f416c533d727d3e037aa4ba393693764ad58dc703dd853d471b08a0078332c6294969a3cada0a14b0cc8dae45bbfae2400c6859ea7817c8bf364e5aa4cd88ea8499080eb9d3e06accc8d10b470260da08673f3782861639d10e947278cfea28c3a36ef1bde9f7a92b4037deade745529e3697dc4efd9e502affddb56c9e549a2b890b085136ea1cd632b243d0d4e8203029df59d7a0b2601b8234dc79a9f57a298bfd6e1e922692cfe12ee7076545357ea141be0152334aae68ee1087f900c82686b5d9580c61656dfec41d6d221d207baca5f2a7c6ccdb2be0cf7417673fd36ba38e47993d831532f29c692420ffec92916883a2df955d4e9722865f41f91e533cd59aa3cf95aa6062e8baa59659b225b3f58f17efc9f40271766d46c64fb202db61fbd31c7b183130ed969a415b62e5afaade81bf03bff478204d0df75ec8cc92b0669563c7f62d649515f6e6b72360b5c3e0d63f784c0a85970f4979969765fd1c5fe2d0a4ceb71c018b34062d897ee7ef08483df06bbbd39ab0f192aa2c8bea2ff46f070cc017f603", 0x1000) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) 249.676651ms ago: executing program 4 (id=444): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16, @ANYRES16], 0x0) 170.166635ms ago: executing program 0 (id=445): syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r0 = getpid() syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 109.301563ms ago: executing program 2 (id=446): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x7b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xb}}}}}}}]}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)=""/234, 0xea}], 0x1}, 0x1f01) keyctl$clear(0x3, 0xfffffffffffffffd) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000480)={0x0, 0x6}, 0x0, 0x0}) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000380)=')\x80', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@gettaction={0xf0, 0x32, 0x2, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffeffff}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x2, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x53, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), 0x2, 0x0, 0xcccccccc}) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x1c}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x80) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x87, &(0x7f0000000700)=@string={0x87, 0x3, "bab1ecbe63c9cf71975735f4df784273ac60f004440cb705e511ed8d1d204926af42d46bc793231ee3295d0aeb101b5279ac39930d7cce24357304cd9752bec961b6b7f0904ea3e5d45662c36158fa917bfb61e7217a39d15f17c5a0f4ebbc7e0267a283fe4ee557b44cf093f9c23a767040fdedbfbb0a074f6275ffff5517d71d2208d381"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x6a, &(0x7f0000000540)=@string={0x6a, 0x3, "3b084370a62c0333fc249ebab30b4b76ba2864afaf6ea24faa6758f0e3b02c2916c781f513e18022b97e72997080de57ff8526642f6d18a5d3478229a35f47df751189d7cb5aabbdbae828bac73d05acade2bfcf5ce53e4144e6f03450b221442266c5107b8f44ea"}}]}) 0s ago: executing program 3 (id=447): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf2545000000080003", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x20004}, 0x40000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r8, 0x4, 0x2400) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r10, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r10, @ANYRES64], 0x84}}, 0x8800) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x0, 0x3}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 97.488448][ T10] cfg80211: failed to load regulatory.db [ 98.680013][ T5785] cgroup: Unknown subsys name 'net' [ 98.951260][ T5785] cgroup: Unknown subsys name 'cpuset' [ 99.024844][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.963590][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.428217][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.442530][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.456921][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.457744][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.462479][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.463950][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.475935][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.477766][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.564292][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.569946][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.672873][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.688631][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.690579][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.692753][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.693912][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.715558][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.727226][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.731191][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.733779][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.734821][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.770944][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.791234][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.796885][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.799536][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.800676][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.663810][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 104.729281][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 104.907177][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 104.983205][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 105.000494][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 105.208373][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.209613][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.210288][ T5800] bridge_slave_0: entered allmulticast mode [ 105.212324][ T5800] bridge_slave_0: entered promiscuous mode [ 105.280975][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.281106][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.281311][ T5800] bridge_slave_1: entered allmulticast mode [ 105.283556][ T5800] bridge_slave_1: entered promiscuous mode [ 105.320166][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.320273][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.320412][ T5797] bridge_slave_0: entered allmulticast mode [ 105.322307][ T5797] bridge_slave_0: entered promiscuous mode [ 105.405937][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.406082][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.406255][ T5797] bridge_slave_1: entered allmulticast mode [ 105.408357][ T5797] bridge_slave_1: entered promiscuous mode [ 105.538642][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.556266][ T5803] Bluetooth: hci1: command tx timeout [ 105.558655][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.558813][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.558975][ T5805] bridge_slave_0: entered allmulticast mode [ 105.560821][ T5805] bridge_slave_0: entered promiscuous mode [ 105.644417][ T5803] Bluetooth: hci0: command tx timeout [ 105.645755][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.647132][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.647238][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.647577][ T5805] bridge_slave_1: entered allmulticast mode [ 105.649503][ T5805] bridge_slave_1: entered promiscuous mode [ 105.653715][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.653947][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.718809][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.719023][ T5807] bridge_slave_0: entered allmulticast mode [ 105.721667][ T5807] bridge_slave_0: entered promiscuous mode [ 105.724823][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.725135][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.725605][ T5806] bridge_slave_0: entered allmulticast mode [ 105.753315][ T5806] bridge_slave_0: entered promiscuous mode [ 105.795937][ T5803] Bluetooth: hci2: command tx timeout [ 105.820170][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.820429][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.820565][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.820699][ T5807] bridge_slave_1: entered allmulticast mode [ 105.822589][ T5807] bridge_slave_1: entered promiscuous mode [ 105.828819][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.829376][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.829866][ T5806] bridge_slave_1: entered allmulticast mode [ 105.840925][ T5806] bridge_slave_1: entered promiscuous mode [ 105.874642][ T5803] Bluetooth: hci3: command tx timeout [ 105.962893][ T5800] team0: Port device team_slave_0 added [ 105.985011][ T5803] Bluetooth: hci4: command tx timeout [ 105.987234][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.052157][ T5800] team0: Port device team_slave_1 added [ 106.056639][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.063712][ T5797] team0: Port device team_slave_0 added [ 106.079392][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.094564][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.133349][ T5797] team0: Port device team_slave_1 added [ 106.142993][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.151753][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.236579][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.236594][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.236613][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.241408][ T5805] team0: Port device team_slave_0 added [ 106.337508][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.337529][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.337561][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.340602][ T5805] team0: Port device team_slave_1 added [ 106.341660][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.341673][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.341692][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.347663][ T5807] team0: Port device team_slave_0 added [ 106.361125][ T5806] team0: Port device team_slave_0 added [ 106.463120][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.463139][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.463173][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.476496][ T5807] team0: Port device team_slave_1 added [ 106.488083][ T5806] team0: Port device team_slave_1 added [ 106.572671][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.572686][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.572706][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.148468][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.148483][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.148503][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.150991][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.151005][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.151025][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.152357][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.152380][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.152408][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.296240][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.296300][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.296375][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.300878][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.300925][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.300994][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.343313][ T5800] hsr_slave_0: entered promiscuous mode [ 107.350425][ T5800] hsr_slave_1: entered promiscuous mode [ 107.462142][ T5797] hsr_slave_0: entered promiscuous mode [ 107.463213][ T5797] hsr_slave_1: entered promiscuous mode [ 107.465827][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 107.466253][ T5797] Cannot create hsr debugfs directory [ 107.597048][ T5805] hsr_slave_0: entered promiscuous mode [ 107.599652][ T5805] hsr_slave_1: entered promiscuous mode [ 107.600391][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 107.600410][ T5805] Cannot create hsr debugfs directory [ 107.634471][ T5803] Bluetooth: hci1: command tx timeout [ 107.704573][ T5807] hsr_slave_0: entered promiscuous mode [ 107.705675][ T5807] hsr_slave_1: entered promiscuous mode [ 107.706347][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 107.706366][ T5807] Cannot create hsr debugfs directory [ 107.714269][ T5803] Bluetooth: hci0: command tx timeout [ 107.883078][ T5806] hsr_slave_0: entered promiscuous mode [ 107.885068][ T5803] Bluetooth: hci2: command tx timeout [ 107.894423][ T5806] hsr_slave_1: entered promiscuous mode [ 107.895168][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 107.895187][ T5806] Cannot create hsr debugfs directory [ 107.964324][ T5803] Bluetooth: hci3: command tx timeout [ 108.034166][ T5803] Bluetooth: hci4: command tx timeout [ 108.661003][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.699541][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.731022][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.787288][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.903705][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.954786][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.986229][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.050135][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.212584][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.252553][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.283405][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.346341][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.509255][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.545781][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.595687][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.650643][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.714566][ T5803] Bluetooth: hci1: command tx timeout [ 109.793758][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.799380][ T5803] Bluetooth: hci0: command tx timeout [ 109.842105][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.883216][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.929441][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.954340][ T5803] Bluetooth: hci2: command tx timeout [ 109.976197][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.034437][ T5803] Bluetooth: hci3: command tx timeout [ 110.083197][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.114279][ T5803] Bluetooth: hci4: command tx timeout [ 110.116787][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.152702][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.167504][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.232345][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.232522][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.303975][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.341033][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.341359][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.382355][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.402793][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.402905][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.498660][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.547474][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.552082][ T3048] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.552280][ T3048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.619644][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.619790][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.723132][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.740576][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.805036][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.805178][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.862470][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.862631][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.913947][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.984997][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.985205][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.036880][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.037105][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.137467][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.403387][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.467553][ T5800] veth0_vlan: entered promiscuous mode [ 111.533324][ T5800] veth1_vlan: entered promiscuous mode [ 111.696990][ T5797] veth0_vlan: entered promiscuous mode [ 111.760236][ T5800] veth0_macvtap: entered promiscuous mode [ 111.769526][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.771828][ T5797] veth1_vlan: entered promiscuous mode [ 111.793694][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.794255][ T5803] Bluetooth: hci1: command tx timeout [ 111.836755][ T5800] veth1_macvtap: entered promiscuous mode [ 111.874550][ T5803] Bluetooth: hci0: command tx timeout [ 111.966752][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.983983][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.022532][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.034310][ T5803] Bluetooth: hci2: command tx timeout [ 112.062620][ T5797] veth0_macvtap: entered promiscuous mode [ 112.092945][ T1028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.114326][ T5803] Bluetooth: hci3: command tx timeout [ 112.139215][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.139975][ T5797] veth1_macvtap: entered promiscuous mode [ 112.160290][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.194355][ T5803] Bluetooth: hci4: command tx timeout [ 112.194447][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.278654][ T5807] veth0_vlan: entered promiscuous mode [ 112.370013][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.461619][ T5807] veth1_vlan: entered promiscuous mode [ 112.486417][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.567674][ T1028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.570201][ T5806] veth0_vlan: entered promiscuous mode [ 112.572691][ T1028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.608493][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.608516][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.635850][ T1028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.658232][ T1028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.761466][ T5806] veth1_vlan: entered promiscuous mode [ 112.853369][ T5805] veth0_vlan: entered promiscuous mode [ 112.869504][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.869527][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.987340][ T5807] veth0_macvtap: entered promiscuous mode [ 113.015420][ T5805] veth1_vlan: entered promiscuous mode [ 113.053595][ T5807] veth1_macvtap: entered promiscuous mode [ 113.078614][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.078637][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.205332][ T5806] veth0_macvtap: entered promiscuous mode [ 113.221467][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.221483][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.251860][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.299603][ T5806] veth1_macvtap: entered promiscuous mode [ 113.338242][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.390201][ T5805] veth0_macvtap: entered promiscuous mode [ 113.392043][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.426232][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.432643][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.446686][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.486414][ T5805] veth1_macvtap: entered promiscuous mode [ 113.505672][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.620686][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.806142][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.028230][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.051313][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.068956][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.082136][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.194683][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.471522][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.471542][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.500899][ T3048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.516249][ T3048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.563188][ T3048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.576783][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.062944][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.062966][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.843689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.843738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.843774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.843811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.843847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.843882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.843918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.843960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.843996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.844031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.329899][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.329976][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.671728][ T3048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.671753][ T3048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.004731][ T3048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.004756][ T3048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.122479][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.122496][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.542399][ T5956] openvswitch: netlink: Message has 4 unknown bytes. [ 123.164911][ T5876] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.346693][ T5876] usb 1-1: device descriptor read/64, error -71 [ 123.547216][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 123.574274][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.615708][ T5986] Zero length message leads to an empty skb [ 123.644617][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.945480][ T5876] usb 1-1: device descriptor read/64, error -71 [ 123.964220][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 123.970362][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.030465][ T31] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 124.030488][ T31] usb 5-1: config 0 has no interface number 0 [ 124.030563][ T31] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 124.030583][ T31] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 124.030599][ T31] usb 5-1: config 0 interface 88 has no altsetting 0 [ 124.033339][ T31] usb 5-1: language id specifier not provided by device, defaulting to English [ 124.054465][ T5876] usb usb1-port1: attempt power cycle [ 124.151217][ T31] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 124.151241][ T31] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 124.151257][ T31] usb 5-1: Product: syz [ 124.151268][ T31] usb 5-1: Manufacturer: 焗뜭ퟸ㈓Ⳗìºè‘´äˆ¯é›ãš«á›µæ·²î«âŠ–╵՛옾ꬶٽåƒê¼—à¹ç¶•ç€Ÿá€¦ì¨î¹´ä§§Â§íˆ¶æ®ƒí‘¯ã©¨í… è¦Žë済꧴ײַ咥â£ÑƒçƒªãŽ³æ€´â ­æŒìˆ·ã¿ì—綑ë˜à¬±á©†å¤—ä‘뚽艧 [ 124.151287][ T31] usb 5-1: SerialNumber: syz [ 124.431088][ T31] usb 5-1: config 0 descriptor?? [ 125.837576][ T31] input: 焗뜭ퟸ㈓Ⳗìºè‘´äˆ¯é›ãš«á›µæ·²î«âŠ–╵՛옾ꬶٽåƒê¼—à¹ç¶•ç€Ÿá€¦ì¨î¹´ä§§Â§íˆ¶æ®ƒí‘¯ã©¨í… è¦Žë済꧴ײַ咥â£ÑƒçƒªãŽ as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input5 [ 125.957151][ T31] usb 5-1: USB disconnect, device number 2 [ 126.496416][ T5876] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.511333][ T5876] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 127.511380][ T5876] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 127.511415][ T5876] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.511451][ T5876] usb 1-1: config 220 has no interface number 2 [ 127.511658][ T5876] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.511710][ T5876] usb 1-1: config 220 interface 0 has no altsetting 0 [ 127.511747][ T5876] usb 1-1: config 220 interface 76 has no altsetting 0 [ 127.511782][ T5876] usb 1-1: config 220 interface 1 has no altsetting 0 [ 128.231520][ T5876] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 128.231544][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.231559][ T5876] usb 1-1: Product: syz [ 128.231569][ T5876] usb 1-1: Manufacturer: syz [ 128.231580][ T5876] usb 1-1: SerialNumber: syz [ 128.589482][ T5855] udevd[5855]: Error opening device "/dev/input/event4": No such file or directory [ 128.589716][ T5855] udevd[5855]: Unable to EVIOCGABS device "/dev/input/event4" [ 128.589837][ T5855] udevd[5855]: Unable to EVIOCGABS device "/dev/input/event4" [ 129.514999][ T5876] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 129.515047][ T5876] uvcvideo 1-1:220.0: No valid video chain found. [ 129.515234][ T5876] usb 1-1: selecting invalid altsetting 0 [ 129.647043][ T5876] usb 1-1: selecting invalid altsetting 0 [ 129.647072][ T5876] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 129.718067][ T5876] usb 1-1: USB disconnect, device number 5 [ 130.396660][ T6016] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 130.396719][ T6016] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 130.407541][ T6016] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 130.407601][ T6016] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 133.233626][ T31] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 134.289370][ T31] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 134.289402][ T31] usb 5-1: config 0 has no interface number 0 [ 134.289449][ T31] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.289534][ T31] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 134.289564][ T31] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 134.289602][ T31] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 134.289635][ T31] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 134.289663][ T31] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.289807][ T31] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.289833][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.419635][ T31] usb 5-1: config 0 descriptor?? [ 134.447354][ T6035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.449033][ T6035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.511334][ T31] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 134.732228][ T31] usb 5-1: USB disconnect, device number 3 [ 134.815048][ T31] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 135.164311][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.245135][ T5981] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 135.330583][ T31] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 135.330617][ T31] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 135.330639][ T31] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 135.330661][ T31] usb 1-1: config 220 has no interface number 2 [ 135.330738][ T31] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 135.330777][ T31] usb 1-1: config 220 interface 0 has no altsetting 0 [ 135.330798][ T31] usb 1-1: config 220 interface 76 has no altsetting 0 [ 135.330818][ T31] usb 1-1: config 220 interface 1 has no altsetting 0 [ 135.363563][ T31] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 135.363596][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.363617][ T31] usb 1-1: Product: syz [ 135.363632][ T31] usb 1-1: Manufacturer: syz [ 135.363646][ T31] usb 1-1: SerialNumber: syz [ 135.385464][ T5869] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.433039][ T5981] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.433071][ T5981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.433094][ T5981] usb 3-1: config 1 has no interface number 0 [ 135.433145][ T5981] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.517907][ T5981] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.517947][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.517968][ T5981] usb 3-1: Product: syz [ 135.517984][ T5981] usb 3-1: Manufacturer: syz [ 135.517998][ T5981] usb 3-1: SerialNumber: syz [ 135.601591][ T5869] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 135.601622][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.601643][ T5869] usb 2-1: Product: syz [ 135.601657][ T5869] usb 2-1: Manufacturer: syz [ 135.601671][ T5869] usb 2-1: SerialNumber: syz [ 135.671792][ T5981] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 135.671845][ T5981] cdc_ncm 3-1:1.1: bind() failure [ 135.714325][ T5869] usb 2-1: config 0 descriptor?? [ 135.825829][ T31] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 135.825867][ T31] uvcvideo 1-1:220.0: No valid video chain found. [ 135.825940][ T31] usb 1-1: selecting invalid altsetting 0 [ 135.884390][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 136.138743][ T31] usb 1-1: selecting invalid altsetting 0 [ 136.138785][ T31] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 138.157256][ T5803] Bluetooth: hci5: urb ffff8880326e7300 submission failed (2) [ 138.159430][ T31] usb 1-1: USB disconnect, device number 6 [ 138.317783][ T5869] usb 3-1: USB disconnect, device number 2 [ 138.499704][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.510365][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.631838][ T6090] lo speed is unknown, defaulting to 1000 [ 140.646994][ T6090] lo speed is unknown, defaulting to 1000 [ 140.653027][ T6090] lo speed is unknown, defaulting to 1000 [ 141.054428][ T6097] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 142.313996][ T5856] lo speed is unknown, defaulting to 1000 [ 142.332656][ T6090] infiniband syz0: set active [ 142.332674][ T6090] infiniband syz0: added lo [ 142.362290][ T6090] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 142.429263][ T6090] infiniband syz0: Couldn't open port 1 [ 142.619374][ T5876] usb 2-1: USB disconnect, device number 2 [ 142.868117][ T6090] RDS/IB: syz0: added [ 142.868923][ T6090] smc: adding ib device syz0 with port count 1 [ 142.869229][ T6090] smc: ib device syz0 port 1 has no pnetid [ 142.872000][ T5856] lo speed is unknown, defaulting to 1000 [ 142.938197][ T6090] lo speed is unknown, defaulting to 1000 [ 143.264235][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.343632][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 143.610145][ T5876] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 143.610176][ T5876] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 143.610196][ T5876] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 143.610216][ T5876] usb 2-1: config 220 has no interface number 2 [ 144.414994][ T5876] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 144.415037][ T5876] usb 2-1: config 220 interface 0 has no altsetting 0 [ 144.415057][ T5876] usb 2-1: config 220 interface 76 has no altsetting 0 [ 144.415078][ T5876] usb 2-1: config 220 interface 1 has no altsetting 0 [ 144.646502][ T5876] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 144.646536][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.646558][ T5876] usb 2-1: Product: syz [ 144.646573][ T5876] usb 2-1: Manufacturer: syz [ 144.646588][ T5876] usb 2-1: SerialNumber: syz [ 144.862860][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58'. [ 145.398622][ T5876] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 145.398667][ T5876] uvcvideo 2-1:220.0: No valid video chain found. [ 145.398867][ T5876] usb 2-1: selecting invalid altsetting 0 [ 145.517888][ T5876] usb 2-1: selecting invalid altsetting 0 [ 145.517918][ T5876] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 145.581022][ T5876] usb 2-1: USB disconnect, device number 3 [ 146.058876][ T6090] lo speed is unknown, defaulting to 1000 [ 147.941755][ T6090] lo speed is unknown, defaulting to 1000 [ 149.099514][ T6090] lo speed is unknown, defaulting to 1000 [ 149.164230][ T5788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.318385][ T5788] usb 4-1: Using ep0 maxpacket: 8 [ 149.320979][ T5788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.321017][ T5788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.321058][ T5788] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 149.321089][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.421583][ T5788] usb 4-1: config 0 descriptor?? [ 150.037814][ T5788] usbhid 4-1:0.0: can't add hid device: -71 [ 150.038226][ T5788] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 150.183177][ T5788] usb 4-1: USB disconnect, device number 2 [ 150.541748][ T6090] lo speed is unknown, defaulting to 1000 [ 151.905042][ T6148] kvm: emulating exchange as write [ 153.877766][ T6171] veth0: entered promiscuous mode [ 154.351902][ T6166] veth0: left promiscuous mode [ 154.621999][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 159.304223][ T44] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 159.867404][ T44] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 159.867435][ T44] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 159.868615][ T44] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 159.868639][ T44] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 159.869816][ T44] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 159.869841][ T44] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 159.873560][ T44] usb 5-1: string descriptor 0 read error: -22 [ 159.875585][ T44] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 159.875615][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.926545][ T44] usb 5-1: rejected 3 configurations due to insufficient available bus power [ 159.926622][ T44] usb 5-1: no configuration chosen from 3 choices [ 161.432766][ T5972] usb 5-1: USB disconnect, device number 4 [ 161.934346][ T6216] veth0: entered promiscuous mode [ 162.468113][ T6210] veth0: left promiscuous mode [ 162.965762][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.89'. [ 172.834486][ T5856] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 172.997451][ T5856] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 172.997483][ T5856] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 172.999175][ T5856] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 172.999205][ T5856] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 173.097838][ T5856] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 173.097876][ T5856] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 173.101274][ T5856] usb 1-1: string descriptor 0 read error: -22 [ 173.101398][ T5856] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 173.101416][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.121362][ T5856] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 173.121438][ T5856] usb 1-1: no configuration chosen from 3 choices [ 173.773174][ T6264] veth0: entered promiscuous mode [ 174.294167][ T6257] veth0: left promiscuous mode [ 176.257594][ T5788] usb 1-1: USB disconnect, device number 7 [ 177.893588][ T6284] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.893645][ T6284] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 177.894517][ T6284] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.894567][ T6284] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 181.021682][ T5856] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 181.085548][ T6303] veth0: entered promiscuous mode [ 181.086561][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 181.186682][ T5856] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 181.186713][ T5856] usb 5-1: config 0 has no interface number 0 [ 181.187094][ T5856] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.187121][ T5856] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 181.187149][ T5856] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 181.187231][ T5856] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 181.187251][ T5856] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 181.187270][ T5856] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.187301][ T5856] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 181.187318][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.321838][ T5856] usb 5-1: config 0 descriptor?? [ 181.330317][ T6301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 181.330626][ T6301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 181.398417][ T5856] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 181.614436][ T5972] usb 5-1: USB disconnect, device number 5 [ 181.651305][ T5972] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 183.074285][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 183.397080][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.397108][ T44] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.397147][ T44] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.397172][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.367042][ T44] usb 3-1: config 0 descriptor?? [ 184.910740][ T44] kernel write not supported for file /sysvipc/sem (pid: 44 comm: kworker/1:1) [ 187.934273][ T6326] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 187.934319][ T6326] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.934505][ T6326] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 187.934527][ T6326] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 189.050302][ T5856] usb 3-1: USB disconnect, device number 3 [ 189.211733][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 190.104000][ T6341] tipc: Started in network mode [ 190.104152][ T6341] tipc: Node identity e6e71ba290a3, cluster identity 4711 [ 190.107440][ T6341] tipc: Enabled bearer , priority 0 [ 190.157545][ T6341] tipc: Resetting bearer [ 191.624769][ T6340] tipc: Disabling bearer [ 191.889082][ T5856] tipc: Node number set to 1984175010 [ 191.994199][ T5972] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 192.177054][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 192.183535][ T5972] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 192.183600][ T5972] usb 2-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.183646][ T5972] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 192.183670][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.274148][ T5972] usbhid 2-1:128.0: couldn't find an input interrupt endpoint [ 192.835638][ T6373] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 192.835666][ T6373] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 192.835783][ T6373] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 192.835803][ T6373] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 193.997529][ T6383] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 194.214479][ T5856] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.392125][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.392166][ T5856] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 195.392213][ T5856] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 195.392244][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.439273][ T5972] usb 2-1: USB disconnect, device number 4 [ 195.499244][ T5856] usb 1-1: config 0 descriptor?? [ 195.730448][ T5869] kernel write not supported for file /uinput (pid: 5869 comm: kworker/0:4) [ 196.506967][ T6404] syzkaller0: entered promiscuous mode [ 196.506986][ T6404] syzkaller0: entered allmulticast mode [ 196.535685][ T6404] tipc: Started in network mode [ 196.535709][ T6404] tipc: Node identity 165d307a64be, cluster identity 4711 [ 196.536029][ T6404] tipc: Enabled bearer , priority 0 [ 196.556331][ T6404] tipc: Resetting bearer [ 196.646897][ T6403] tipc: Resetting bearer [ 196.860991][ T31] usb 1-1: USB disconnect, device number 8 [ 196.907413][ T6403] tipc: Disabling bearer [ 197.456186][ T6417] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.456244][ T6417] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 197.457369][ T6417] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.457438][ T6417] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 199.169803][ T31] tipc: Node number set to 1927491706 [ 200.623423][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.623496][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.774185][ T5869] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.934297][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 200.941933][ T5869] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 200.941993][ T5869] usb 1-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.942046][ T5869] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 200.942071][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.152519][ T5869] usbhid 1-1:128.0: couldn't find an input interrupt endpoint [ 201.319041][ T5788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 201.931182][ T5788] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 201.931216][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.931238][ T5788] usb 2-1: Product: syz [ 201.931254][ T5788] usb 2-1: Manufacturer: syz [ 201.931270][ T5788] usb 2-1: SerialNumber: syz [ 201.980966][ T5788] usb 2-1: config 0 descriptor?? [ 202.121534][ T5803] Bluetooth: hci5: urb ffff8880336d7600 submission failed (2) [ 202.138582][ T6448] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 202.705498][ T6453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.155'. [ 203.557038][ T5788] usb 1-1: USB disconnect, device number 9 [ 205.346505][ T6470] 9p: Bad value for 'wfdno' [ 205.577661][ T6473] syzkaller0: entered promiscuous mode [ 205.577692][ T6473] syzkaller0: entered allmulticast mode [ 205.612387][ T6473] tipc: Started in network mode [ 205.612412][ T6473] tipc: Node identity cacc5b0ca2b9, cluster identity 4711 [ 205.629074][ T6473] tipc: Enabled bearer , priority 0 [ 205.701539][ T6473] tipc: Resetting bearer [ 205.789121][ T6472] tipc: Resetting bearer [ 206.025270][ T6472] tipc: Disabling bearer [ 206.768524][ T6490] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 207.150520][ T6493] 8021q: VLANs not supported on lo [ 207.230116][ T6491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.644414][ T5856] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 208.789510][ T5876] usb 2-1: USB disconnect, device number 5 [ 208.796293][ T5856] usb 3-1: not running at top speed; connect to a high speed hub [ 208.797602][ T5856] usb 3-1: config 10 has an invalid interface number: 247 but max is 0 [ 208.797621][ T5856] usb 3-1: config 10 has no interface number 0 [ 208.797644][ T5856] usb 3-1: config 10 interface 247 has no altsetting 0 [ 208.799935][ T5856] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0150, bcdDevice= 4.86 [ 208.799956][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.799971][ T5856] usb 3-1: Product: syz [ 208.799981][ T5856] usb 3-1: Manufacturer: syz [ 208.799992][ T5856] usb 3-1: SerialNumber: syz [ 209.581162][ T6497] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=448 (896 ns) > initial count (12 ns). Using initial count to start timer. [ 209.694332][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 209.844480][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 209.917177][ T5877] usb 2-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.917554][ T5877] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 209.918623][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.186430][ T5877] usbhid 2-1:128.0: couldn't find an input interrupt endpoint [ 210.961916][ T5856] ftdi_sio 3-1:10.247: FTDI USB Serial Device converter detected [ 211.014445][ T5856] ftdi_sio ttyUSB0: unknown device type: 0x486 [ 211.130827][ T5856] usb 3-1: USB disconnect, device number 4 [ 211.191861][ T5856] ftdi_sio 3-1:10.247: device disconnected [ 211.728259][ T6509] 9p: Bad value for 'wfdno' [ 212.587048][ T5884] usb 2-1: USB disconnect, device number 6 [ 214.119280][ T6523] syzkaller0: entered promiscuous mode [ 214.119307][ T6523] syzkaller0: entered allmulticast mode [ 214.125465][ T6523] tipc: Started in network mode [ 214.125499][ T6523] tipc: Node identity be2dfdb0cb35, cluster identity 4711 [ 214.126286][ T6523] tipc: Enabled bearer , priority 0 [ 214.231617][ T6523] tipc: Resetting bearer [ 214.273238][ T6522] tipc: Resetting bearer [ 214.531543][ T6522] tipc: Disabling bearer [ 214.674347][ T5788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 215.677798][ T5788] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 215.677832][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.677854][ T5788] usb 4-1: Product: syz [ 215.677869][ T5788] usb 4-1: Manufacturer: syz [ 215.677884][ T5788] usb 4-1: SerialNumber: syz [ 215.723520][ T5788] usb 4-1: config 0 descriptor?? [ 215.750953][ T5856] tipc: Node number set to 1964572080 [ 215.798728][ T5803] Bluetooth: hci5: urb ffff8880336e4c00 submission failed (2) [ 217.332664][ T6554] netlink: 56 bytes leftover after parsing attributes in process `syz.3.182'. [ 217.800688][ T5972] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 217.946776][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 217.966566][ T5972] usb 2-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.966621][ T5972] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 217.966647][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.071823][ T5972] usbhid 2-1:128.0: couldn't find an input interrupt endpoint [ 218.231632][ T6560] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.993162][ T5856] usb 2-1: USB disconnect, device number 7 [ 222.144764][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 222.922754][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.922798][ T31] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 222.922815][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.976386][ T31] usb 1-1: config 0 descriptor?? [ 223.009786][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 223.587276][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 223.620620][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 223.621558][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 223.622259][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 223.622961][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 223.623721][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 224.025147][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 224.026241][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 224.027292][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 224.028389][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 224.030215][ T31] pwc: recv_control_msg error -32 req 02 val 2400 [ 224.317258][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 224.327826][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 224.341880][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 224.354243][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.368872][ T5788] usb 4-1: USB disconnect, device number 3 [ 224.383333][ T31] pwc: Registered as video103. [ 224.392397][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 224.552365][ T31] usb 1-1: USB disconnect, device number 10 [ 227.134303][ T5788] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 227.284207][ T5788] usb 2-1: Using ep0 maxpacket: 16 [ 227.288450][ T5788] usb 2-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.288584][ T5788] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 227.288612][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.531497][ T5788] usbhid 2-1:128.0: couldn't find an input interrupt endpoint [ 227.551211][ T6626] 9p: Bad value for 'rfdno' [ 227.645460][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 227.645600][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 227.645694][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 227.645721][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 228.324229][ T5856] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 228.769657][ T5856] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 228.769689][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.769711][ T5856] usb 4-1: Product: syz [ 228.769727][ T5856] usb 4-1: Manufacturer: syz [ 228.769742][ T5856] usb 4-1: SerialNumber: syz [ 228.788774][ T5856] usb 4-1: config 0 descriptor?? [ 228.882193][ T5798] Bluetooth: hci5: urb ffff888032a53900 submission failed (2) [ 231.234276][ T5972] usb 2-1: USB disconnect, device number 8 [ 232.038906][ T5856] usb 4-1: USB disconnect, device number 4 [ 233.549279][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 235.024200][ T5972] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 235.174299][ T5972] usb 1-1: device descriptor read/64, error -71 [ 235.184584][ T5788] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 235.402340][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 235.504155][ T5788] usb 5-1: Using ep0 maxpacket: 16 [ 235.592137][ T5788] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.593189][ T5788] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 235.593779][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.784521][ T5972] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 235.973379][ T5788] usbhid 5-1:128.0: couldn't find an input interrupt endpoint [ 235.973475][ T44] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 235.973502][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.973522][ T44] usb 4-1: Product: syz [ 235.973537][ T44] usb 4-1: Manufacturer: syz [ 235.973552][ T44] usb 4-1: SerialNumber: syz [ 235.975606][ T5972] usb 1-1: device descriptor read/64, error -71 [ 236.028208][ T44] usb 4-1: config 0 descriptor?? [ 236.084501][ T5972] usb usb1-port1: attempt power cycle [ 236.108833][ T5798] Bluetooth: hci5: urb ffff888029bf1700 submission failed (2) [ 236.814210][ T5972] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 236.835375][ T5972] usb 1-1: device descriptor read/8, error -71 [ 237.066092][ T6706] netlink: 56 bytes leftover after parsing attributes in process `syz.3.229'. [ 238.399436][ T6725] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 238.500634][ T44] usb 5-1: USB disconnect, device number 6 [ 239.994727][ T5856] usb 4-1: USB disconnect, device number 5 [ 240.040786][ T6733] 9p: Bad value for 'rfdno' [ 240.348230][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 240.643415][ T6740] process 'syz.3.240' launched './file2' with NULL argv: empty string added [ 241.587551][ T6740] vivid-007: disconnect [ 241.812524][ T6734] vivid-007: reconnect [ 243.557547][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 243.584262][ T5788] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 243.714238][ T5788] usb 1-1: device descriptor read/64, error -71 [ 243.895729][ T5972] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 243.954285][ T5788] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 244.054154][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 244.057559][ T5972] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.057593][ T5972] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 244.057610][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.104383][ T5788] usb 1-1: device descriptor read/64, error -71 [ 244.129546][ T5972] usbhid 2-1:128.0: couldn't find an input interrupt endpoint [ 244.214485][ T5788] usb usb1-port1: attempt power cycle [ 244.254190][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 244.390523][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 244.564172][ T5788] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 244.564395][ T5972] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 244.589201][ T5788] usb 1-1: device descriptor read/8, error -71 [ 244.606773][ T44] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 244.606804][ T44] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 244.606824][ T44] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 244.606845][ T44] usb 3-1: config 220 has no interface number 2 [ 244.606927][ T44] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 244.606958][ T44] usb 3-1: config 220 interface 0 has no altsetting 0 [ 244.606978][ T44] usb 3-1: config 220 interface 76 has no altsetting 0 [ 244.606996][ T44] usb 3-1: config 220 interface 1 has no altsetting 0 [ 244.610561][ T44] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 244.610647][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.610703][ T44] usb 3-1: Product: syz [ 244.610746][ T44] usb 3-1: Manufacturer: syz [ 244.610789][ T44] usb 3-1: SerialNumber: syz [ 245.453702][ T44] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 245.453740][ T44] uvcvideo 3-1:220.0: No valid video chain found. [ 245.453806][ T44] usb 3-1: selecting invalid altsetting 0 [ 245.499388][ T44] usb 3-1: selecting invalid altsetting 0 [ 245.499433][ T44] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 245.514924][ T44] usb 3-1: USB disconnect, device number 5 [ 245.717151][ T5788] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 245.735356][ T5788] usb 1-1: device descriptor read/8, error -71 [ 245.735636][ T5972] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 245.735670][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.735690][ T5972] usb 5-1: Product: syz [ 245.735705][ T5972] usb 5-1: Manufacturer: syz [ 245.735719][ T5972] usb 5-1: SerialNumber: syz [ 245.784863][ T5972] usb 5-1: config 0 descriptor?? [ 245.830802][ T61] Bluetooth: hci5: urb ffff8880334c6800 submission failed (2) [ 245.844527][ T5788] usb usb1-port1: unable to enumerate USB device [ 246.253628][ T6784] netlink: 56 bytes leftover after parsing attributes in process `syz.4.251'. [ 246.374884][ T5989] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 246.534176][ T5989] usb 1-1: Using ep0 maxpacket: 32 [ 246.539484][ T5989] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 246.539519][ T5989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 246.539554][ T5989] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 246.539579][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.621131][ T5989] usb 1-1: config 0 descriptor?? [ 247.606081][ T5869] usb 2-1: USB disconnect, device number 9 [ 249.219266][ T5989] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 249.219320][ T5989] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 249.219348][ T5989] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 249.219376][ T5989] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 249.219403][ T5989] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 249.558776][ T5989] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 250.418558][ T5989] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-110) [ 250.464495][ T5989] corsair-psu 0003:1B1C:1C09.0001: probe with driver corsair-psu failed with error -110 [ 250.511899][ T5989] usb 1-1: USB disconnect, device number 19 [ 251.357872][ T6804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'. [ 253.074229][ T5876] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 253.186609][ T5877] usb 5-1: USB disconnect, device number 7 [ 253.224414][ T5876] usb 1-1: device descriptor read/64, error -71 [ 253.734148][ T5876] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 253.914514][ T5876] usb 1-1: device descriptor read/64, error -71 [ 254.024680][ T5876] usb usb1-port1: attempt power cycle [ 254.395520][ T5876] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 254.520967][ T5876] usb 1-1: device descriptor read/8, error -71 [ 255.064365][ T5876] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 255.536481][ T5876] usb 1-1: device descriptor read/8, error -71 [ 255.647160][ T5876] usb usb1-port1: unable to enumerate USB device [ 255.709148][ T6836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'. [ 256.344511][ T6845] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 258.394386][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 258.691857][ T5876] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 258.691881][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.691896][ T5876] usb 5-1: Product: syz [ 258.691906][ T5876] usb 5-1: Manufacturer: syz [ 258.691917][ T5876] usb 5-1: SerialNumber: syz [ 258.821348][ T5876] usb 5-1: config 0 descriptor?? [ 258.970638][ T61] Bluetooth: hci5: urb ffff888058ba5f00 submission failed (2) [ 259.228635][ T6875] netlink: 56 bytes leftover after parsing attributes in process `syz.4.278'. [ 260.018824][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 260.187316][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.187343][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.188827][ T44] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 260.188855][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 260.188875][ T44] usb 3-1: SerialNumber: syz [ 260.478258][ T44] usb 3-1: 0:2 : does not exist [ 260.478419][ T44] usb 3-1: unit 255 not found! [ 260.671980][ T44] usb 3-1: USB disconnect, device number 6 [ 260.919214][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.016455][ T6883] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 261.016787][ T6883] block device autoloading is deprecated and will be removed. [ 261.321430][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.321582][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.235233][ T5876] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 262.312141][ T6893] overlayfs: missing 'lowerdir' [ 262.394150][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 262.412357][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.412411][ T5876] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 262.467973][ T5876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.477407][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.477435][ T5876] usb 4-1: Product: syz [ 262.477450][ T5876] usb 4-1: Manufacturer: syz [ 262.477465][ T5876] usb 4-1: SerialNumber: syz [ 262.776715][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.801665][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.002460][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.003036][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.360470][ T5876] cdc_ncm 4-1:1.0: bind() failure [ 266.443404][ T5876] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 266.443455][ T5876] cdc_ncm 4-1:1.1: bind() failure [ 266.539116][ T5876] usb 4-1: USB disconnect, device number 6 [ 267.328529][ T5856] usb 5-1: USB disconnect, device number 8 [ 267.929378][ T6931] overlayfs: missing 'lowerdir' [ 268.186619][ T6942] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 268.186671][ T6942] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 268.187402][ T6942] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 268.187449][ T6942] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 269.364265][ T5856] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 269.514252][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 269.516549][ T5856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.516603][ T5856] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 269.536204][ T5856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.536238][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.542134][ T5856] usb 2-1: Product: syz [ 269.542150][ T5856] usb 2-1: Manufacturer: syz [ 269.542161][ T5856] usb 2-1: SerialNumber: syz [ 270.501432][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.505327][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.538153][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.538744][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.669313][ T5856] cdc_ncm 2-1:1.0: bind() failure [ 270.733266][ T5856] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 270.733301][ T5856] cdc_ncm 2-1:1.1: bind() failure [ 270.764845][ T5856] usb 2-1: USB disconnect, device number 10 [ 270.854436][ T5876] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 270.916241][ T6960] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 271.031919][ T5876] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 271.031956][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.031986][ T5876] usb 4-1: Product: syz [ 271.031997][ T5876] usb 4-1: Manufacturer: syz [ 271.032008][ T5876] usb 4-1: SerialNumber: syz [ 271.063195][ T5876] usb 4-1: config 0 descriptor?? [ 271.117548][ T61] Bluetooth: hci5: urb ffff8880349eed00 submission failed (2) [ 271.461947][ T6965] netlink: 56 bytes leftover after parsing attributes in process `syz.3.303'. [ 279.917203][ T31] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 280.627448][ T31] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 280.627525][ T31] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 280.627554][ T31] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.686100][ T31] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 280.686147][ T31] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 280.686172][ T31] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.687126][ T31] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 280.687164][ T31] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 280.687183][ T31] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.774230][ T31] usb 3-1: string descriptor 0 read error: -22 [ 280.774386][ T31] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 280.774411][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.861660][ T31] adutux 3-1:168.0: interrupt endpoints not found [ 282.084672][ T6981] netlink: 596 bytes leftover after parsing attributes in process `syz.2.310'. [ 282.964163][ T5856] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 283.134893][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 283.137616][ T5856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.137677][ T5856] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 283.546527][ T5856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.546561][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.546583][ T5856] usb 2-1: Product: syz [ 283.546606][ T5856] usb 2-1: Manufacturer: syz [ 283.546622][ T5856] usb 2-1: SerialNumber: syz [ 284.058421][ T5876] usb 3-1: USB disconnect, device number 7 [ 284.119703][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.149644][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.230811][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.232917][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.280531][ T5856] cdc_ncm 2-1:1.0: bind() failure [ 284.304822][ T5856] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 284.304873][ T5856] cdc_ncm 2-1:1.1: bind() failure [ 284.328720][ T5856] usb 2-1: USB disconnect, device number 11 [ 284.408652][ T7009] overlayfs: failed to resolve './file1': -2 [ 285.014447][ T5856] usb 4-1: USB disconnect, device number 7 [ 290.872868][ T7060] overlayfs: failed to resolve './file1': -2 [ 291.604131][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 291.764707][ T31] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 291.764741][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.764762][ T31] usb 3-1: Product: syz [ 291.764777][ T31] usb 3-1: Manufacturer: syz [ 291.764792][ T31] usb 3-1: SerialNumber: syz [ 291.825904][ T31] usb 3-1: config 0 descriptor?? [ 291.883754][ T61] Bluetooth: hci5: urb ffff8880339f9900 submission failed (2) [ 291.996451][ T5869] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 292.154146][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 292.160406][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.160443][ T5869] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 292.235784][ T5869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.235817][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.235837][ T5869] usb 1-1: Product: syz [ 292.235852][ T5869] usb 1-1: Manufacturer: syz [ 292.235866][ T5869] usb 1-1: SerialNumber: syz [ 292.550835][ T7077] netlink: 56 bytes leftover after parsing attributes in process `syz.2.332'. [ 292.900199][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.900747][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.953724][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.965121][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.040926][ T5869] cdc_ncm 1-1:1.0: bind() failure [ 293.062974][ T5869] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 293.063007][ T5869] cdc_ncm 1-1:1.1: bind() failure [ 293.129928][ T5869] usb 1-1: USB disconnect, device number 24 [ 297.161093][ T7108] syzkaller0: entered promiscuous mode [ 297.161113][ T7108] syzkaller0: entered allmulticast mode [ 298.508816][ T5869] usb 3-1: USB disconnect, device number 8 [ 299.634474][ T5869] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 299.984334][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 300.627190][ T5869] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.627255][ T5869] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 300.630482][ T5869] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.630515][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.630539][ T5869] usb 3-1: Product: syz [ 300.630556][ T5869] usb 3-1: Manufacturer: syz [ 300.630573][ T5869] usb 3-1: SerialNumber: syz [ 300.969935][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.971042][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.112992][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.125311][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.601341][ T5869] cdc_ncm 3-1:1.0: bind() failure [ 301.661769][ T5869] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 301.661822][ T5869] cdc_ncm 3-1:1.1: bind() failure [ 301.701531][ T5869] usb 3-1: USB disconnect, device number 9 [ 302.237627][ T7144] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 308.734285][ T5869] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 308.872819][ T7187] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 308.924227][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 308.941086][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.941143][ T5869] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 308.943815][ T5869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.943843][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.943863][ T5869] usb 1-1: Product: syz [ 308.943879][ T5869] usb 1-1: Manufacturer: syz [ 308.943894][ T5869] usb 1-1: SerialNumber: syz [ 309.226558][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.227167][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.237318][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.238275][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.272428][ T5869] cdc_ncm 1-1:1.0: bind() failure [ 309.302000][ T5869] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 309.302051][ T5869] cdc_ncm 1-1:1.1: bind() failure [ 309.327021][ T5869] usb 1-1: USB disconnect, device number 25 [ 313.874195][ T5869] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 314.042798][ T5869] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 314.042830][ T5869] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 314.042853][ T5869] usb 5-1: config 220 has no interface number 2 [ 314.042938][ T5869] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 314.042969][ T5869] usb 5-1: config 220 interface 0 has no altsetting 0 [ 314.042988][ T5869] usb 5-1: config 220 interface 76 has no altsetting 0 [ 314.043007][ T5869] usb 5-1: config 220 interface 1 has no altsetting 0 [ 314.143750][ T5869] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 314.143785][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.143805][ T5869] usb 5-1: Product: syz [ 314.143820][ T5869] usb 5-1: Manufacturer: syz [ 314.143834][ T5869] usb 5-1: SerialNumber: syz [ 314.333248][ T7228] 9p: Bad value for 'rfdno' [ 314.519505][ T5869] usb 5-1: selecting invalid altsetting 0 [ 314.540346][ T5869] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 314.540386][ T5869] uvcvideo 5-1:220.0: No valid video chain found. [ 314.592170][ T5869] usb 5-1: selecting invalid altsetting 0 [ 314.592219][ T5869] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 314.641147][ T5869] usb 5-1: USB disconnect, device number 9 [ 316.234121][ T5856] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 316.814178][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 316.816998][ T5856] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.817052][ T5856] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 316.822010][ T5856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.822047][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.822070][ T5856] usb 1-1: Product: syz [ 316.822086][ T5856] usb 1-1: Manufacturer: syz [ 316.822102][ T5856] usb 1-1: SerialNumber: syz [ 317.118825][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.121410][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.163581][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.175014][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.318639][ T5856] cdc_ncm 1-1:1.0: bind() failure [ 317.370998][ T5856] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 317.371050][ T5856] cdc_ncm 1-1:1.1: bind() failure [ 317.445023][ T5856] usb 1-1: USB disconnect, device number 26 [ 317.712112][ T7261] 9p: Bad value for 'rfdno' [ 318.707423][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 319.765562][ T5884] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 319.939521][ T5884] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 319.939556][ T5884] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 319.939571][ T5884] usb 1-1: config 220 has no interface number 2 [ 319.939624][ T5884] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 319.939644][ T5884] usb 1-1: config 220 interface 0 has no altsetting 0 [ 319.939658][ T5884] usb 1-1: config 220 interface 76 has no altsetting 0 [ 319.939671][ T5884] usb 1-1: config 220 interface 1 has no altsetting 0 [ 319.954450][ T5884] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 319.954545][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.954601][ T5884] usb 1-1: Product: syz [ 319.954643][ T5884] usb 1-1: Manufacturer: syz [ 319.954685][ T5884] usb 1-1: SerialNumber: syz [ 320.404073][ T5884] usb 1-1: selecting invalid altsetting 0 [ 320.408451][ T5884] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 320.408487][ T5884] uvcvideo 1-1:220.0: No valid video chain found. [ 320.483125][ T5884] usb 1-1: selecting invalid altsetting 0 [ 320.483155][ T5884] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 320.543677][ T5884] usb 1-1: USB disconnect, device number 27 [ 322.064102][ T7293] syzkaller0: entered promiscuous mode [ 322.064133][ T7293] syzkaller0: entered allmulticast mode [ 322.124178][ T5788] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 322.303476][ T5788] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.303505][ T5788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.361667][ T5788] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 322.361698][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 322.361715][ T5788] usb 5-1: SerialNumber: syz [ 322.657874][ T5788] usb 5-1: 0:2 : does not exist [ 322.657957][ T5788] usb 5-1: unit 5: unexpected type 0x03 [ 322.657989][ T5788] usb 5-1: unit 255 not found! [ 322.767710][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.767804][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.809249][ T5788] usb 5-1: USB disconnect, device number 10 [ 322.877731][ T7302] 9p: Bad value for 'wfdno' [ 323.035412][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.024122][ T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 324.187858][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 324.191876][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.191932][ T44] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 324.224198][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.224232][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.224253][ T44] usb 4-1: Product: syz [ 324.224267][ T44] usb 4-1: Manufacturer: syz [ 324.224280][ T44] usb 4-1: SerialNumber: syz [ 324.563933][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.575741][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.785607][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.786413][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.488121][ T5869] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 325.648577][ T5869] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 325.648610][ T5869] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 325.648632][ T5869] usb 5-1: config 220 has no interface number 2 [ 325.648706][ T5869] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 325.648736][ T5869] usb 5-1: config 220 interface 0 has no altsetting 0 [ 325.648755][ T5869] usb 5-1: config 220 interface 76 has no altsetting 0 [ 325.648773][ T5869] usb 5-1: config 220 interface 1 has no altsetting 0 [ 325.651809][ T5869] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 325.651838][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.651859][ T5869] usb 5-1: Product: syz [ 325.651876][ T5869] usb 5-1: Manufacturer: syz [ 325.651890][ T5869] usb 5-1: SerialNumber: syz [ 325.690617][ T44] cdc_ncm 4-1:1.0: bind() failure [ 326.006266][ T44] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 326.006323][ T44] cdc_ncm 4-1:1.1: bind() failure [ 326.125396][ T5869] usb 5-1: selecting invalid altsetting 0 [ 326.146244][ T5869] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 326.146280][ T5869] uvcvideo 5-1:220.0: No valid video chain found. [ 326.154096][ T5877] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 326.160279][ T5869] usb 5-1: selecting invalid altsetting 0 [ 326.160326][ T5869] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 326.184391][ T44] usb 4-1: USB disconnect, device number 8 [ 326.231786][ T5869] usb 5-1: USB disconnect, device number 11 [ 326.324231][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 326.340301][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.340336][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.340378][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 326.340402][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.520961][ T5877] usb 2-1: config 0 descriptor?? [ 326.530015][ T5877] hub 2-1:0.0: USB hub found [ 327.244252][ T5877] hub 2-1:0.0: 1 port detected [ 328.172056][ T5877] hub 2-1:0.0: activate --> -90 [ 328.316164][ T7357] fuse: Bad value for 'fd' [ 328.376495][ T5884] usb 2-1: USB disconnect, device number 12 [ 328.376625][ T5877] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 328.421817][ T7356] 9p: Bad value for 'wfdno' [ 328.463234][ T7357] mkiss: ax0: crc mode is auto. [ 328.531627][ T7362] netlink: 180 bytes leftover after parsing attributes in process `syz.2.417'. [ 328.722359][ T7364] syzkaller0: entered promiscuous mode [ 328.722388][ T7364] syzkaller0: entered allmulticast mode [ 330.385134][ T5788] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 331.124955][ T5788] usb 1-1: Using ep0 maxpacket: 8 [ 331.490677][ T5788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.490737][ T5788] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 331.587474][ T5788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.587509][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.587531][ T5788] usb 1-1: Product: syz [ 331.587547][ T5788] usb 1-1: Manufacturer: syz [ 331.587562][ T5788] usb 1-1: SerialNumber: syz [ 331.878186][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.878816][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.891067][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.891614][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.969950][ T5788] cdc_ncm 1-1:1.0: bind() failure [ 332.005026][ T5788] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 332.005091][ T5788] cdc_ncm 1-1:1.1: bind() failure [ 332.037440][ T5788] usb 1-1: USB disconnect, device number 28 [ 332.344549][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 332.764093][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 332.767612][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.767658][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.767699][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.767724][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.826042][ T10] usb 2-1: config 0 descriptor?? [ 332.862581][ T10] hub 2-1:0.0: USB hub found [ 333.057254][ T10] hub 2-1:0.0: 1 port detected [ 334.547512][ T5869] hub 2-1:0.0: activate --> -90 [ 334.752976][ T5869] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 334.761650][ T5869] usb 2-1: USB disconnect, device number 13 [ 336.876711][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 337.074275][ T5869] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 338.219935][ T5877] ------------[ cut here ]------------ [ 338.219955][ T5877] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 338.219979][ T5877] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#1: kworker/1:4/5877 [ 338.220039][ T5877] Modules linked in: [ 338.220081][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.220110][ T5877] Tainted: [L]=SOFTLOCKUP [ 338.220118][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 338.220132][ T5877] Workqueue: events drm_fb_helper_damage_work [ 338.220170][ T5877] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 338.220205][ T5877] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0f b0 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 338.220225][ T5877] RSP: 0018:ffffc90005e37860 EFLAGS: 00010246 [ 338.220244][ T5877] RAX: 1ffff110282f1400 RBX: ffffffff8f52a070 RCX: 0000000000000000 [ 338.220260][ T5877] RDX: ffffffff8b9eb1e0 RSI: ffffffff8ba06f40 RDI: ffffffff8f52a070 [ 338.220283][ T5877] RBP: ffffc90005e37948 R08: 0000000000000000 R09: 0000000000000000 [ 338.220297][ T5877] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffffffff8ba06f40 [ 338.220314][ T5877] R13: ffff88814178a000 R14: 1ffff92000bc6f10 R15: ffffffff8b9eb1e0 [ 338.220331][ T5877] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 338.220349][ T5877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.220365][ T5877] CR2: 000000110c44a3cb CR3: 0000000011b4c000 CR4: 00000000003526f0 [ 338.220384][ T5877] Call Trace: [ 338.220393][ T5877] [ 338.220413][ T5877] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 338.220443][ T5877] ? rt_spin_unlock+0x14f/0x200 [ 338.220469][ T5877] ? __pfx_autoremove_wake_function+0x10/0x10 [ 338.220495][ T5877] ? rt_spin_unlock+0x160/0x200 [ 338.220523][ T5877] ? drm_vblank_get+0x147/0x260 [ 338.220562][ T5877] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 338.220594][ T5877] drm_fb_helper_damage_work+0x131/0x6f0 [ 338.220630][ T5877] ? process_scheduled_works+0xa0f/0x17a0 [ 338.220658][ T5877] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 338.220695][ T5877] ? process_scheduled_works+0xa0f/0x17a0 [ 338.220716][ T5877] ? process_scheduled_works+0xa0f/0x17a0 [ 338.220741][ T5877] process_scheduled_works+0xaec/0x17a0 [ 338.220796][ T5877] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.220817][ T5877] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.220854][ T5877] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.220888][ T5877] ? schedule+0x90/0x360 [ 338.220927][ T5877] worker_thread+0xda6/0x1360 [ 338.220971][ T5877] ? __kthread_parkme+0x19c/0x1f0 [ 338.221003][ T5877] kthread+0x726/0x8b0 [ 338.221042][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 338.221065][ T5877] ? __pfx_kthread+0x10/0x10 [ 338.221089][ T5877] ? rt_spin_unlock+0x14f/0x200 [ 338.221119][ T5877] ? rt_spin_unlock+0x160/0x200 [ 338.221141][ T5877] ? __pfx_kthread+0x10/0x10 [ 338.221172][ T5877] ret_from_fork+0x51b/0xa40 [ 338.221199][ T5877] ? __pfx_ret_from_fork+0x10/0x10 [ 338.221221][ T5877] ? __switch_to+0xc82/0x1410 [ 338.221277][ T5877] ? __pfx_kthread+0x10/0x10 [ 338.221308][ T5877] ret_from_fork_asm+0x1a/0x30 [ 338.221361][ T5877] [ 338.221373][ T5877] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.221391][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.221420][ T5877] Tainted: [L]=SOFTLOCKUP [ 338.221428][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 338.221442][ T5877] Workqueue: events drm_fb_helper_damage_work [ 338.221473][ T5877] Call Trace: [ 338.221481][ T5877] [ 338.221490][ T5877] vpanic+0x1e0/0x670 [ 338.221525][ T5877] panic+0xc5/0xd0 [ 338.221555][ T5877] ? __pfx_panic+0x10/0x10 [ 338.221596][ T5877] ? ret_from_fork_asm+0x1a/0x30 [ 338.221636][ T5877] __warn+0x315/0x4a0 [ 338.221665][ T5877] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 338.221697][ T5877] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 338.221730][ T5877] __report_bug+0x29a/0x540 [ 338.221767][ T5877] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 338.221798][ T5877] ? __pfx___report_bug+0x10/0x10 [ 338.221851][ T5877] report_bug_entry+0x19a/0x290 [ 338.221883][ T5877] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 338.221911][ T5877] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 338.221942][ T5877] handle_bug+0xca/0x200 [ 338.221977][ T5877] exc_invalid_op+0x1a/0x50 [ 338.222011][ T5877] asm_exc_invalid_op+0x1a/0x20 [ 338.222033][ T5877] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 338.222064][ T5877] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0f b0 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 338.222083][ T5877] RSP: 0018:ffffc90005e37860 EFLAGS: 00010246 [ 338.222101][ T5877] RAX: 1ffff110282f1400 RBX: ffffffff8f52a070 RCX: 0000000000000000 [ 338.222117][ T5877] RDX: ffffffff8b9eb1e0 RSI: ffffffff8ba06f40 RDI: ffffffff8f52a070 [ 338.222134][ T5877] RBP: ffffc90005e37948 R08: 0000000000000000 R09: 0000000000000000 [ 338.222148][ T5877] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffffffff8ba06f40 [ 338.222165][ T5877] R13: ffff88814178a000 R14: 1ffff92000bc6f10 R15: ffffffff8b9eb1e0 [ 338.222206][ T5877] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 338.222235][ T5877] ? rt_spin_unlock+0x14f/0x200 [ 338.222260][ T5877] ? __pfx_autoremove_wake_function+0x10/0x10 [ 338.222293][ T5877] ? rt_spin_unlock+0x160/0x200 [ 338.222320][ T5877] ? drm_vblank_get+0x147/0x260 [ 338.222353][ T5877] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 338.222383][ T5877] drm_fb_helper_damage_work+0x131/0x6f0 [ 338.222417][ T5877] ? process_scheduled_works+0xa0f/0x17a0 [ 338.222444][ T5877] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 338.222483][ T5877] ? process_scheduled_works+0xa0f/0x17a0 [ 338.222504][ T5877] ? process_scheduled_works+0xa0f/0x17a0 [ 338.222529][ T5877] process_scheduled_works+0xaec/0x17a0 [ 338.222584][ T5877] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.222605][ T5877] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.222642][ T5877] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.222675][ T5877] ? schedule+0x90/0x360 [ 338.222714][ T5877] worker_thread+0xda6/0x1360 [ 338.222756][ T5877] ? __kthread_parkme+0x19c/0x1f0 [ 338.222788][ T5877] kthread+0x726/0x8b0 [ 338.222819][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 338.222841][ T5877] ? __pfx_kthread+0x10/0x10 [ 338.222867][ T5877] ? rt_spin_unlock+0x14f/0x200 [ 338.222896][ T5877] ? rt_spin_unlock+0x160/0x200 [ 338.222918][ T5877] ? __pfx_kthread+0x10/0x10 [ 338.222946][ T5877] ret_from_fork+0x51b/0xa40 [ 338.222973][ T5877] ? __pfx_ret_from_fork+0x10/0x10 [ 338.222996][ T5877] ? __switch_to+0xc82/0x1410 [ 338.223033][ T5877] ? __pfx_kthread+0x10/0x10 [ 338.223063][ T5877] ret_from_fork_asm+0x1a/0x30 [ 338.223114][ T5877] [ 338.223685][ T5877] Kernel Offset: disabled