last executing test programs: 25.952718111s ago: executing program 1 (id=194): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8954, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x80, 0x0, 0xe, 0x7fff7ffc}, {0x1ffc, 0xba, 0x7f, 0x497d5cd3}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42a301) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) inotify_init() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40408c1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 22.672219061s ago: executing program 1 (id=198): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xebec93e830f96115}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 21.443445426s ago: executing program 1 (id=200): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8954, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x80, 0x0, 0xe, 0x7fff7ffc}, {0x1ffc, 0xba, 0x7f, 0x497d5cd3}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42a301) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) r2 = inotify_init() readv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40408c1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 20.387391667s ago: executing program 2 (id=202): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2062) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)={0x0, 0xe00, 0xa5}) 19.405014562s ago: executing program 1 (id=204): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2062) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)={0x0, 0xe00, 0xa5}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) 19.295894554s ago: executing program 0 (id=205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000940)=[@code={0xa, 0x60, {"0f20d835080000000f22d8b9800000c00f3235001000000f30c4a1cb7dfe0f01c3c4c2cd97830e500000c744240032010000c744240200280000ff1c24410f9eb878000000640f07660f6f2b41d9fa"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0xb0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.140102037s ago: executing program 3 (id=206): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 17.912077044s ago: executing program 0 (id=208): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,use']) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) 14.992027695s ago: executing program 3 (id=209): timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x149002, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(0xffffffffffffffff) inotify_init1(0x800) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x24048000) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 14.196212524s ago: executing program 1 (id=211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000191c0)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019180)={&(0x7f0000019140)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 14.065884344s ago: executing program 0 (id=212): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @generic={0x0, 0x2}]}}}}}}, 0x3e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13.810957629s ago: executing program 3 (id=213): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000100)='=', 0x1, 0x4fed3) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100e0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 13.740226071s ago: executing program 4 (id=214): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8954, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x80, 0x0, 0xe, 0x7fff7ffc}, {0x1ffc, 0xba, 0x7f, 0x497d5cd3}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42a301) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)=0x0) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff00000007, "d62e980d9e9f39cf", "20e460999f426180a8c27a30ea181179631de8f794d20352346f8f00", 0x7f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 13.464117098s ago: executing program 0 (id=215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) mbind(&(0x7f0000498000/0x2000)=nil, 0x2000, 0x4, 0x0, 0xfffffffa, 0xf) mmap(&(0x7f000003a000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x100000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)=0x401) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000002c0)={@local, 0x2}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000480)={0x53, 0xffffffffffffffff, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000200)="0a823ac6aeb7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000280)=[{r4}], 0x1, 0x9e) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) epoll_create1(0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80441, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @private1={0xfc, 0x1, '\x00', 0x4}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x20000000) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff, 0x6}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x3c, 0x2, 0xd, 0x35f}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff23, 0x2, 0x5, 0x8}, 0x0, 0x0) 12.581540899s ago: executing program 2 (id=216): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.420757146s ago: executing program 3 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x90, 0x7f, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.398151912s ago: executing program 4 (id=218): timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x149002, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(0xffffffffffffffff) inotify_init1(0x800) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) socket(0x2b, 0x80801, 0x1) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) 11.050228793s ago: executing program 4 (id=219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000498000/0x2000)=nil, 0x2000, 0x4, 0x0, 0xfffffffa, 0xf) mmap(&(0x7f000003a000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x100000) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)=0x401) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000002c0)={@local, 0x2}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000480)={0x53, 0xffffffffffffffff, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000200)="0a823ac6aeb7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000280)=[{r4}], 0x1, 0x9e) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) epoll_create1(0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80441, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @private1={0xfc, 0x1, '\x00', 0x4}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x20000000) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff, 0x6}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x3c, 0x2, 0xd, 0x35f}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff23, 0x2, 0x5, 0x8}, 0x0, 0x0) 8.536295874s ago: executing program 2 (id=220): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2062) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0x0, 0xe00, 0xa5}) 8.053348334s ago: executing program 3 (id=221): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000498000/0x2000)=nil, 0x2000, 0x4, 0x0, 0xfffffffa, 0xf) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)=0x401) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000002c0)={@local, 0x2}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000480)={0x53, 0xffffffffffffffff, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000200)="0a823ac6aeb7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000280)=[{r4}], 0x1, 0x9e) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) epoll_create1(0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80441, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @private1={0xfc, 0x1, '\x00', 0x4}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x20000000) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff, 0x6}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x3c, 0x2, 0xd, 0x35f}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff23, 0x2, 0x5, 0x8}, 0x0, 0x0) 7.053775842s ago: executing program 2 (id=222): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) socket(0x22, 0x80000, 0x10004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') socket$inet(0x2, 0x4000000000000001, 0x10000000) socket(0x2b, 0x80801, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) 5.693964822s ago: executing program 1 (id=223): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) mbind(&(0x7f0000498000/0x2000)=nil, 0x2000, 0x4, 0x0, 0xfffffffa, 0xf) mmap(&(0x7f000003a000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x100000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)=0x401) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000002c0)={@local, 0x2}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000480)={0x53, 0xffffffffffffffff, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000200)="0a823ac6aeb7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000280)=[{r4}], 0x1, 0x9e) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) epoll_create1(0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80441, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @private1={0xfc, 0x1, '\x00', 0x4}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x20000000) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff, 0x6}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x3c, 0x2, 0xd, 0x35f}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff23, 0x2, 0x5, 0x8}, 0x0, 0x0) 4.891126388s ago: executing program 0 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x90, 0x7f, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.616922192s ago: executing program 4 (id=225): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @generic={0x0, 0x2}]}}}}}}, 0x3e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.268697873s ago: executing program 4 (id=226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.728488492s ago: executing program 3 (id=227): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.522697776s ago: executing program 4 (id=228): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8954, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x80, 0x0, 0xe, 0x7fff7ffc}, {0x1ffc, 0xba, 0x7f, 0x497d5cd3}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42a301) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)=0x0) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff00000007, "d62e980d9e9f39cf", "20e460999f426180a8c27a30ea181179631de8f794d20352346f8f00", 0x7f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.355341751s ago: executing program 2 (id=229): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, 0x0, 0x0, 0x4fed3) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100e0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 989.113361ms ago: executing program 0 (id=230): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000048c0)={0x2020}, 0x2020) 0s ago: executing program 2 (id=231): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8954, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42a301) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40408c1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 89.559049][ T5791] cgroup: Unknown subsys name 'net' [ 89.849919][ T5791] cgroup: Unknown subsys name 'cpuset' [ 89.905209][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.842178][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.148018][ T9] cfg80211: failed to load regulatory.db [ 96.152907][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.157603][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.162369][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.164155][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.171128][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.172234][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.184168][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.201110][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.225430][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.228702][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.260675][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.268051][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.279906][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.280611][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.280764][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.286230][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.287418][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.290329][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.297654][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.298777][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.343485][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.370164][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.377780][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.382979][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.399605][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.336489][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 97.494021][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 97.648839][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 97.654707][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 97.752932][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 98.193815][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.195411][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.196603][ T5809] bridge_slave_0: entered allmulticast mode [ 98.199937][ T5809] bridge_slave_0: entered promiscuous mode [ 98.225641][ T5821] Bluetooth: hci1: command tx timeout [ 98.330359][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.330459][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.330604][ T5809] bridge_slave_1: entered allmulticast mode [ 98.332529][ T5809] bridge_slave_1: entered promiscuous mode [ 98.384520][ T5821] Bluetooth: hci0: command tx timeout [ 98.384530][ T5814] Bluetooth: hci3: command tx timeout [ 98.464485][ T5821] Bluetooth: hci2: command tx timeout [ 98.465458][ T5814] Bluetooth: hci4: command tx timeout [ 98.565531][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.565711][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.565898][ T5813] bridge_slave_0: entered allmulticast mode [ 98.567740][ T5813] bridge_slave_0: entered promiscuous mode [ 98.865704][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.865834][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.866026][ T5813] bridge_slave_1: entered allmulticast mode [ 98.868158][ T5813] bridge_slave_1: entered promiscuous mode [ 99.063277][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.136584][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.136889][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.137057][ T5818] bridge_slave_0: entered allmulticast mode [ 99.139025][ T5818] bridge_slave_0: entered promiscuous mode [ 99.226442][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.226574][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.226809][ T5810] bridge_slave_0: entered allmulticast mode [ 99.228965][ T5810] bridge_slave_0: entered promiscuous mode [ 99.233564][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.335488][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.335658][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.335852][ T5818] bridge_slave_1: entered allmulticast mode [ 99.337942][ T5818] bridge_slave_1: entered promiscuous mode [ 99.341459][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.341554][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.341688][ T5808] bridge_slave_0: entered allmulticast mode [ 99.343548][ T5808] bridge_slave_0: entered promiscuous mode [ 99.397918][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.398048][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.398229][ T5810] bridge_slave_1: entered allmulticast mode [ 99.400688][ T5810] bridge_slave_1: entered promiscuous mode [ 99.568743][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.636030][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.636142][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.636364][ T5808] bridge_slave_1: entered allmulticast mode [ 99.638290][ T5808] bridge_slave_1: entered promiscuous mode [ 99.818485][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.018664][ T5809] team0: Port device team_slave_0 added [ 100.100013][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.179671][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.182188][ T5809] team0: Port device team_slave_1 added [ 100.248639][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.251874][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.265421][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.304544][ T5814] Bluetooth: hci1: command tx timeout [ 100.347610][ T5813] team0: Port device team_slave_0 added [ 100.427792][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.464548][ T5821] Bluetooth: hci3: command tx timeout [ 100.464656][ T5814] Bluetooth: hci0: command tx timeout [ 100.544546][ T5821] Bluetooth: hci2: command tx timeout [ 100.544575][ T5814] Bluetooth: hci4: command tx timeout [ 100.577778][ T5813] team0: Port device team_slave_1 added [ 101.026978][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.026992][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.027012][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.107198][ T5818] team0: Port device team_slave_0 added [ 101.187594][ T5810] team0: Port device team_slave_0 added [ 101.188535][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.188548][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.188569][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.277973][ T5818] team0: Port device team_slave_1 added [ 101.279906][ T5808] team0: Port device team_slave_0 added [ 101.296923][ T5810] team0: Port device team_slave_1 added [ 101.297842][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.297858][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.297885][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.387910][ T5808] team0: Port device team_slave_1 added [ 101.488322][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.488346][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.488365][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.694524][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.694539][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.694558][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.816009][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.816027][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.816056][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.927900][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.927916][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.927935][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.929064][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.929076][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.929097][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.930337][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.930352][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.930380][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.184118][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.184138][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.184165][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.211411][ T5809] hsr_slave_0: entered promiscuous mode [ 102.213587][ T5809] hsr_slave_1: entered promiscuous mode [ 102.384389][ T5821] Bluetooth: hci1: command tx timeout [ 102.461660][ T5813] hsr_slave_0: entered promiscuous mode [ 102.462651][ T5813] hsr_slave_1: entered promiscuous mode [ 102.463556][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 102.463657][ T5813] Cannot create hsr debugfs directory [ 102.544457][ T5814] Bluetooth: hci3: command tx timeout [ 102.544566][ T5821] Bluetooth: hci0: command tx timeout [ 102.624651][ T5814] Bluetooth: hci4: command tx timeout [ 102.625790][ T5821] Bluetooth: hci2: command tx timeout [ 102.899792][ T5818] hsr_slave_0: entered promiscuous mode [ 102.900787][ T5818] hsr_slave_1: entered promiscuous mode [ 102.901448][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 102.901472][ T5818] Cannot create hsr debugfs directory [ 103.002112][ T5810] hsr_slave_0: entered promiscuous mode [ 103.003127][ T5810] hsr_slave_1: entered promiscuous mode [ 103.003807][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 103.003832][ T5810] Cannot create hsr debugfs directory [ 103.182502][ T5808] hsr_slave_0: entered promiscuous mode [ 103.183674][ T5808] hsr_slave_1: entered promiscuous mode [ 103.195882][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 103.195903][ T5808] Cannot create hsr debugfs directory [ 104.464341][ T5821] Bluetooth: hci1: command tx timeout [ 104.625490][ T5814] Bluetooth: hci3: command tx timeout [ 104.625537][ T5821] Bluetooth: hci0: command tx timeout [ 104.626960][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.686377][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.704525][ T5814] Bluetooth: hci4: command tx timeout [ 104.704578][ T5821] Bluetooth: hci2: command tx timeout [ 104.740542][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.793458][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.913742][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.976356][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.022142][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.089761][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.231346][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.252346][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.298248][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.349662][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.497991][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.540630][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.578804][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.645616][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.698001][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.812087][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.841868][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.882602][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.891926][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.929809][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.992553][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.993586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.049066][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.049217][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.119413][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.205968][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.243592][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.259789][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.259948][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.311465][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.311615][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.382142][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.422967][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.459318][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.459496][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.508307][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.510487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.561200][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.609102][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.609320][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.669139][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.669355][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.677741][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.862510][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.918907][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.932526][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.950745][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.989218][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.989370][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.215188][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.320013][ T5809] veth0_vlan: entered promiscuous mode [ 107.418184][ T5809] veth1_vlan: entered promiscuous mode [ 107.474408][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.555150][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.569051][ T5818] veth0_vlan: entered promiscuous mode [ 107.633399][ T5818] veth1_vlan: entered promiscuous mode [ 107.663781][ T5809] veth0_macvtap: entered promiscuous mode [ 107.702162][ T5809] veth1_macvtap: entered promiscuous mode [ 107.725466][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.761682][ T5813] veth0_vlan: entered promiscuous mode [ 107.808914][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.809721][ T5813] veth1_vlan: entered promiscuous mode [ 107.827985][ T5810] veth0_vlan: entered promiscuous mode [ 107.840142][ T5818] veth0_macvtap: entered promiscuous mode [ 107.880181][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.893762][ T5818] veth1_macvtap: entered promiscuous mode [ 107.941753][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.948191][ T5810] veth1_vlan: entered promiscuous mode [ 107.959737][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.963710][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.977950][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.052689][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.143562][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.249723][ T3584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.253895][ T5813] veth0_macvtap: entered promiscuous mode [ 108.274177][ T3584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.291638][ T3584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.323633][ T3584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.359063][ T5813] veth1_macvtap: entered promiscuous mode [ 108.436885][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.436913][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.440320][ T5810] veth0_macvtap: entered promiscuous mode [ 108.515437][ T5810] veth1_macvtap: entered promiscuous mode [ 108.637941][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.662994][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.663017][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.703764][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.759086][ T5808] veth0_vlan: entered promiscuous mode [ 108.768223][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.777522][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.777548][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.793264][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.803768][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.835495][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.835616][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.855197][ T1309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.888263][ T5808] veth1_vlan: entered promiscuous mode [ 108.942778][ T1309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.958352][ T1309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.974444][ T1309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.975906][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.975925][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.990153][ T1309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.775053][ T5927] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.214828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 110.214867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 110.214963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 110.232161][ T5808] veth0_macvtap: entered promiscuous mode [ 110.235351][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.235375][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.236268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 110.236686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 110.267438][ T5808] veth1_macvtap: entered promiscuous mode [ 110.374133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 110.537294][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.537312][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.543750][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.592686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 111.592886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 111.673440][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.687998][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.688020][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.216966][ T1327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.290389][ T1327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.507731][ T1327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.537811][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.553026][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.553054][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.827724][ T5824] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.077831][ T5824] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 113.078366][ T5824] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.078397][ T5824] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.078421][ T5824] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 113.078450][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.078488][ T5824] usb 1-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 113.078511][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.142082][ T5824] usb 1-1: config 0 descriptor?? [ 113.203078][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.203100][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.868752][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.868777][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.371445][ T5824] usbhid 1-1:0.0: can't add hid device: -71 [ 114.371547][ T5824] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 114.404260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.408448][ T5824] usb 1-1: USB disconnect, device number 2 [ 114.818938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.225490][ T5954] program syz.3.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.194370][ T5824] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.799142][ T5824] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 117.799173][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.799187][ T5824] usb 5-1: Product: syz [ 117.799198][ T5824] usb 5-1: Manufacturer: syz [ 117.799208][ T5824] usb 5-1: SerialNumber: syz [ 118.442673][ T5824] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 118.442739][ T5824] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 118.685771][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.127317][ T5872] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 120.127348][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.127368][ T5872] usb 4-1: Product: syz [ 120.127459][ T5872] usb 4-1: Manufacturer: syz [ 120.127474][ T5872] usb 4-1: SerialNumber: syz [ 120.283266][ T5824] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 120.283320][ T5824] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 120.287616][ T5824] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 120.384047][ T5824] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 120.616356][ T5824] usb 5-1: USB disconnect, device number 2 [ 120.650989][ T5985] program syz.2.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.514497][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 121.514544][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 122.760644][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 122.760689][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 122.761222][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 122.766121][ T5992] program syz.2.20 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.856389][ T5872] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 123.026832][ T5872] usb 4-1: USB disconnect, device number 2 [ 124.333706][ T6005] program syz.3.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.335328][ T6015] fuse: Bad value for 'fd' [ 128.199255][ T805] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 128.284427][ T5891] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.366862][ T805] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 128.366894][ T805] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 128.366917][ T805] usb 3-1: config 150 has no interface number 0 [ 128.366952][ T805] usb 3-1: config 150 interface 204 has no altsetting 0 [ 128.370687][ T805] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 128.370716][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.370731][ T805] usb 3-1: Product: syz [ 128.370741][ T805] usb 3-1: Manufacturer: syz [ 128.370752][ T805] usb 3-1: SerialNumber: syz [ 128.448455][ T5951] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.468417][ T5891] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 128.468449][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.468469][ T5891] usb 2-1: Product: syz [ 128.468484][ T5891] usb 2-1: Manufacturer: syz [ 128.468499][ T5891] usb 2-1: SerialNumber: syz [ 128.645889][ T5951] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 128.645922][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.645943][ T5951] usb 5-1: Product: syz [ 128.645959][ T5951] usb 5-1: Manufacturer: syz [ 128.645984][ T5951] usb 5-1: SerialNumber: syz [ 128.808418][ T805] xr_serial 3-1:150.204: skipping garbage [ 128.808441][ T805] xr_serial 3-1:150.204: skipping garbage [ 128.874530][ T805] usb 3-1: USB disconnect, device number 2 [ 129.006239][ T5891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 129.006305][ T5891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 129.203103][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 129.203158][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 129.307522][ T6042] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.449751][ T5891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 129.449814][ T5891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 129.481416][ T5891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 129.507750][ T5891] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 129.567589][ T5891] usb 2-1: USB disconnect, device number 2 [ 130.154406][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.771954][ T5891] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 130.772119][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.840284][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 130.876248][ T5891] usb 3-1: config 0 descriptor?? [ 130.902860][ T5891] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 131.389386][ T5891] gspca_cpia1: usb_control_msg 03, error -32 [ 131.519347][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 131.520202][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 131.520248][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.522231][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.536939][ T5891] cpia1 3-1:0.0: unexpected state after lo power cmd: 01 [ 132.057752][ T5951] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 132.122202][ T5951] usb 5-1: USB disconnect, device number 3 [ 132.255772][ T5891] gspca_cpia1: usb_control_msg 02, error -71 [ 132.256350][ T5891] gspca_cpia1: usb_control_msg 05, error -71 [ 132.256373][ T5891] cpia1 3-1:0.0: unexpected systemstate: 01 [ 132.309408][ T5891] usb 3-1: USB disconnect, device number 3 [ 134.907321][ T805] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.550917][ T805] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 136.550941][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.616698][ T805] usb 4-1: config 0 descriptor?? [ 136.645069][ T805] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 137.040953][ T805] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 137.279173][ T805] gspca_cpia1: usb_control_msg 01, error -32 [ 137.496555][ T805] gspca_cpia1: usb_control_msg 02, error -71 [ 137.496572][ T805] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 137.560136][ T805] usb 4-1: USB disconnect, device number 3 [ 137.827546][ T6104] program syz.0.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.828699][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'. [ 138.020300][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 138.040624][ T5821] Bluetooth: Frame is too long (len 16, expected len 4) [ 138.238066][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.238168][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.811419][ T6138] program syz.2.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.373738][ T6140] program syz.3.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.580075][ T6142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 141.580096][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.605144][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 141.628675][ T6142] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 141.628696][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 141.651436][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 142.104392][ T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 142.163869][ T6142] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 142.163891][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.196617][ T6152] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 142.196685][ T6152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.201646][ T6152] vhci_hcd vhci_hcd.0: Device attached [ 142.248998][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 142.276010][ T6142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 142.276033][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 142.276165][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 142.277363][ T6142] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.279824][ T6142] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.501332][ T6152] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.569260][ T6142] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(24) [ 142.582444][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.091583][ T6152] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(29) [ 143.091614][ T6152] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 143.091699][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 143.093621][ T6152] vhci_hcd vhci_hcd.0: Device attached [ 143.260286][ T6160] vhci_hcd: connection closed [ 143.262167][ T6145] vhci_hcd: connection reset by peer [ 143.262288][ T6158] vhci_hcd: connection closed [ 143.262359][ T6153] vhci_hcd: connection closed [ 143.262430][ T6147] vhci_hcd: connection closed [ 143.266673][ T1407] vhci_hcd: stop threads [ 143.267281][ T1407] vhci_hcd: release socket [ 143.271040][ T1407] vhci_hcd: disconnect device [ 143.286566][ T6154] vhci_hcd: connection closed [ 143.348100][ T1407] vhci_hcd: stop threads [ 143.348124][ T1407] vhci_hcd: release socket [ 143.348285][ T1407] vhci_hcd: disconnect device [ 143.352555][ T1407] vhci_hcd: stop threads [ 143.352569][ T1407] vhci_hcd: release socket [ 143.352796][ T1407] vhci_hcd: disconnect device [ 143.363682][ T1407] vhci_hcd: stop threads [ 143.363696][ T1407] vhci_hcd: release socket [ 143.401710][ T1407] vhci_hcd: disconnect device [ 143.401872][ T1407] vhci_hcd: stop threads [ 143.401887][ T1407] vhci_hcd: release socket [ 143.402099][ T1407] vhci_hcd: disconnect device [ 143.402249][ T1407] vhci_hcd: stop threads [ 143.402257][ T1407] vhci_hcd: release socket [ 143.403503][ T1407] vhci_hcd: disconnect device [ 143.410694][ T6162] vhci_hcd: connection closed [ 143.467922][ T13] vhci_hcd: stop threads [ 143.467944][ T13] vhci_hcd: release socket [ 143.468856][ T13] vhci_hcd: disconnect device [ 148.284373][ T10] vhci_hcd: vhci_device speed not set [ 148.485965][ T5815] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.309256][ T6217] syz.0.78 (6217) used greatest stack depth: 17208 bytes left [ 150.926751][ T5815] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 150.926783][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.932380][ T5815] usb 3-1: config 0 descriptor?? [ 151.102705][ T5815] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 151.439458][ T6226] program syz.1.81 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.689682][ T805] usb usb42-port1: attempt power cycle [ 151.792125][ T6223] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 151.792148][ T6223] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.793653][ T6223] vhci_hcd vhci_hcd.0: Device attached [ 151.850067][ T6223] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 151.850089][ T6223] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.850288][ T6223] vhci_hcd vhci_hcd.0: Device attached [ 151.880870][ T6229] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 151.881047][ T6229] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.881288][ T6229] vhci_hcd vhci_hcd.0: Device attached [ 151.894501][ T5890] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 151.928643][ T5815] gspca_cpia1: usb_control_msg 03, error -32 [ 151.932701][ T5815] cpia1 3-1:0.0: unexpected state after lo power cmd: 01 [ 151.978462][ T6237] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 151.982986][ T6237] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 152.006090][ T6223] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 152.006118][ T6223] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.013787][ T6229] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 152.013816][ T6229] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.046535][ T6223] vhci_hcd vhci_hcd.0: Device attached [ 152.049361][ T6229] vhci_hcd vhci_hcd.0: Device attached [ 152.065503][ T5951] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 152.093800][ T6223] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 152.105026][ T6237] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 152.105054][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.106094][ T6237] vhci_hcd vhci_hcd.0: Device attached [ 152.147279][ T6223] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(28) [ 152.147308][ T6223] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.150704][ T6223] vhci_hcd vhci_hcd.0: Device attached [ 152.201675][ T5815] gspca_cpia1: usb_control_msg 01, error -32 [ 152.203465][ T5815] gspca_cpia1: usb_control_msg 01, error -71 [ 152.203484][ T5815] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 152.238391][ T5890] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 152.238421][ T5890] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 152.238441][ T5890] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 152.238463][ T5890] usb 5-1: config 150 has no interface number 0 [ 152.238497][ T5890] usb 5-1: config 150 interface 204 has no altsetting 0 [ 152.239452][ T5815] usb 3-1: USB disconnect, device number 4 [ 152.285460][ T5890] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 152.285497][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.285522][ T5890] usb 5-1: Product: syz [ 152.285541][ T5890] usb 5-1: Manufacturer: syz [ 152.285557][ T5890] usb 5-1: SerialNumber: syz [ 152.342316][ T6241] vhci_hcd: connection closed [ 152.343761][ T6239] vhci_hcd: connection closed [ 152.349239][ T37] vhci_hcd: stop threads [ 152.349260][ T37] vhci_hcd: release socket [ 152.349328][ T37] vhci_hcd: disconnect device [ 152.349501][ T37] vhci_hcd: stop threads [ 152.349510][ T37] vhci_hcd: release socket [ 152.349567][ T37] vhci_hcd: disconnect device [ 152.412702][ T6234] vhci_hcd: connection closed [ 152.414605][ T6235] vhci_hcd: connection closed [ 152.415406][ T6230] vhci_hcd: connection closed [ 152.419412][ T6232] vhci_hcd: connection closed [ 152.420029][ T6227] vhci_hcd: connection reset by peer [ 152.420353][ T1009] vhci_hcd: stop threads [ 152.420364][ T1009] vhci_hcd: release socket [ 152.420710][ T1009] vhci_hcd: disconnect device [ 152.467066][ T1009] vhci_hcd: stop threads [ 152.467080][ T1009] vhci_hcd: release socket [ 152.467341][ T1009] vhci_hcd: disconnect device [ 152.468242][ T1009] vhci_hcd: stop threads [ 152.468253][ T1009] vhci_hcd: release socket [ 152.468538][ T1009] vhci_hcd: disconnect device [ 152.469486][ T1009] vhci_hcd: stop threads [ 152.469496][ T1009] vhci_hcd: release socket [ 152.470340][ T1009] vhci_hcd: disconnect device [ 152.470638][ T1009] vhci_hcd: stop threads [ 152.470647][ T1009] vhci_hcd: release socket [ 152.470845][ T1009] vhci_hcd: disconnect device [ 152.578397][ T805] usb usb42-port1: unable to enumerate USB device [ 152.629486][ T5890] xr_serial 5-1:150.204: skipping garbage [ 152.774034][ T6245] Zero length message leads to an empty skb [ 153.165041][ T5821] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 153.165092][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 153.165127][ T5821] Tainted: [L]=SOFTLOCKUP [ 153.165136][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.165151][ T5821] Workqueue: hci1 hci_rx_work [ 153.165201][ T5821] Call Trace: [ 153.165210][ T5821] [ 153.165221][ T5821] dump_stack_lvl+0x189/0x250 [ 153.165259][ T5821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.165290][ T5821] ? __pfx__printk+0x10/0x10 [ 153.165318][ T5821] ? kernfs_path_from_node+0x2c/0x280 [ 153.165350][ T5821] ? kernfs_path_from_node+0x243/0x280 [ 153.165380][ T5821] ? kernfs_path_from_node+0x2c/0x280 [ 153.165416][ T5821] sysfs_create_dir_ns+0x259/0x280 [ 153.165447][ T5821] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 153.165472][ T5821] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 153.165507][ T5821] ? rt_spin_unlock+0x161/0x200 [ 153.165532][ T5821] kobject_add_internal+0x6ae/0xca0 [ 153.165573][ T5821] kobject_add+0x155/0x220 [ 153.165610][ T5821] ? __pfx_kobject_add+0x10/0x10 [ 153.165648][ T5821] ? get_device_parent+0x370/0x3a0 [ 153.165680][ T5821] device_add+0x408/0xb50 [ 153.165711][ T5821] hci_conn_add_sysfs+0xd5/0x1e0 [ 153.165742][ T5821] le_conn_complete_evt+0xf1d/0x1420 [ 153.165772][ T5821] ? lockdep_hardirqs_on+0x98/0x140 [ 153.165807][ T5821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 153.165842][ T5821] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 153.165871][ T5821] ? lockdep_hardirqs_on+0x98/0x140 [ 153.165904][ T5821] ? skb_pull_data+0xfb/0x200 [ 153.165943][ T5821] hci_le_conn_complete_evt+0x187/0x450 [ 153.165986][ T5821] hci_event_packet+0x78f/0x1200 [ 153.166020][ T5821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 153.166056][ T5821] ? __pfx_hci_event_packet+0x10/0x10 [ 153.166099][ T5821] ? hci_send_to_monitor+0xe2/0x570 [ 153.166126][ T5821] hci_rx_work+0x42b/0xf20 [ 153.166163][ T5821] ? process_scheduled_works+0x9ef/0x1770 [ 153.166191][ T5821] process_scheduled_works+0xad1/0x1770 [ 153.166250][ T5821] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.166295][ T5821] worker_thread+0x8a0/0xda0 [ 153.166325][ T5821] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.166363][ T5821] ? __kthread_parkme+0x7b/0x200 [ 153.166402][ T5821] kthread+0x711/0x8a0 [ 153.166446][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 153.166471][ T5821] ? __pfx_kthread+0x10/0x10 [ 153.166500][ T5821] ? rt_spin_unlock+0x150/0x200 [ 153.166526][ T5821] ? rt_spin_unlock+0x161/0x200 [ 153.166546][ T5821] ? __pfx_kthread+0x10/0x10 [ 153.166579][ T5821] ret_from_fork+0x599/0xb30 [ 153.166607][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 153.166644][ T5821] ? __switch_to_asm+0x39/0x70 [ 153.166673][ T5821] ? __switch_to_asm+0x33/0x70 [ 153.166703][ T5821] ? __pfx_kthread+0x10/0x10 [ 153.166737][ T5821] ret_from_fork_asm+0x1a/0x30 [ 153.166796][ T5821] [ 153.166830][ T5821] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 153.166875][ T5821] Bluetooth: hci1: failed to register connection device [ 154.128768][ T805] usb 5-1: USB disconnect, device number 4 [ 154.194356][ T6251] program syz.3.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.201192][ T5814] Bluetooth: hci1: command 0x2016 tx timeout [ 157.420130][ T5951] vhci_hcd: vhci_device speed not set [ 157.424326][ T5814] Bluetooth: hci1: command 0x2016 tx timeout [ 157.614944][ T818] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 158.666925][ T818] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 158.666981][ T818] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.667010][ T818] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.667034][ T818] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 158.667062][ T818] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.667102][ T818] usb 4-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 158.667126][ T818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.680062][ T818] usb 4-1: config 0 descriptor?? [ 159.286588][ T6295] program syz.0.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.890027][ T818] usbhid 4-1:0.0: can't add hid device: -71 [ 161.890158][ T818] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.020279][ T818] usb 4-1: USB disconnect, device number 4 [ 162.084516][ T6299] program syz.1.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.212092][ T6308] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 162.212123][ T6308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.217278][ T6308] vhci_hcd vhci_hcd.0: Device attached [ 162.254336][ T6308] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 162.254364][ T6308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.256413][ T6308] vhci_hcd vhci_hcd.0: Device attached [ 162.335857][ T6308] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 162.335879][ T6308] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 162.335991][ T6308] vhci_hcd vhci_hcd.0: Device attached [ 162.343258][ T6319] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 162.343282][ T6319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.344283][ T6319] vhci_hcd vhci_hcd.0: Device attached [ 162.456575][ T6308] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 162.456607][ T6308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.457067][ T6308] vhci_hcd vhci_hcd.0: Device attached [ 162.634954][ T6308] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 162.634997][ T6308] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.635317][ T6308] vhci_hcd vhci_hcd.0: Device attached [ 162.641076][ T6308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.654870][ T6308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.664331][ T31] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 163.540097][ T6319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 163.558883][ T6308] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(26) [ 163.558910][ T6308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.561781][ T6308] vhci_hcd vhci_hcd.0: Device attached [ 163.575647][ T6325] vhci_hcd: connection closed [ 163.576486][ T3575] vhci_hcd: stop threads [ 163.576506][ T3575] vhci_hcd: release socket [ 163.576547][ T3575] vhci_hcd: disconnect device [ 163.576622][ T6330] vhci_hcd: connection closed [ 163.577304][ T3575] vhci_hcd: stop threads [ 163.577315][ T3575] vhci_hcd: release socket [ 163.577587][ T3575] vhci_hcd: disconnect device [ 163.577939][ T6322] vhci_hcd: connection closed [ 163.578630][ T3575] vhci_hcd: stop threads [ 163.578641][ T3575] vhci_hcd: release socket [ 163.578873][ T3575] vhci_hcd: disconnect device [ 163.579398][ T6320] vhci_hcd: connection closed [ 163.582888][ T6315] vhci_hcd: connection closed [ 163.583184][ T3575] vhci_hcd: stop threads [ 163.583197][ T3575] vhci_hcd: release socket [ 163.583441][ T3575] vhci_hcd: disconnect device [ 163.583805][ T3575] vhci_hcd: stop threads [ 163.583815][ T3575] vhci_hcd: release socket [ 163.584036][ T3575] vhci_hcd: disconnect device [ 163.584154][ T6313] vhci_hcd: connection closed [ 163.592745][ T6310] vhci_hcd: connection reset by peer [ 163.595180][ T3575] vhci_hcd: stop threads [ 163.595193][ T3575] vhci_hcd: release socket [ 163.595447][ T3575] vhci_hcd: disconnect device [ 163.595799][ T3575] vhci_hcd: stop threads [ 163.595806][ T3575] vhci_hcd: release socket [ 163.596027][ T3575] vhci_hcd: disconnect device [ 168.779937][ T31] vhci_hcd: vhci_device speed not set [ 169.304331][ T6017] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.491483][ T6017] usb 3-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 169.491534][ T6017] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.491563][ T6017] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.491585][ T6017] usb 3-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 169.491611][ T6017] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.491646][ T6017] usb 3-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 169.491669][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.499606][ T6017] usb 3-1: config 0 descriptor?? [ 170.057930][ T6017] wacom 0003:056A:0030.0001: unknown main item tag 0x3 [ 170.778617][ T6398] fuse: Bad value for 'fd' [ 175.244994][ T6017] usb 3-1: USB disconnect, device number 5 [ 176.166934][ T6421] program syz.0.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.664326][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 176.828531][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 176.828563][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.916536][ T10] usb 1-1: config 0 descriptor?? [ 177.368586][ T10] ath6kl: Failed to submit usb control message: -71 [ 177.368626][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 177.368636][ T10] ath6kl: Unable to send get target info: -71 [ 177.393076][ T10] ath6kl: Failed to init ath6kl core: -71 [ 177.394507][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 177.454980][ T10] usb 1-1: USB disconnect, device number 3 [ 177.994337][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.220816][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 178.220868][ T10] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.220896][ T10] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.220919][ T10] usb 3-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 178.220948][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 178.220983][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 178.221007][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.278120][ T6441] 9pnet_fd: Insufficient options for proto=fd [ 178.281825][ T10] usb 3-1: config 0 descriptor?? [ 178.994373][ T6032] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 179.312883][ T10] usb 3-1: USB disconnect, device number 6 [ 179.473644][ T6032] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 179.473666][ T6032] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 179.473682][ T6032] usb 1-1: config 150 has no interface number 0 [ 179.473705][ T6032] usb 1-1: config 150 interface 204 has no altsetting 0 [ 179.499825][ T6032] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 179.499865][ T6032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.499887][ T6032] usb 1-1: Product: syz [ 179.499905][ T6032] usb 1-1: Manufacturer: syz [ 179.499921][ T6032] usb 1-1: SerialNumber: syz [ 180.011476][ T6453] program syz.3.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.377115][ T6032] xr_serial 1-1:150.204: skipping garbage [ 180.377138][ T6032] xr_serial 1-1:150.204: skipping garbage [ 182.674091][ T31] usb 1-1: USB disconnect, device number 4 [ 185.202087][ T6483] program syz.2.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.246322][ T6500] program syz.2.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.324303][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 190.484894][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 190.496417][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.496446][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.499179][ T5890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.499212][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.499237][ T5890] usb 2-1: Product: syz [ 190.499254][ T5890] usb 2-1: Manufacturer: syz [ 190.499270][ T5890] usb 2-1: SerialNumber: syz [ 190.754567][ T5890] usb 2-1: 0:2 : does not exist [ 190.755052][ T5890] usb 2-1: unit 6 not found! [ 190.944131][ T5814] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 191.891502][ T5890] usb 2-1: USB disconnect, device number 3 [ 192.831383][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.909142][ T6564] program syz.3.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.645541][ T6570] input: syz0 as /devices/virtual/input/input5 [ 199.676184][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.676257][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.078668][ T49] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 204.268896][ T49] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 204.268943][ T49] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.268963][ T49] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.268979][ T49] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 204.269003][ T49] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.269027][ T49] usb 1-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 204.269043][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.272706][ T49] usb 1-1: config 0 descriptor?? [ 207.045791][ T49] usbhid 1-1:0.0: can't add hid device: -71 [ 207.045923][ T49] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 207.069356][ T49] usb 1-1: USB disconnect, device number 5 [ 208.660019][ T6633] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 210.237527][ T6639] netlink: 1324 bytes leftover after parsing attributes in process `syz.4.192'. [ 216.501668][ T6676] program syz.2.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.006910][ T6678] netlink: 1324 bytes leftover after parsing attributes in process `syz.0.203'. [ 217.501061][ T6683] program syz.1.204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.114414][ T6032] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 218.317498][ T6032] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 218.317530][ T6032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.366331][ T6032] usb 2-1: config 0 descriptor?? [ 218.812240][ T6032] ath6kl: Failed to submit usb control message: -71 [ 218.812293][ T6032] ath6kl: unable to send the bmi data to the device: -71 [ 218.812310][ T6032] ath6kl: Unable to send get target info: -71 [ 218.843443][ T6032] ath6kl: Failed to init ath6kl core: -71 [ 218.845256][ T6032] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 218.968322][ T6032] usb 2-1: USB disconnect, device number 4 [ 222.076018][ T5957] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 222.302366][ T6700] input: syz0 as /devices/virtual/input/input6 [ 223.138939][ T5122] Bluetooth: hci3: command 0x0406 tx timeout [ 223.140241][ T5122] Bluetooth: hci0: command 0x0406 tx timeout [ 223.140281][ T5122] Bluetooth: hci4: command 0x0406 tx timeout [ 223.140304][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 223.140325][ T5122] Bluetooth: hci1: command 0x2016 tx timeout [ 224.274991][ T49] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 224.841697][ T49] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 224.841721][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.841735][ T49] usb 3-1: Product: syz [ 224.841746][ T49] usb 3-1: Manufacturer: syz [ 224.841756][ T49] usb 3-1: SerialNumber: syz [ 225.056644][ T5879] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 225.348140][ T5879] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 225.348199][ T5879] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.348226][ T5879] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.348249][ T5879] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 225.348376][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 225.348427][ T5879] usb 4-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 225.348452][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.402123][ T5879] usb 4-1: config 0 descriptor?? [ 225.495200][ T49] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 225.495265][ T49] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 226.167680][ T49] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 226.167742][ T49] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 227.119058][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 227.119085][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 227.144719][ T49] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 227.194959][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 227.286189][ T49] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 227.400599][ T49] usb 3-1: USB disconnect, device number 7 [ 228.404548][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 228.404684][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 228.456812][ T5879] usb 4-1: USB disconnect, device number 5 [ 228.772051][ T6755] program syz.2.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.755134][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 229.755163][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 229.755496][ T5823] Bluetooth: hci1: command 0x2016 tx timeout [ 231.914351][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 231.946761][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 231.946791][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 232.226985][ T6738] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 232.399139][ T6738] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 232.399191][ T6738] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.399219][ T6738] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.399242][ T6738] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 232.399272][ T6738] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.399307][ T6738] usb 1-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 232.399330][ T6738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.548412][ T6738] usb 1-1: config 0 descriptor?? [ 234.223665][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 234.237846][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 234.237872][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 235.177425][ T5815] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 235.322797][ T6738] usbhid 1-1:0.0: can't add hid device: -71 [ 235.322928][ T6738] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 235.445840][ T6738] usb 1-1: USB disconnect, device number 7 [ 235.461889][ T5815] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 235.462023][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.462110][ T5815] usb 4-1: Product: syz [ 235.462196][ T5815] usb 4-1: Manufacturer: syz [ 235.462274][ T5815] usb 4-1: SerialNumber: syz [ 236.464324][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 236.464362][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 236.464880][ C1] ------------[ cut here ]------------ [ 236.464890][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 236.464933][ C1] WARNING: kernel/workqueue.c:2252 at 0x0, CPU#1: ktimers/1/29 [ 236.464959][ C1] Modules linked in: [ 236.464988][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 236.465013][ C1] Tainted: [L]=SOFTLOCKUP [ 236.465019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.465030][ C1] RIP: 0010:__queue_work+0xd88/0xff0 [ 236.465054][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 99 24 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 10 2a [ 236.465069][ C1] RSP: 0018:ffffc90000a3f7f0 EFLAGS: 00010082 [ 236.465093][ C1] RAX: 1ffff1100a744953 RBX: 0000000000000008 RCX: ffff88801baf1e40 [ 236.465105][ C1] RDX: ffff888031c92168 RSI: ffffffff89c26720 RDI: ffffffff8edd1c50 [ 236.465118][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 236.465129][ C1] R10: dffffc0000000000 R11: ffffffff818a7370 R12: dffffc0000000000 [ 236.465142][ C1] R13: ffff888053a24a98 R14: ffffffff8edd1c50 R15: ffff888031c92168 [ 236.465155][ C1] FS: 0000000000000000(0000) GS:ffff888126e52000(0000) knlGS:0000000000000000 [ 236.465169][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.465181][ C1] CR2: 00005555824915c8 CR3: 000000003bfd0000 CR4: 00000000003526f0 [ 236.465197][ C1] Call Trace: [ 236.465204][ C1] [ 236.465222][ C1] call_timer_fn+0x16e/0x590 [ 236.465251][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 236.465272][ C1] ? call_timer_fn+0xbe/0x590 [ 236.465300][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 236.465336][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 236.465358][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 236.465381][ C1] __run_timer_base+0x709/0x970 [ 236.465420][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 236.465458][ C1] run_timer_softirq+0xb7/0x180 [ 236.465484][ C1] handle_softirqs+0x226/0x6d0 [ 236.465514][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 236.465543][ C1] run_ktimerd+0xcf/0x190 [ 236.465566][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 236.465587][ C1] ? schedule+0x91/0x360 [ 236.465614][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 236.465635][ C1] smpboot_thread_fn+0x542/0xa60 [ 236.465659][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 236.465689][ C1] kthread+0x711/0x8a0 [ 236.465717][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 236.465739][ C1] ? __pfx_kthread+0x10/0x10 [ 236.465761][ C1] ? rt_spin_unlock+0x150/0x200 [ 236.465782][ C1] ? rt_spin_unlock+0x161/0x200 [ 236.465797][ C1] ? __pfx_kthread+0x10/0x10 [ 236.465822][ C1] ret_from_fork+0x599/0xb30 [ 236.465844][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 236.465872][ C1] ? __switch_to_asm+0x39/0x70 [ 236.465897][ C1] ? __switch_to_asm+0x33/0x70 [ 236.465921][ C1] ? __pfx_kthread+0x10/0x10 [ 236.465947][ C1] ret_from_fork_asm+0x1a/0x30 [ 236.465987][ C1] [ 236.465997][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.466013][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 236.466038][ C1] Tainted: [L]=SOFTLOCKUP [ 236.466044][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.466054][ C1] Call Trace: [ 236.466061][ C1] [ 236.466068][ C1] dump_stack_lvl+0x99/0x250 [ 236.466102][ C1] ? __asan_memcpy+0x40/0x70 [ 236.466126][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.466163][ C1] ? __pfx__printk+0x10/0x10 [ 236.466193][ C1] vpanic+0x237/0x6d0 [ 236.466219][ C1] ? __pfx_vpanic+0x10/0x10 [ 236.466242][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 236.466266][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 236.466297][ C1] panic+0xb9/0xc0 [ 236.466327][ C1] ? __pfx_panic+0x10/0x10 [ 236.466367][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 236.466407][ C1] __warn+0x317/0x4b0 [ 236.466445][ C1] __report_bug+0x288/0x500 [ 236.466483][ C1] ? __pfx___report_bug+0x10/0x10 [ 236.466511][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 236.466566][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 236.466602][ C1] report_bug_entry+0x16a/0x220 [ 236.466630][ C1] ? __queue_work+0xd88/0xff0 [ 236.466655][ C1] ? __queue_work+0xd8d/0xff0 [ 236.466678][ C1] handle_bug+0xca/0x200 [ 236.466703][ C1] exc_invalid_op+0x1a/0x50 [ 236.466727][ C1] asm_exc_invalid_op+0x1a/0x20 [ 236.466743][ C1] RIP: 0010:__queue_work+0xd88/0xff0 [ 236.466764][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 99 24 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 10 2a [ 236.466777][ C1] RSP: 0018:ffffc90000a3f7f0 EFLAGS: 00010082 [ 236.466792][ C1] RAX: 1ffff1100a744953 RBX: 0000000000000008 RCX: ffff88801baf1e40 [ 236.466805][ C1] RDX: ffff888031c92168 RSI: ffffffff89c26720 RDI: ffffffff8edd1c50 [ 236.466817][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 236.466827][ C1] R10: dffffc0000000000 R11: ffffffff818a7370 R12: dffffc0000000000 [ 236.466840][ C1] R13: ffff888053a24a98 R14: ffffffff8edd1c50 R15: ffff888031c92168 [ 236.466856][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 236.466880][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 236.466916][ C1] call_timer_fn+0x16e/0x590 [ 236.466942][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 236.466962][ C1] ? call_timer_fn+0xbe/0x590 [ 236.466987][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 236.467021][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 236.467041][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 236.467063][ C1] __run_timer_base+0x709/0x970 [ 236.467105][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 236.467142][ C1] run_timer_softirq+0xb7/0x180 [ 236.467167][ C1] handle_softirqs+0x226/0x6d0 [ 236.467194][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 236.467222][ C1] run_ktimerd+0xcf/0x190 [ 236.467244][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 236.467264][ C1] ? schedule+0x91/0x360 [ 236.467289][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 236.467311][ C1] smpboot_thread_fn+0x542/0xa60 [ 236.467334][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 236.467363][ C1] kthread+0x711/0x8a0 [ 236.467390][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 236.467411][ C1] ? __pfx_kthread+0x10/0x10 [ 236.467432][ C1] ? rt_spin_unlock+0x150/0x200 [ 236.467452][ C1] ? rt_spin_unlock+0x161/0x200 [ 236.467467][ C1] ? __pfx_kthread+0x10/0x10 [ 236.467491][ C1] ret_from_fork+0x599/0xb30 [ 236.467511][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 236.467538][ C1] ? __switch_to_asm+0x39/0x70 [ 236.467561][ C1] ? __switch_to_asm+0x33/0x70 [ 236.467584][ C1] ? __pfx_kthread+0x10/0x10 [ 236.467608][ C1] ret_from_fork_asm+0x1a/0x30 [ 236.467646][ C1] [ 236.467933][ C1] Kernel Offset: disabled