last executing test programs: 20.133628857s ago: executing program 4 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r2}, 0x20) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 18.260680577s ago: executing program 4 (id=461): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_usbip_server_init(0x4) write$usbip_server(r4, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 17.977448265s ago: executing program 0 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r1, &(0x7f00000001c0)=[{0xff, 0xb, 0x0, 0xfd, @time, {0x0, 0x9}, {}, @result={0xffffffff, 0x3}}], 0x1c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) getdents64(r7, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x20000000f800, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000003d00000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 15.161671309s ago: executing program 0 (id=467): socket$unix(0x1, 0x5, 0x0) prlimit64(0xffffffffffffffff, 0xa, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x84, 0xfc}, 'port1\x00', 0x80, 0x60044, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x4}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) read$sequencer(0xffffffffffffffff, &(0x7f0000000780)=""/35, 0x23) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x81}, 'port0\x00', 0x25, 0x171414, 0x7ff9, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port1\x00', 0x89, 0x14, 0x4, 0x400, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d}) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.16091094s ago: executing program 2 (id=468): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8d0) sendmsg$kcm(r1, 0x0, 0x0) 13.863375072s ago: executing program 4 (id=471): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4c9, &(0x7f0000000380)={0x0, 0x1b0f, 0x10100, 0x0, 0xd3, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) 13.432880061s ago: executing program 1 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1}) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x8000000000003, 0x10000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 12.822034373s ago: executing program 4 (id=473): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(0x0, 0x16) 12.440874108s ago: executing program 1 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.404434729s ago: executing program 0 (id=475): socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12.065620095s ago: executing program 2 (id=476): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 9.598234082s ago: executing program 3 (id=478): ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x6, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000005c0)={0x1, 0x0, 0x2, 0x8, {0x0, 0x6, 0xc709, 0xfff}}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0xfffffffffffffe0d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 9.329884261s ago: executing program 2 (id=479): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)={0x20, 0x3, 0x11, {0x11, 0x5, "d4de8505814fede0ea28773eff1a7d"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x17, 0x15, "5ceb88210b1997a86c3decf7e6d983b35ea7ca3141"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x763}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.176389298s ago: executing program 1 (id=480): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = dup(0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000010) write$6lowpan_enable(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r0, 0x0, 0x25cd7166}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x0, 0x0) 8.23390409s ago: executing program 0 (id=481): write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_procfs(0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) 7.726064969s ago: executing program 1 (id=482): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.213425944s ago: executing program 4 (id=483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0) 7.210171848s ago: executing program 1 (id=484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001300e9990000000000100023fc000000000000000000000000000000ac1e000100000000000000000000000000040000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000001000000000000800000000000000000000000000000000002000000000000000c00080008000800010100"], 0xc4}}, 0x40000) 6.900083118s ago: executing program 3 (id=485): prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1}) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x8000000000003, 0x10000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 6.054518074s ago: executing program 2 (id=486): syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.191491321s ago: executing program 2 (id=487): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x5, 0x0, 0xff, 0x1, 0x3ff, 0x400}, &(0x7f00000001c0)=0x20) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000400000077a31610f39e0728ab3a1a48469de7df66745e9654d2f948a094c5896aba3bcbed4f880000000000000010f3835072fd3c81201005f539"], 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) clock_getres(0xfffffffffffffff1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.917172497s ago: executing program 3 (id=488): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff, 0x2, 0x3, 0x8, 0xffff, 0x7}, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x98) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r1, &(0x7f0000019540)=""/102400, 0x19000) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 4.33339683s ago: executing program 3 (id=489): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 3.985934611s ago: executing program 4 (id=490): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000580)="d5", 0x1, r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0xf9fdffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r5, &(0x7f0000000280)='a', 0x1, 0x5}]) r8 = timerfd_create(0x0, 0x0) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000400)={0x60, r11, 0x200, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004084}, 0x24008800) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 3.850995646s ago: executing program 0 (id=491): socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.036344376s ago: executing program 3 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r2}, 0x10) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7, 0x29, 0x0, 0x0}], 0x1}) 2.170167299s ago: executing program 3 (id=493): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 796.075453ms ago: executing program 0 (id=494): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) timer_settime(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000140)={@default, @default, 0x2, 0x20}) socket$kcm(0x10, 0x2, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0xe05, 0x6, 0x0, 0x7, 0x9, 0x0}) getpgrp(r3) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) io_uring_enter(0xffffffffffffffff, 0x6dd, 0x26f7, 0x0, &(0x7f0000000000)={[0x800001]}, 0x8) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x3, 0x4}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 104.962164ms ago: executing program 1 (id=495): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) 0s ago: executing program 2 (id=496): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)={0x20, 0x3, 0x11, {0x11, 0x5, "d4de8505814fede0ea28773eff1a7d"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x17, 0x15, "5ceb88210b1997a86c3decf7e6d983b35ea7ca3141"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x763}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 76.139866][ T5828] cgroup: Unknown subsys name 'net' [ 76.367735][ T5828] cgroup: Unknown subsys name 'cpuset' [ 76.403671][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.071729][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.746563][ T990] cfg80211: failed to load regulatory.db [ 82.234051][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.235968][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.236705][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.237884][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.238807][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.449241][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.454674][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.459853][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.461793][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.464361][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.524635][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.527273][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.528640][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.529364][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.530636][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.531383][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.532375][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.573707][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.578431][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.579109][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.623416][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.627962][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.628759][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.629911][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.631760][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.250373][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 83.347254][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 83.708809][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 83.912133][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.912229][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.912566][ T5839] bridge_slave_0: entered allmulticast mode [ 83.916398][ T5839] bridge_slave_0: entered promiscuous mode [ 84.045091][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 84.049839][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 84.138992][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.139122][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.139246][ T5839] bridge_slave_1: entered allmulticast mode [ 84.140771][ T5839] bridge_slave_1: entered promiscuous mode [ 84.285075][ T5841] Bluetooth: hci0: command tx timeout [ 84.334359][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.334464][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.334610][ T5842] bridge_slave_0: entered allmulticast mode [ 84.337891][ T5842] bridge_slave_0: entered promiscuous mode [ 84.455490][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.455630][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.455820][ T5842] bridge_slave_1: entered allmulticast mode [ 84.458303][ T5842] bridge_slave_1: entered promiscuous mode [ 84.523186][ T5841] Bluetooth: hci1: command tx timeout [ 84.603141][ T5841] Bluetooth: hci2: command tx timeout [ 84.646693][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.683135][ T5158] Bluetooth: hci3: command tx timeout [ 84.683295][ T5841] Bluetooth: hci4: command tx timeout [ 84.845703][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.087893][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.111994][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.112121][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.112405][ T5843] bridge_slave_0: entered allmulticast mode [ 85.119951][ T5843] bridge_slave_0: entered promiscuous mode [ 85.212575][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.374319][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.374458][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.374627][ T5843] bridge_slave_1: entered allmulticast mode [ 85.377472][ T5843] bridge_slave_1: entered promiscuous mode [ 85.381608][ T5839] team0: Port device team_slave_0 added [ 85.856028][ T5839] team0: Port device team_slave_1 added [ 85.915275][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.915420][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.915605][ T5846] bridge_slave_0: entered allmulticast mode [ 85.918124][ T5846] bridge_slave_0: entered promiscuous mode [ 85.919797][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.919959][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.920136][ T5847] bridge_slave_0: entered allmulticast mode [ 85.922425][ T5847] bridge_slave_0: entered promiscuous mode [ 86.136382][ T5842] team0: Port device team_slave_0 added [ 86.141721][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.141823][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.141962][ T5846] bridge_slave_1: entered allmulticast mode [ 86.145869][ T5846] bridge_slave_1: entered promiscuous mode [ 86.147010][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.147137][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.147300][ T5847] bridge_slave_1: entered allmulticast mode [ 86.149835][ T5847] bridge_slave_1: entered promiscuous mode [ 86.158040][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.288224][ T5842] team0: Port device team_slave_1 added [ 86.363912][ T5841] Bluetooth: hci0: command tx timeout [ 86.467259][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.468640][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.468649][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.468662][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.603070][ T5841] Bluetooth: hci1: command tx timeout [ 86.693045][ T5841] Bluetooth: hci2: command tx timeout [ 86.762994][ T5841] Bluetooth: hci4: command tx timeout [ 86.763026][ T5841] Bluetooth: hci3: command tx timeout [ 86.765369][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.765379][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.765392][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.960500][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.964606][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.057704][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.057718][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.057733][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.060722][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.062814][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.066979][ T5843] team0: Port device team_slave_0 added [ 87.071816][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.071830][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.071852][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.177263][ T5843] team0: Port device team_slave_1 added [ 87.567809][ T5847] team0: Port device team_slave_0 added [ 87.699223][ T5846] team0: Port device team_slave_0 added [ 87.701896][ T5847] team0: Port device team_slave_1 added [ 87.718364][ T5839] hsr_slave_0: entered promiscuous mode [ 87.719954][ T5839] hsr_slave_1: entered promiscuous mode [ 87.721941][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.721950][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.721963][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.808146][ T5846] team0: Port device team_slave_1 added [ 87.888849][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.888859][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.888872][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.330865][ T5842] hsr_slave_0: entered promiscuous mode [ 88.331640][ T5842] hsr_slave_1: entered promiscuous mode [ 88.332330][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 88.332418][ T5842] Cannot create hsr debugfs directory [ 88.414708][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.414723][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.414743][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.443328][ T5158] Bluetooth: hci0: command tx timeout [ 88.507301][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.507317][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.507338][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.510044][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.510057][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.510079][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.543870][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.543885][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.543908][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.683051][ T5158] Bluetooth: hci1: command tx timeout [ 88.763085][ T5158] Bluetooth: hci2: command tx timeout [ 88.843063][ T5841] Bluetooth: hci4: command tx timeout [ 88.843152][ T5158] Bluetooth: hci3: command tx timeout [ 88.934861][ T5843] hsr_slave_0: entered promiscuous mode [ 88.936263][ T5843] hsr_slave_1: entered promiscuous mode [ 88.937119][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 88.937140][ T5843] Cannot create hsr debugfs directory [ 89.517198][ T5847] hsr_slave_0: entered promiscuous mode [ 89.518001][ T5847] hsr_slave_1: entered promiscuous mode [ 89.518543][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 89.518563][ T5847] Cannot create hsr debugfs directory [ 89.546941][ T5846] hsr_slave_0: entered promiscuous mode [ 89.548229][ T5846] hsr_slave_1: entered promiscuous mode [ 89.549239][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 89.549260][ T5846] Cannot create hsr debugfs directory [ 90.524222][ T5158] Bluetooth: hci0: command tx timeout [ 90.771989][ T5158] Bluetooth: hci1: command tx timeout [ 90.843227][ T5158] Bluetooth: hci2: command tx timeout [ 90.871236][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.912343][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.923487][ T5158] Bluetooth: hci3: command tx timeout [ 90.923516][ T5158] Bluetooth: hci4: command tx timeout [ 90.932718][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.996873][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.121481][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.154235][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.199975][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.248929][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.409652][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.453123][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.490023][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.529965][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.711137][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.755947][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.799432][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.862710][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.035915][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.051378][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.092229][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.119709][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.160600][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.226063][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.251368][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.306943][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.307610][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.362271][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.362441][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.369790][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.427667][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.427799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.482991][ T1488] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.483134][ T1488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.526475][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.658562][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.672653][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.711498][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.712021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.794058][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.794202][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.856409][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.912219][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.932478][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.932626][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.999437][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.000059][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.112690][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.187047][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.187202][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.239603][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.240396][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.379212][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.470629][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.804863][ T5847] veth0_vlan: entered promiscuous mode [ 93.857948][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.886888][ T5847] veth1_vlan: entered promiscuous mode [ 94.179009][ T5847] veth0_macvtap: entered promiscuous mode [ 94.210298][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.218996][ T5847] veth1_macvtap: entered promiscuous mode [ 94.229388][ T5843] veth0_vlan: entered promiscuous mode [ 94.297095][ T5843] veth1_vlan: entered promiscuous mode [ 94.306804][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.330100][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.367207][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.417779][ T1506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.420222][ T5839] veth0_vlan: entered promiscuous mode [ 94.425997][ T1506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.445159][ T1506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.458044][ T1506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.546186][ T5839] veth1_vlan: entered promiscuous mode [ 94.560288][ T5842] veth0_vlan: entered promiscuous mode [ 94.604925][ T5843] veth0_macvtap: entered promiscuous mode [ 94.654412][ T5843] veth1_macvtap: entered promiscuous mode [ 94.740690][ T5842] veth1_vlan: entered promiscuous mode [ 94.788747][ T5846] veth0_vlan: entered promiscuous mode [ 94.862552][ T1506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.862577][ T1506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.891985][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.919033][ T5846] veth1_vlan: entered promiscuous mode [ 94.937766][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.939095][ T5839] veth0_macvtap: entered promiscuous mode [ 95.004916][ T5839] veth1_macvtap: entered promiscuous mode [ 95.010040][ T1161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.012522][ T1506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.012538][ T1506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.042962][ T1161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069009][ T1161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.105478][ T1506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.162586][ T5842] veth0_macvtap: entered promiscuous mode [ 95.282475][ T5842] veth1_macvtap: entered promiscuous mode [ 95.299415][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.397718][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.418871][ T5846] veth0_macvtap: entered promiscuous mode [ 95.530856][ T5846] veth1_macvtap: entered promiscuous mode [ 95.542140][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.561704][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.574805][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.576536][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.576552][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.604255][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.609222][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.867288][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.689250][ T5959] binder: 5958:5959 ioctl 4018620d 0 returned -22 [ 96.716218][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.716236][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.742101][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.790054][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.839980][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.849774][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.849846][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.935248][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.093035][ T1506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.106636][ T1506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.106652][ T1506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.135443][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.144545][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.168155][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.395870][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.395890][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.910279][ T1506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.910297][ T1506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.961124][ T5963] mmap: syz.3.4 (5963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.143005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.344583][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.344603][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.645644][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.645664][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.871326][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.871345][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.893214][ T5979] block device autoloading is deprecated and will be removed. [ 100.247298][ T5983] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 100.302886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.302928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.303415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.632939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.702954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.442908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.502914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.692928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.702946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.120375][ T6013] : Can't lookup blockdev [ 103.125612][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 103.300649][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.300665][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.300686][ T45] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 103.300697][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.400956][ T45] usb 2-1: config 0 descriptor?? [ 103.499795][ T6020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.501974][ T6020] Zero length message leads to an empty skb [ 105.028943][ T10] usb 2-1: USB disconnect, device number 2 [ 105.784502][ T995] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.461332][ T6033] binder: BINDER_SET_CONTEXT_MGR already set [ 106.461391][ T6033] binder: 6028:6033 ioctl 4018620d 200000004a80 returned -16 [ 106.878122][ T995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.878138][ T995] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.878158][ T995] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.878169][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.881440][ T995] usb 5-1: config 0 descriptor?? [ 107.240424][ T6038] bridge0: entered promiscuous mode [ 107.240654][ T6038] macvlan2: entered promiscuous mode [ 107.344304][ T5914] usb 5-1: USB disconnect, device number 2 [ 107.679928][ T6043] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 109.588958][ T6064] binder: BINDER_SET_CONTEXT_MGR already set [ 109.588968][ T6064] binder: 6063:6064 ioctl 4018620d 200000000040 returned -16 [ 111.902045][ T5841] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 111.902115][ T5841] Bluetooth: hci1: adv larger than maximum supported [ 111.902160][ T5841] Bluetooth: hci1: Malformed LE Event: 0x0d [ 115.331611][ T6080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.32'. [ 117.566090][ T6100] : Can't lookup blockdev [ 119.900644][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.067723][ T5914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.067811][ T5914] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.067831][ T5914] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.083764][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.083792][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.083808][ T5914] usb 3-1: Product: syz [ 120.083821][ T5914] usb 3-1: Manufacturer: syz [ 120.083833][ T5914] usb 3-1: SerialNumber: syz [ 120.219471][ T5914] hub 3-1:1.0: bad descriptor, ignoring hub [ 120.219494][ T5914] hub 3-1:1.0: probe with driver hub failed with error -5 [ 120.358949][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 120.518445][ T5921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.598168][ T5914] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 120.732211][ T5921] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.732238][ T5921] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 120.732254][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.766035][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 120.766066][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 120.804871][ T5921] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.804963][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.804980][ T5921] usb 1-1: Product: syz [ 120.804991][ T5921] usb 1-1: Manufacturer: syz [ 120.913777][ T5921] cdc_wdm 1-1:1.0: skipping garbage [ 120.913797][ T5921] cdc_wdm 1-1:1.0: skipping garbage [ 120.914681][ T5921] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 120.935001][ T5914] usb 3-1: USB disconnect, device number 2 [ 121.529383][ T5921] usb 1-1: USB disconnect, device number 2 [ 121.539768][ T5914] usblp0: removed [ 122.006112][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.196337][ T5914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.196365][ T5914] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.196386][ T5914] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.200853][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 122.200870][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.200880][ T5914] usb 3-1: Product: syz [ 122.200886][ T5914] usb 3-1: Manufacturer: syz [ 122.200893][ T5914] usb 3-1: SerialNumber: syz [ 122.273029][ T5921] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 122.513228][ T5914] hub 3-1:1.0: bad descriptor, ignoring hub [ 122.513882][ T5914] hub 3-1:1.0: probe with driver hub failed with error -5 [ 122.528517][ T5914] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 123.372966][ T5914] usb 3-1: USB disconnect, device number 3 [ 123.420597][ T5914] usblp0: removed [ 123.459149][ T5921] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.459904][ T5921] usb 2-1: not running at top speed; connect to a high speed hub [ 123.461466][ T5921] usb 2-1: config 23 has an invalid interface number: 71 but max is 0 [ 123.461479][ T5921] usb 2-1: config 23 has no interface number 0 [ 123.495134][ T5921] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice= 9.30 [ 123.495151][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.495166][ T5921] usb 2-1: Product: syz [ 123.495173][ T5921] usb 2-1: Manufacturer: syz [ 123.495179][ T5921] usb 2-1: SerialNumber: syz [ 123.926786][ T5921] usb_ehset_test 2-1:23.71: probe with driver usb_ehset_test failed with error -32 [ 125.452033][ T6157] nbd: must specify a device to reconfigure [ 130.843028][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.016319][ T5913] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.016336][ T5913] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 131.016345][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.016374][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 131.016387][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 131.017892][ T5913] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.017907][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.017916][ T5913] usb 4-1: Product: syz [ 131.017923][ T5913] usb 4-1: Manufacturer: syz [ 131.196233][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 131.196252][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 131.196352][ T5913] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 132.044390][ T5913] usb 4-1: USB disconnect, device number 2 [ 132.452008][ T995] usb 2-1: USB disconnect, device number 3 [ 133.376977][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.377075][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.600340][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.854247][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.121023][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.161839][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.923509][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 137.945333][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.331977][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.657181][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.113017][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.587165][ T6278] input: syz0 as /devices/virtual/input/input5 [ 143.609667][ T995] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.803465][ T995] usb 3-1: Using ep0 maxpacket: 32 [ 143.813125][ T995] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 143.813141][ T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.813151][ T995] usb 3-1: Product: syz [ 143.813157][ T995] usb 3-1: Manufacturer: syz [ 143.813164][ T995] usb 3-1: SerialNumber: syz [ 143.889101][ T995] usb 3-1: config 0 descriptor?? [ 143.892354][ T995] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 144.614234][ T6320] block nbd0: Attempted send on invalid socket [ 144.614356][ T6320] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 145.026683][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 145.854239][ T995] gspca_ov534_9: reg_r err -71 [ 146.123326][ T995] gspca_ov534_9: Unknown sensor 0000 [ 146.129123][ T995] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 146.455806][ T995] usb 3-1: USB disconnect, device number 4 [ 149.915670][ T6347] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 150.335449][ T6355] wlan0 speed is unknown, defaulting to 1000 [ 150.335573][ T6355] wlan0 speed is unknown, defaulting to 1000 [ 150.397790][ T6355] wlan0 speed is unknown, defaulting to 1000 [ 150.411531][ T6355] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.425289][ T6355] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.891566][ T6355] wlan0 speed is unknown, defaulting to 1000 [ 150.894636][ T6355] wlan0 speed is unknown, defaulting to 1000 [ 150.897285][ T6355] wlan0 speed is unknown, defaulting to 1000 [ 150.900201][ T6355] wlan0 speed is unknown, defaulting to 1000 [ 150.903171][ T6355] wlan0 speed is unknown, defaulting to 1000 [ 151.704199][ T6359] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 153.105030][ T6367] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 157.413145][ T5921] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.615414][ T5921] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 157.615429][ T5921] usb 3-1: config 0 has no interface number 0 [ 157.619126][ T5921] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 157.619143][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.619152][ T5921] usb 3-1: Product: syz [ 157.619158][ T5921] usb 3-1: Manufacturer: syz [ 157.619165][ T5921] usb 3-1: SerialNumber: syz [ 157.638198][ T5921] usb 3-1: config 0 descriptor?? [ 157.902505][ T5921] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 158.093631][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.098906][ T5921] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 158.099005][ T5921] usb 3-1: media controller created [ 159.524433][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.654578][ T6408] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.655758][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.671930][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.498471][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.565078][ T6419] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 162.725860][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.993340][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.048445][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.282241][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.306389][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 163.306404][ T5921] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 163.600858][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.662981][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 163.663000][ T5921] Registered IR keymap rc-empty [ 163.663710][ T5921] dvb-usb: could not initialize remote control. [ 163.663720][ T5921] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 163.803419][ T5921] usb 3-1: USB disconnect, device number 5 [ 164.019371][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.217863][ T6435] fuse: root generation should be zero [ 164.309398][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.651636][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.820377][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.853193][ T5921] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 165.346654][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.977041][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.926332][ T6470] netlink: 'syz.1.126': attribute type 10 has an invalid length. [ 170.047040][ T6470] veth0_vlan: left promiscuous mode [ 170.055082][ T6470] veth0_vlan: entered promiscuous mode [ 170.060335][ T6470] team0: Device veth0_vlan failed to register rx_handler [ 171.594147][ T6484] warning: `syz.3.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.005196][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 175.121734][ T6513] ntfs3(nullb0): Primary boot signature is not NTFS. [ 175.141820][ T6513] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 175.853176][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 175.856446][ T45] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 175.856471][ T45] usb 4-1: config 0 has no interface number 0 [ 175.856522][ T45] usb 4-1: config 0 interface 12 has no altsetting 0 [ 175.859759][ T45] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 175.859785][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.859802][ T45] usb 4-1: Product: syz [ 175.859814][ T45] usb 4-1: Manufacturer: syz [ 175.859826][ T45] usb 4-1: SerialNumber: syz [ 175.923989][ T45] usb 4-1: config 0 descriptor?? [ 176.254775][ T6515] binder_alloc: 6514: binder_alloc_buf size 12384 failed, no address space [ 176.254895][ T6515] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 176.698915][ T6517] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 176.800424][ T45] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 176.800468][ T45] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 176.800476][ T45] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 176.800532][ T45] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 177.011689][ T45] usb 4-1: USB disconnect, device number 3 [ 178.192540][ T6531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.192572][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.285469][ T6531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.285500][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.096122][ T6559] overlayfs: failed lookup in lower (newroot/31, name='bus', err=-40): overlapping layers [ 184.223578][ T995] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.642991][ T995] usb 1-1: Using ep0 maxpacket: 16 [ 184.648342][ T995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.648374][ T995] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.648387][ T995] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.648405][ T995] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 184.648416][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.664518][ T995] usb 1-1: config 0 descriptor?? [ 185.636198][ T995] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 186.866225][ T37] audit: type=1326 audit(1756136110.776:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 186.866278][ T37] audit: type=1326 audit(1756136110.776:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 186.866317][ T37] audit: type=1326 audit(1756136110.776:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 186.866378][ T37] audit: type=1326 audit(1756136110.776:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 186.866417][ T37] audit: type=1326 audit(1756136110.776:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 186.866456][ T37] audit: type=1326 audit(1756136110.776:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 186.866495][ T37] audit: type=1326 audit(1756136110.776:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 186.866534][ T37] audit: type=1326 audit(1756136110.776:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 186.866572][ T37] audit: type=1326 audit(1756136110.776:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 186.866611][ T37] audit: type=1326 audit(1756136110.776:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e97aebe9 code=0x7ffc0000 [ 187.011665][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.254485][ T995] usb 1-1: USB disconnect, device number 3 [ 187.505128][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.603090][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.690162][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.911216][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.790472][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.374503][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.723000][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.760223][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.836187][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.092677][ T6602] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 190.388993][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.430209][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.464357][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.093132][ T5913] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 191.252611][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.252675][ T5913] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.272494][ T5913] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 191.273768][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.321762][ T5913] usb 5-1: config 0 descriptor?? [ 191.566234][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.878748][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.231662][ T995] usb 5-1: USB disconnect, device number 3 [ 194.036536][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.173'. [ 194.933768][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.933841][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.015850][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.994433][ T6656] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 197.293070][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 198.457017][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.770269][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.217269][ T6018] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 202.108468][ T6018] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.108517][ T6018] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.108705][ T6018] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 202.108752][ T6018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.525454][ T6018] usb 2-1: config 0 descriptor?? [ 202.544968][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 203.691634][ T995] usb 2-1: USB disconnect, device number 4 [ 205.874206][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 207.251747][ T6705] Bluetooth: hci0: command 0x0406 tx timeout [ 207.251789][ T6705] Bluetooth: hci1: command 0x0406 tx timeout [ 207.251812][ T6705] Bluetooth: hci2: command 0x0406 tx timeout [ 207.251834][ T6705] Bluetooth: hci3: command 0x0406 tx timeout [ 207.251855][ T6705] Bluetooth: hci4: command 0x0406 tx timeout [ 209.055307][ T6738] : Can't lookup blockdev [ 209.059261][ T6738] loop7: detected capacity change from 0 to 7 [ 209.459896][ T6738] Dev loop7: unable to read RDB block 7 [ 209.459932][ T6738] loop7: unable to read partition table [ 209.460070][ T6738] loop7: partition table beyond EOD, truncated [ 209.460108][ T6738] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 213.215048][ T6768] ntfs3(nullb0): Primary boot signature is not NTFS. [ 213.215218][ T6768] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 214.218977][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 215.729673][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.216'. [ 215.856783][ T6789] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 221.620726][ T5914] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 221.795021][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.795037][ T5914] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.795057][ T5914] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 221.795068][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.801132][ T5914] usb 1-1: config 0 descriptor?? [ 222.062036][ T6826] : Can't lookup blockdev [ 222.167241][ T5914] usb 1-1: USB disconnect, device number 4 [ 222.375767][ T6825] loop7: detected capacity change from 0 to 7 [ 222.531508][ T6825] Dev loop7: unable to read RDB block 7 [ 222.531560][ T6825] loop7: unable to read partition table [ 222.531799][ T6825] loop7: partition table beyond EOD, truncated [ 222.532771][ T6825] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 223.589393][ T6835] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 224.146057][ T6834] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 224.391382][ T5209] Dev loop7: unable to read RDB block 7 [ 224.391415][ T5209] loop7: unable to read partition table [ 224.391558][ T5209] loop7: partition table beyond EOD, truncated [ 225.548131][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.053817][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.396788][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.215844][ T6890] : renamed from bond_slave_0 (while UP) [ 232.125096][ T6903] sctp: [Deprecated]: syz.2.244 (pid 6903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.125096][ T6903] Use struct sctp_sack_info instead [ 232.125650][ T6903] sctp: [Deprecated]: syz.2.244 (pid 6903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.125650][ T6903] Use struct sctp_sack_info instead [ 233.207992][ T6900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.217693][ T6900] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 233.544429][ T6900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.544523][ T6900] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.850267][ T6900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.856883][ T6900] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.355681][ T6900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.363456][ T6900] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.586047][ T6900] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.586295][ T6900] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 235.242954][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 235.564748][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 235.782530][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 235.945585][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 236.485574][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 236.603567][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 237.325966][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 237.896680][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 237.963365][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 238.523476][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 238.765415][ T5158] Bluetooth: hci4: command 0x0406 tx timeout [ 247.198564][ T7016] binder: BINDER_SET_CONTEXT_MGR already set [ 247.198575][ T7016] binder: 7012:7016 ioctl 4018620d 200000000040 returned -16 [ 248.605205][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 249.992224][ T7036] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 255.810308][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.810384][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.693431][ T6468] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 260.845948][ T6468] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.845974][ T6468] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 260.846008][ T6468] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 260.846029][ T6468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.911138][ T6468] usb 2-1: config 0 descriptor?? [ 261.137567][ T9] usb 2-1: USB disconnect, device number 5 [ 265.433089][ T6091] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 265.433375][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 265.576504][ T6091] usb 4-1: device descriptor read/64, error -32 [ 265.834706][ T6091] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 265.983069][ T6091] usb 4-1: device descriptor read/64, error -71 [ 266.071686][ T6468] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 266.093389][ T6091] usb usb4-port1: attempt power cycle [ 266.857988][ T7165] binder: BINDER_SET_CONTEXT_MGR already set [ 266.858025][ T7165] binder: 7159:7165 ioctl 4018620d 200000004a80 returned -16 [ 267.149906][ T6468] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.149931][ T6468] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.149967][ T6468] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 267.149988][ T6468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.218303][ T6468] usb 3-1: config 0 descriptor?? [ 267.387653][ T6091] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 268.266340][ T6091] usb 4-1: device descriptor read/8, error -71 [ 268.389239][ T6468] usb 3-1: USB disconnect, device number 6 [ 274.173623][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 274.313046][ T31] usb 2-1: device descriptor read/64, error -71 [ 274.404950][ T7214] netlink: 'syz.0.331': attribute type 1 has an invalid length. [ 274.560017][ T7215] overlayfs: failed lookup in lower (newroot/80, name='bus', err=-40): overlapping layers [ 274.607317][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 275.023268][ T31] usb 2-1: device descriptor read/64, error -71 [ 275.139650][ T31] usb usb2-port1: attempt power cycle [ 275.420132][ T7221] : Can't lookup blockdev [ 275.473501][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 275.532663][ T31] usb 2-1: device descriptor read/8, error -71 [ 275.566391][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 275.903595][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 275.950489][ T31] usb 2-1: device descriptor read/8, error -71 [ 276.054224][ T31] usb usb2-port1: unable to enumerate USB device [ 278.794620][ T7246] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 282.108455][ T7264] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 282.494086][ T6468] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 283.198789][ T7264] overlayfs: failed lookup in lower (newroot/82, name='bus', err=-40): overlapping layers [ 284.278192][ T6468] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.278207][ T6468] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 284.278235][ T6468] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.322231][ T6468] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.322247][ T6468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.322257][ T6468] usb 2-1: Product: syz [ 284.322264][ T6468] usb 2-1: Manufacturer: syz [ 284.322271][ T6468] usb 2-1: SerialNumber: syz [ 284.400685][ T6468] cdc_mbim 2-1:1.0: skipping garbage [ 284.400703][ T6468] cdc_mbim 2-1:1.0: skipping garbage [ 284.414786][ T6468] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 284.414834][ T6468] cdc_mbim 2-1:1.0: bind() failure [ 284.585655][ T7284] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 285.391339][ T7294] : Can't lookup blockdev [ 285.392598][ T7294] loop7: detected capacity change from 0 to 7 [ 285.745908][ T995] usb 2-1: USB disconnect, device number 10 [ 285.907983][ T7294] Dev loop7: unable to read RDB block 7 [ 285.908037][ T7294] loop7: unable to read partition table [ 285.908254][ T7294] loop7: partition table beyond EOD, truncated [ 285.911212][ T7294] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 287.943242][ T7317] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 288.028752][ T7319] overlayfs: failed lookup in lower (newroot/60, name='bus', err=-40): overlapping layers [ 293.386228][ T7352] ntfs3(nullb0): Primary boot signature is not NTFS. [ 293.386390][ T7352] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 293.574701][ T7358] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 293.675710][ T7359] overlayfs: failed lookup in lower (newroot/69, name='bus', err=-40): overlapping layers [ 298.739358][ T7380] kexec: Could not allocate control_code_buffer [ 298.740422][ T7390] ubi31: attaching mtd0 [ 298.743823][ T7390] ubi31: scanning is finished [ 298.743835][ T7390] ubi31: empty MTD device detected [ 298.777521][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 300.153312][ T7403] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 300.664406][ T7390] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 300.664432][ T7390] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 300.664446][ T7390] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 300.664457][ T7390] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 300.664465][ T7390] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 300.664473][ T7390] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 300.664481][ T7390] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3318860159 [ 300.664490][ T7390] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 300.766538][ T7405] ubi31: background thread "ubi_bgt31d" started, PID 7405 [ 300.824792][ T7406] overlayfs: failed lookup in lower (newroot/69, name='bus', err=-40): overlapping layers [ 308.015849][ T7456] 9pnet_fd: Insufficient options for proto=fd [ 310.773909][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 314.654184][ T7511] 9pnet_fd: Insufficient options for proto=fd [ 317.248101][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.248174][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.501530][ T7555] 9pnet_fd: Insufficient options for proto=fd [ 326.279709][ T6468] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 326.413592][ T5914] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 326.439560][ T6468] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.439627][ T6468] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.442705][ T6468] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.442729][ T6468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.442746][ T6468] usb 4-1: Product: syz [ 326.442758][ T6468] usb 4-1: Manufacturer: syz [ 326.442770][ T6468] usb 4-1: SerialNumber: syz [ 326.583253][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 326.584919][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.584949][ T5914] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.584962][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 326.584979][ T5914] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 326.584990][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.656996][ T6468] cdc_mbim 4-1:1.0: skipping garbage [ 326.657025][ T6468] usb 4-1: selecting invalid altsetting 1 [ 326.749716][ T5914] usb 2-1: config 0 descriptor?? [ 326.785151][ T7605] tipc: Started in network mode [ 326.785179][ T7605] tipc: Node identity 7ebaa0c958e2, cluster identity 4711 [ 326.786280][ T7605] tipc: Enabled bearer , priority 0 [ 326.817285][ T5914] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 326.849476][ T7602] syzkaller0: entered promiscuous mode [ 326.849505][ T7602] syzkaller0: entered allmulticast mode [ 326.891695][ T7602] tipc: Resetting bearer [ 326.944437][ T7601] tipc: Resetting bearer [ 327.119202][ T6468] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 327.119363][ T6468] cdc_mbim 4-1:1.0: bind() failure [ 327.802193][ T6468] tipc: Node number set to 643342537 [ 328.034212][ T7601] tipc: Disabling bearer [ 328.524760][ T6091] usb 4-1: USB disconnect, device number 8 [ 328.528333][ T7610] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 328.875156][ T995] usb 2-1: USB disconnect, device number 11 [ 330.274784][ T7627] block nbd0: Attempted send on invalid socket [ 330.274800][ T7627] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 335.078823][ T7653] syz.4.457 (7653) used greatest stack depth: 17880 bytes left [ 336.763984][ T5850] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 337.035098][ T5850] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.035140][ T5850] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.037231][ T5850] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.037256][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.037271][ T5850] usb 4-1: Product: syz [ 337.037283][ T5850] usb 4-1: Manufacturer: syz [ 337.037296][ T5850] usb 4-1: SerialNumber: syz [ 337.151174][ T5850] cdc_mbim 4-1:1.0: skipping garbage [ 337.151203][ T5850] usb 4-1: selecting invalid altsetting 1 [ 337.689397][ T5850] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 337.689448][ T5850] cdc_mbim 4-1:1.0: bind() failure [ 337.956425][ T7672] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 337.956451][ T7672] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 337.957845][ T7672] vhci_hcd vhci_hcd.0: Device attached [ 338.213171][ T7679] vhci_hcd: connection closed [ 338.423182][ T7678] vhci_hcd: vhci_device speed not set [ 338.482144][ T1506] vhci_hcd: stop threads [ 338.483839][ T7678] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 338.496821][ T1506] vhci_hcd: release socket [ 338.671753][ T1506] vhci_hcd: disconnect device [ 339.595760][ T5914] usb 4-1: USB disconnect, device number 9 [ 343.434035][ T7723] tipc: Started in network mode [ 343.434063][ T7723] tipc: Node identity 62532eab9d0f, cluster identity 4711 [ 343.434283][ T7723] tipc: Enabled bearer , priority 0 [ 343.435216][ T7723] syzkaller0: entered promiscuous mode [ 343.435240][ T7723] syzkaller0: entered allmulticast mode [ 343.500353][ T7723] tipc: Resetting bearer [ 343.633142][ T7678] vhci_hcd: vhci_device speed not set [ 344.643004][ T10] tipc: Node number set to 4284231339 [ 344.800968][ T7721] tipc: Resetting bearer [ 345.705111][ T7721] tipc: Disabling bearer [ 346.353145][ T7678] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 346.577336][ T7678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.579722][ T7678] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.579764][ T7678] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 346.609485][ T7678] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.609532][ T7678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.609549][ T7678] usb 3-1: Product: syz [ 346.609561][ T7678] usb 3-1: Manufacturer: syz [ 346.609574][ T7678] usb 3-1: SerialNumber: syz [ 346.671912][ T7678] cdc_mbim 3-1:1.0: skipping garbage [ 347.498338][ T7747] ntfs3(nullb0): Primary boot signature is not NTFS. [ 347.498489][ T7747] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 347.792518][ T7678] cdc_mbim 3-1:1.0: bind() failure [ 347.834375][ T7678] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 347.834420][ T7678] cdc_ncm 3-1:1.1: bind() failure [ 348.375090][ T6468] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 348.401536][ T5914] usb 3-1: USB disconnect, device number 7 [ 348.506113][ T6468] usb 5-1: device descriptor read/64, error -71 [ 348.793493][ T6468] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 349.065583][ T6468] usb 5-1: device descriptor read/64, error -71 [ 349.177308][ T6468] usb usb5-port1: attempt power cycle [ 349.594943][ T6468] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 349.615826][ T6468] usb 5-1: device descriptor read/8, error -71 [ 349.853492][ T6468] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 350.025952][ T6468] usb 5-1: device descriptor read/8, error -71 [ 350.133901][ T6468] usb usb5-port1: unable to enumerate USB device [ 350.504796][ T7767] overlayfs: failed to resolve './file1': -2 [ 352.299228][ T7775] loop7: detected capacity change from 0 to 7 [ 353.317050][ T7775] Dev loop7: unable to read RDB block 7 [ 353.317117][ T7775] loop7: unable to read partition table [ 353.317262][ T7775] loop7: partition table beyond EOD, truncated [ 353.318157][ T7775] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 354.424276][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 354.577520][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 354.577538][ T10] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 354.577547][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 354.577579][ T10] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 354.577591][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 354.577603][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 354.579293][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.579308][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.579318][ T10] usb 4-1: Product: syz [ 354.579324][ T10] usb 4-1: Manufacturer: syz [ 354.595498][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 354.595510][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 354.595569][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 354.859409][ T6468] usb 4-1: USB disconnect, device number 10 [ 355.395740][ T7794] [ 355.395756][ T7794] ====================================================== [ 355.395761][ T7794] WARNING: possible circular locking dependency detected [ 355.395772][ T7794] syzkaller #0 Not tainted [ 355.395778][ T7794] ------------------------------------------------------ [ 355.395781][ T7794] syz.1.495/7794 is trying to acquire lock: [ 355.395788][ T7794] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 355.395825][ T7794] [ 355.395825][ T7794] but task is already holding lock: [ 355.395829][ T7794] ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 355.395851][ T7794] [ 355.395851][ T7794] which lock already depends on the new lock. [ 355.395851][ T7794] [ 355.395855][ T7794] [ 355.395855][ T7794] the existing dependency chain (in reverse order) is: [ 355.395859][ T7794] [ 355.395859][ T7794] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 355.395871][ T7794] lock_acquire+0x120/0x360 [ 355.395884][ T7794] rt_write_lock+0x6a/0x110 [ 355.395892][ T7794] smc_hash_sk+0x8f/0x2a0 [ 355.395900][ T7794] smc_sk_init+0x5a1/0x7f0 [ 355.395908][ T7794] __smc_create+0x10d/0x280 [ 355.395919][ T7794] __sock_create+0x4b3/0x9f0 [ 355.395928][ T7794] __sys_socket+0xd7/0x1b0 [ 355.395936][ T7794] __x64_sys_socket+0x7a/0x90 [ 355.395945][ T7794] do_syscall_64+0xfa/0x3b0 [ 355.395956][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.395965][ T7794] [ 355.395965][ T7794] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 355.395977][ T7794] validate_chain+0xb9b/0x2140 [ 355.395989][ T7794] __lock_acquire+0xab9/0xd20 [ 355.395998][ T7794] reacquire_held_locks+0x127/0x1d0 [ 355.396010][ T7794] lock_release+0x1b4/0x3e0 [ 355.396019][ T7794] __local_bh_enable_ip+0x10c/0x270 [ 355.396029][ T7794] sock_i_ino+0xa9/0xc0 [ 355.396040][ T7794] smc_diag_dump_proto+0xa4c/0x1fb0 [ 355.396048][ T7794] smc_diag_dump+0x27/0xa0 [ 355.396056][ T7794] netlink_dump+0x6e4/0xe90 [ 355.396065][ T7794] __netlink_dump_start+0x5cb/0x7e0 [ 355.396074][ T7794] smc_diag_handler_dump+0x178/0x210 [ 355.396083][ T7794] sock_diag_rcv_msg+0x4c9/0x600 [ 355.396091][ T7794] netlink_rcv_skb+0x205/0x470 [ 355.396100][ T7794] netlink_unicast+0x843/0xa10 [ 355.396107][ T7794] netlink_sendmsg+0x805/0xb30 [ 355.396117][ T7794] __sock_sendmsg+0x219/0x270 [ 355.396124][ T7794] ____sys_sendmsg+0x508/0x820 [ 355.396135][ T7794] ___sys_sendmsg+0x21f/0x2a0 [ 355.396145][ T7794] __x64_sys_sendmsg+0x1a1/0x260 [ 355.396155][ T7794] do_syscall_64+0xfa/0x3b0 [ 355.396165][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.396173][ T7794] [ 355.396173][ T7794] other info that might help us debug this: [ 355.396173][ T7794] [ 355.396177][ T7794] Possible unsafe locking scenario: [ 355.396177][ T7794] [ 355.396179][ T7794] CPU0 CPU1 [ 355.396182][ T7794] ---- ---- [ 355.396185][ T7794] rlock(smc_v4_hashinfo.lock); [ 355.396191][ T7794] lock((softirq_ctrl.lock)); [ 355.396197][ T7794] lock(smc_v4_hashinfo.lock); [ 355.396204][ T7794] lock((softirq_ctrl.lock)); [ 355.396210][ T7794] [ 355.396210][ T7794] *** DEADLOCK *** [ 355.396210][ T7794] [ 355.396212][ T7794] 3 locks held by syz.1.495/7794: [ 355.396217][ T7794] #0: ffff88805f102908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 355.396240][ T7794] #1: ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 355.396262][ T7794] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 355.396282][ T7794] [ 355.396282][ T7794] stack backtrace: [ 355.396298][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.1.495 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 355.396309][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.396318][ T7794] Call Trace: [ 355.396322][ T7794] [ 355.396326][ T7794] dump_stack_lvl+0x189/0x250 [ 355.396340][ T7794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.396353][ T7794] ? __pfx__printk+0x10/0x10 [ 355.396363][ T7794] ? print_lock_name+0xde/0x100 [ 355.396373][ T7794] print_circular_bug+0x2ee/0x310 [ 355.396383][ T7794] check_noncircular+0x134/0x160 [ 355.396397][ T7794] validate_chain+0xb9b/0x2140 [ 355.396413][ T7794] ? rcu_is_watching+0x15/0xb0 [ 355.396427][ T7794] ? trace_irq_disable+0x37/0x110 [ 355.396438][ T7794] ? preempt_schedule_irq+0xde/0x150 [ 355.396449][ T7794] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 355.396461][ T7794] __lock_acquire+0xab9/0xd20 [ 355.396474][ T7794] reacquire_held_locks+0x127/0x1d0 [ 355.396487][ T7794] ? __local_bh_disable_ip+0x264/0x400 [ 355.396499][ T7794] lock_release+0x1b4/0x3e0 [ 355.396513][ T7794] ? __local_bh_enable_ip+0x100/0x270 [ 355.396524][ T7794] __local_bh_enable_ip+0x10c/0x270 [ 355.396534][ T7794] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 355.396547][ T7794] ? rt_read_unlock+0x65/0xa0 [ 355.396556][ T7794] ? sock_i_ino+0x24/0xc0 [ 355.396568][ T7794] sock_i_ino+0xa9/0xc0 [ 355.396579][ T7794] smc_diag_dump_proto+0xa4c/0x1fb0 [ 355.396594][ T7794] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 355.396605][ T7794] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 355.396620][ T7794] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 355.396643][ T7794] ? __phys_addr+0xd3/0x180 [ 355.396657][ T7794] ? __kasan_kmalloc_large+0x85/0xa0 [ 355.396669][ T7794] ? rcu_is_watching+0x15/0xb0 [ 355.396682][ T7794] ? rcu_is_watching+0x15/0xb0 [ 355.396694][ T7794] ? trace_kmalloc+0x1f/0xd0 [ 355.396705][ T7794] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 355.396718][ T7794] ? __build_skb_around+0x257/0x3e0 [ 355.396730][ T7794] smc_diag_dump+0x27/0xa0 [ 355.396740][ T7794] netlink_dump+0x6e4/0xe90 [ 355.396757][ T7794] ? __pfx_netlink_dump+0x10/0x10 [ 355.396766][ T7794] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 355.396778][ T7794] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.396794][ T7794] __netlink_dump_start+0x5cb/0x7e0 [ 355.396806][ T7794] smc_diag_handler_dump+0x178/0x210 [ 355.396817][ T7794] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 355.396828][ T7794] ? __pfx_smc_diag_dump+0x10/0x10 [ 355.396838][ T7794] ? sock_diag_lock_handler+0x19/0x290 [ 355.396848][ T7794] ? sock_diag_lock_handler+0x19/0x290 [ 355.396859][ T7794] sock_diag_rcv_msg+0x4c9/0x600 [ 355.396869][ T7794] netlink_rcv_skb+0x205/0x470 [ 355.396880][ T7794] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 355.396889][ T7794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.396901][ T7794] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.396913][ T7794] netlink_unicast+0x843/0xa10 [ 355.396924][ T7794] ? __pfx_netlink_unicast+0x10/0x10 [ 355.396933][ T7794] ? netlink_sendmsg+0x642/0xb30 [ 355.396942][ T7794] ? skb_put+0x11b/0x210 [ 355.396954][ T7794] netlink_sendmsg+0x805/0xb30 [ 355.396965][ T7794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.396977][ T7794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.396986][ T7794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.396996][ T7794] __sock_sendmsg+0x219/0x270 [ 355.397006][ T7794] ____sys_sendmsg+0x508/0x820 [ 355.397018][ T7794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.397032][ T7794] ? import_iovec+0x74/0xa0 [ 355.397042][ T7794] ___sys_sendmsg+0x21f/0x2a0 [ 355.397054][ T7794] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.397072][ T7794] ? __fget_files+0x2a/0x420 [ 355.397084][ T7794] ? __fget_files+0x3a6/0x420 [ 355.397097][ T7794] __x64_sys_sendmsg+0x1a1/0x260 [ 355.397109][ T7794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.397123][ T7794] ? rcu_is_watching+0x15/0xb0 [ 355.397136][ T7794] ? do_syscall_64+0xbe/0x3b0 [ 355.397148][ T7794] do_syscall_64+0xfa/0x3b0 [ 355.397159][ T7794] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.397169][ T7794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.397178][ T7794] ? clear_bhb_loop+0x60/0xb0 [ 355.397187][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.397196][ T7794] RIP: 0033:0x7f3f1fbaebe9 [ 355.397209][ T7794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.397217][ T7794] RSP: 002b:00007f3f1de0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.397228][ T7794] RAX: ffffffffffffffda RBX: 00007f3f1fdd5fa0 RCX: 00007f3f1fbaebe9 [ 355.397236][ T7794] RDX: 0000000000008004 RSI: 0000200000000040 RDI: 0000000000000005 [ 355.397242][ T7794] RBP: 00007f3f1fc31e19 R08: 0000000000000000 R09: 0000000000000000 [ 355.397248][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.397254][ T7794] R13: 00007f3f1fdd6038 R14: 00007f3f1fdd5fa0 R15: 00007ffccd0d1578 [ 355.397264][ T7794] [ 356.513042][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 356.664541][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.664589][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.664620][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.666429][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.666453][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.666470][ T10] usb 3-1: Product: syz [ 356.666483][ T10] usb 3-1: Manufacturer: syz [ 356.666495][ T10] usb 3-1: SerialNumber: syz [ 356.672077][ T10] cdc_mbim 3-1:1.0: skipping garbage [ 357.677729][ T10] cdc_mbim 3-1:1.0: bind() failure [ 357.680137][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 357.680156][ T10] cdc_ncm 3-1:1.1: bind() failure [ 358.284242][ T5913] usb 3-1: USB disconnect, device number 8