last executing test programs: 27.508429245s ago: executing program 1 (id=150): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x180680, 0x0, 0xffffffffffffff2a, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r4], 0x38}}, 0x0) 23.381828399s ago: executing program 1 (id=154): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740), 0x0, 0x2004001) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x8000000000001) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 21.714094503s ago: executing program 2 (id=156): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20004010) r2 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000740)={0xb467d103e8338fee}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x101) epoll_pwait2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 21.160200942s ago: executing program 0 (id=158): syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x20004040) r1 = getpgrp(0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) gettid() r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$vsock_stream(0x28, 0x1, 0x28) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x827f00) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r5, 0x5501) 19.540979264s ago: executing program 0 (id=159): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0xf11, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4) open(0x0, 0x2000, 0x18) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b675bc82850000002d000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) 16.428107845s ago: executing program 0 (id=162): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x180680, 0x0, 0xffffffffffffff2a, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r4], 0x38}}, 0x0) 16.417651536s ago: executing program 2 (id=163): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'bridge0\x00', {}, 0x3d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r6 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r6, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) 14.890338386s ago: executing program 2 (id=164): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000005c0)={[{@minixdf}, {@quota}, {@usrjquota}, {@noauto_da_alloc}, {@prjquota}], [{@uid_lt={'uid<', r0}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414150000000000000000000000000000000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c000000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x639) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x22048, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r6, r6) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) fsmount(r7, 0x0, 0x0) 14.057174533s ago: executing program 1 (id=166): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0xd, 0x440000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 12.270402541s ago: executing program 0 (id=167): syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x20004040) r1 = getpgrp(0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) gettid() r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$vsock_stream(0x28, 0x1, 0x28) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x827f00) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r5, 0x5501) 10.518988358s ago: executing program 2 (id=169): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "e800dfa9"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000800)={0x1c, &(0x7f00000002c0)={0x40, 0x1, 0x79, "b1c8a61a66b559e6097cfc6883e64b489017031b9ff7527a34996820b0e52059520d5613e31a616465ba23cbe960a9a1904f432b455729ac60409a818b6e737831ac0a6fb600e355223abd1df9bf060f8018f93f25308b9a4816f3212a95e5b0683f52a5af2334b92498d995861a00618f3fec107599c3213c"}, 0x0, &(0x7f00000007c0)={0x21, 0x0, 0x1, "fe"}}) 10.474094759s ago: executing program 1 (id=170): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 9.179736991s ago: executing program 3 (id=172): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r5, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) 7.479218066s ago: executing program 0 (id=173): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x3b, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.236109254s ago: executing program 1 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740), 0x0, 0x2004001) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x8000000000001) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9805837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8afef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb246ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4030b34c27a2f7fcd66ddde687c1255d0779ffec72ada8598e222d66bc90dacf240fe12755f780048804400f49d77b81534a8f1b0de80c49c7d9c87888801d819daaddb0c57513fdf7d0e942a799143dccc213cac7e8092d691a7894678472ba1970b4d6e393158dafeebae0a9d89e6e639115ddc7b54139b5b47f3d583c16b4d2da0a5c7b5ea751d03cc71fdd61140d66ff1ccfcbe83e40156854900"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.21402019s ago: executing program 3 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050000000040a71e070900000000000109022400010000800009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904", @ANYRES16=r0], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x9f, "860472e009cfbced0ba93b9cd915a65e43bb6237ffbd081475671e08ccb5bbea6c58c86afd4b91506802539f4c3b0d7253ac66b40f1d318237c6af3da78c0a40c3de44867c724f1f8d7a5860bcc612fcdbbddceb271eb4fe0c58000000000000000810eb81b3c18412fb1ff25e121e1266628bb786e6f442940e24e5e43a74688e2d1bef078cb57ad3cb82c3b5095cd5fa7ca63dc4c0f3ed2c10ff3129ca18"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="db18562cfa77425d1ceb85926b86b88a63a18bcfdc45a12311fd88581ec96f294cbbe094c4288942916c081c3890e9bffc248b0ffdc72c1b5e356262f068cf3240eaeb731462ee22a48013aa8522d7c649dab94156ca0265a75b885a844194ff33d31d056d26ad51d0e4b8d24a5e639340689eec5c78a7d39d1089747e5a8cbe9ce9a8377de5b49ec992d5620e6bb4a54550ba838945fcc46c6ac3c6af6c7150c798fd4193837cae553322a33f9f2edd457a6ae61423e4cd4900d769bdd379f9501737285a0284de02a4bc2431ceb2b129fea9607a0b62ffb5d7a66a3253da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x0) 4.334094628s ago: executing program 1 (id=176): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201e10000000040050be01700000000000109022400010000000009040200010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "d934a18c"}, @main=@item_4={0x3, 0x0, 0xb, "522908d8"}]}}, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x3617e52f46362eb, 0x22, 0x1, 0x9}, {0x9, 0x5, 0x2, 0x2, 0x400, 0x0, 0x1, 0xff}, {0x9, 0x5, 0x6, 0x3, 0x8, 0x3, 0x8, 0x5}}}}}}]}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r2, 0x0, 0x0) r4 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x30, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x15c, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0xff, 0x7, {0x7, 0x25, 0x1, 0x0, 0x3, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0xe, {0x7, 0x25, 0x1, 0x8, 0x4, 0xe}}}}}}}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r4) syz_usb_connect(0x1, 0x24, &(0x7f0000000d80)={{0x12, 0x1, 0x201, 0x13, 0x8, 0xe3, 0x8, 0x4b3, 0x4543, 0xff19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xd, 0x30, 0x9, "", [{{0x9, 0x4, 0x71, 0x1, 0x0, 0x69, 0x4c, 0x33, 0xf8}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x8d, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 3.528292934s ago: executing program 3 (id=177): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000005c0)={[{@minixdf}, {@quota}, {@usrjquota}, {@noauto_da_alloc}, {@prjquota}], [{@uid_lt={'uid<', r0}}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414150000000000000000000000000000000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c000000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x639) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x22048, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r6, r6) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) fsmount(r7, 0x0, 0x0) 2.343225113s ago: executing program 3 (id=178): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)={0x0, 0x6, 0x4, "6c5ebe93"}, 0x0, 0x0}) 2.338946834s ago: executing program 2 (id=179): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001c707af20d6124404e0c60102030109021200015b9e00080904"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x0, 0x6, 0x20}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x429}}]}) 1.676293855s ago: executing program 0 (id=180): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)={0x0, 0x6}, 0x0, 0x0}) 1.312576547s ago: executing program 3 (id=181): syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x20004040) r1 = getpgrp(0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) gettid() r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$vsock_stream(0x28, 0x1, 0x28) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x827f00) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r5, 0x5501) 339.972508ms ago: executing program 3 (id=182): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='Z') syz_open_dev$evdev(0x0, 0x1, 0x224081) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 0s ago: executing program 2 (id=183): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f77010000002ad0068370"], 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 77.875822][ T5763] cgroup: Unknown subsys name 'net' [ 78.008828][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.753025][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.506113][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.525373][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.530430][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.533881][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.543131][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.547707][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.558276][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.562118][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.569838][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.579011][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.583261][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.590301][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.598697][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.604040][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.610899][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.625733][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.625940][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.633651][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.640890][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.655062][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.662629][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.670957][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.679051][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.691690][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.288934][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.415735][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 82.453600][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 82.567996][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 82.578542][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.586520][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.594399][ T5779] bridge_slave_0: entered allmulticast mode [ 82.601325][ T5779] bridge_slave_0: entered promiscuous mode [ 82.627846][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.635183][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.642746][ T5779] bridge_slave_1: entered allmulticast mode [ 82.649833][ T5779] bridge_slave_1: entered promiscuous mode [ 82.744057][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.756394][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.763880][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.771051][ T5781] bridge_slave_0: entered allmulticast mode [ 82.778127][ T5781] bridge_slave_0: entered promiscuous mode [ 82.802248][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.813366][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.820550][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.827998][ T5781] bridge_slave_1: entered allmulticast mode [ 82.835128][ T5781] bridge_slave_1: entered promiscuous mode [ 82.857134][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.864819][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.872742][ T5780] bridge_slave_0: entered allmulticast mode [ 82.879573][ T5780] bridge_slave_0: entered promiscuous mode [ 82.920964][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.930314][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.938389][ T5780] bridge_slave_1: entered allmulticast mode [ 82.947841][ T5780] bridge_slave_1: entered promiscuous mode [ 82.965714][ T5779] team0: Port device team_slave_0 added [ 82.976930][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.998434][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.017453][ T5779] team0: Port device team_slave_1 added [ 83.057208][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.071182][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.103309][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.110526][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.117992][ T5783] bridge_slave_0: entered allmulticast mode [ 83.125805][ T5783] bridge_slave_0: entered promiscuous mode [ 83.148243][ T5781] team0: Port device team_slave_0 added [ 83.155594][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.163110][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.189377][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.212225][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.219372][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.229891][ T5783] bridge_slave_1: entered allmulticast mode [ 83.236989][ T5783] bridge_slave_1: entered promiscuous mode [ 83.256609][ T5781] team0: Port device team_slave_1 added [ 83.274547][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.284288][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.310911][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.324883][ T5780] team0: Port device team_slave_0 added [ 83.337643][ T5780] team0: Port device team_slave_1 added [ 83.376492][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.415159][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.424725][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.451628][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.465878][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.472901][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.499148][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.512461][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.535367][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.543027][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.569527][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.617868][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.627097][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.653370][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.674983][ T5783] team0: Port device team_slave_0 added [ 83.696969][ T5779] hsr_slave_0: entered promiscuous mode [ 83.703433][ T5789] Bluetooth: hci3: command tx timeout [ 83.709661][ T5779] hsr_slave_1: entered promiscuous mode [ 83.711896][ T5789] Bluetooth: hci1: command tx timeout [ 83.728332][ T5783] team0: Port device team_slave_1 added [ 83.770725][ T5781] hsr_slave_0: entered promiscuous mode [ 83.777206][ T5781] hsr_slave_1: entered promiscuous mode [ 83.783552][ T51] Bluetooth: hci0: command tx timeout [ 83.789512][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.789603][ T5789] Bluetooth: hci2: command tx timeout [ 83.797578][ T5781] Cannot create hsr debugfs directory [ 83.872634][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.879619][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.906336][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.931796][ T5780] hsr_slave_0: entered promiscuous mode [ 83.938388][ T5780] hsr_slave_1: entered promiscuous mode [ 83.945443][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.954144][ T5780] Cannot create hsr debugfs directory [ 83.967462][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.977146][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.007767][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.152366][ T5783] hsr_slave_0: entered promiscuous mode [ 84.159075][ T5783] hsr_slave_1: entered promiscuous mode [ 84.165794][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.173529][ T5783] Cannot create hsr debugfs directory [ 84.453928][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.474015][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.486104][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.518592][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.557530][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.576430][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.587927][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.620059][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.699818][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.709647][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.721082][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.757221][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.811058][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.823213][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.834139][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.865138][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.956425][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.999432][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.020640][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.046455][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.053916][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.086116][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.093341][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.136387][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.185613][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.193014][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.220645][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.227873][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.257108][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.276784][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.327412][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.386958][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.398828][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.406100][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.478511][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.485734][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.523461][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.530654][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.552018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.559220][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.731162][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.782531][ T51] Bluetooth: hci3: command tx timeout [ 85.788171][ T5789] Bluetooth: hci1: command tx timeout [ 85.809127][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.862332][ T5789] Bluetooth: hci2: command tx timeout [ 85.867811][ T5789] Bluetooth: hci0: command tx timeout [ 85.881499][ T5781] veth0_vlan: entered promiscuous mode [ 85.968674][ T5781] veth1_vlan: entered promiscuous mode [ 86.013239][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.114330][ T5781] veth0_macvtap: entered promiscuous mode [ 86.155868][ T5781] veth1_macvtap: entered promiscuous mode [ 86.176351][ T5779] veth0_vlan: entered promiscuous mode [ 86.219734][ T5779] veth1_vlan: entered promiscuous mode [ 86.245058][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.258448][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.284493][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.305308][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.318803][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.328618][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.340420][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.350165][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.430197][ T5779] veth0_macvtap: entered promiscuous mode [ 86.445633][ T5779] veth1_macvtap: entered promiscuous mode [ 86.547512][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.559313][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.575884][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.599324][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.608938][ T5783] veth0_vlan: entered promiscuous mode [ 86.618012][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.626456][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.639198][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.650931][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.676857][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.690540][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.700992][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.710920][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.732729][ T5780] veth0_vlan: entered promiscuous mode [ 86.774938][ T5783] veth1_vlan: entered promiscuous mode [ 86.780693][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.796698][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.817481][ T5780] veth1_vlan: entered promiscuous mode [ 86.928773][ T5783] veth0_macvtap: entered promiscuous mode [ 86.945130][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.959253][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.971852][ T5783] veth1_macvtap: entered promiscuous mode [ 86.992254][ T787] cfg80211: failed to load regulatory.db [ 87.092088][ T5780] veth0_macvtap: entered promiscuous mode [ 87.116938][ T5846] syz.0.1[5846]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.149434][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.167974][ T5780] veth1_macvtap: entered promiscuous mode [ 87.171879][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.184686][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.197547][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.211057][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.227060][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.234067][ T5846] loop0: detected capacity change from 0 to 4096 [ 87.240909][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.273956][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.288176][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.299402][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.312682][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.326019][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.374558][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.404629][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.422031][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.431776][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.473851][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.492658][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.504141][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.515285][ T5846] EXT4-fs: Ignoring removed orlov option [ 87.521755][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.534907][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.535664][ T5846] EXT4-fs (loop0): Test dummy encryption mode enabled [ 87.561037][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.576578][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.602404][ T5846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.687511][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.702681][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.713911][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.724800][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.734789][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.767829][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.803537][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.815758][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.839990][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.849153][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.863872][ T5789] Bluetooth: hci1: command tx timeout [ 87.863884][ T51] Bluetooth: hci3: command tx timeout [ 87.875696][ T5854] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 87.886392][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.941838][ T51] Bluetooth: hci2: command tx timeout [ 87.942483][ T5789] Bluetooth: hci0: command tx timeout [ 87.983182][ T5846] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 88.215814][ T5846] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 88.225238][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.238226][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.300289][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.941462][ T5789] Bluetooth: hci1: command tx timeout [ 89.947413][ T5789] Bluetooth: hci3: command tx timeout [ 89.974485][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.997981][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.013431][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.022158][ T5789] Bluetooth: hci0: command tx timeout [ 90.027062][ T51] Bluetooth: hci2: command tx timeout [ 90.050141][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.188503][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.212465][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.607477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 92.017985][ T5877] loop1: detected capacity change from 0 to 2048 [ 92.112803][ T5877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.179355][ T5879] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 94.245085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 96.460934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 97.289866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 99.496051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 101.302224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.096252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 102.106342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 102.322457][ T5926] loop1: detected capacity change from 0 to 1024 [ 102.333806][ T5926] ======================================================= [ 102.333806][ T5926] WARNING: The mand mount option has been deprecated and [ 102.333806][ T5926] and is ignored by this kernel. Remove the mand [ 102.333806][ T5926] option from the mount to silence this warning. [ 102.333806][ T5926] ======================================================= [ 102.448808][ T5926] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 102.448808][ T5926] [ 104.307525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.317124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.385671][ T5968] loop3: detected capacity change from 0 to 764 [ 112.495057][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.907451][ T5971] loop0: detected capacity change from 0 to 8 [ 112.916766][ T5971] squashfs: Unknown parameter 'þ' [ 112.986620][ T5782] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.114147][ T6016] loop1: detected capacity change from 0 to 8 [ 120.126485][ T6016] squashfs: Unknown parameter 'þ' [ 127.282801][ T6050] loop2: detected capacity change from 0 to 8 [ 127.304519][ T6050] squashfs: Unknown parameter 'þ' [ 127.377858][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.683546][ T6082] loop1: detected capacity change from 0 to 8 [ 132.701400][ T6082] squashfs: Unknown parameter 'þ' [ 133.885545][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.886591][ T6094] ÿÿÿÿÿÿ: renamed from veth0_vlan (while UP) [ 133.905393][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.420559][ T6148] loop1: detected capacity change from 0 to 8 [ 142.461106][ T6150] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 142.493236][ T6148] squashfs: Unknown parameter 'þ' [ 142.598239][ T5782] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.670771][ T6152] syzkaller0: entered promiscuous mode [ 142.723226][ T6152] syzkaller0: entered allmulticast mode [ 149.273681][ T6189] loop0: detected capacity change from 0 to 8 [ 149.290619][ T6189] squashfs: Unknown parameter 'þ' [ 156.955219][ T6224] input: syz0 as /devices/virtual/input/input5 [ 157.953974][ T6228] loop1: detected capacity change from 0 to 128 [ 157.990775][ T6228] ext4: Unknown parameter 'uid<00000000000000000000' [ 158.079961][ T5782] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.296776][ T6242] loop0: detected capacity change from 0 to 8 [ 162.304142][ T6242] squashfs: Unknown parameter 'þ' [ 163.905958][ T5782] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.367900][ T6261] input: syz0 as /devices/virtual/input/input6 [ 168.706670][ T6267] loop2: detected capacity change from 0 to 1024 [ 168.742053][ T6267] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 168.742053][ T6267] [ 170.724954][ T6272] loop0: detected capacity change from 0 to 8 [ 170.752787][ T6272] squashfs: Unknown parameter 'þ' [ 172.714046][ T6280] netlink: 'syz.1.134': attribute type 25 has an invalid length. [ 172.732630][ T6280] netlink: 'syz.1.134': attribute type 28 has an invalid length. [ 172.912722][ T6284] loop1: detected capacity change from 0 to 128 [ 172.927190][ T6284] ext4: Unknown parameter 'uid<00000000000000000000' [ 173.927675][ T6286] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 178.860931][ T6307] loop2: detected capacity change from 0 to 1024 [ 178.909390][ T6307] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 178.909390][ T6307] [ 181.018262][ T6319] loop0: detected capacity change from 0 to 8 [ 181.025492][ T6319] squashfs: Unknown parameter 'þ' [ 185.370049][ T6336] input: syz0 as /devices/virtual/input/input7 [ 189.845047][ T6362] loop2: detected capacity change from 0 to 128 [ 189.859084][ T6362] ext4: Unknown parameter 'uid<00000000000000000000' [ 190.427828][ T6365] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 192.637678][ T6372] input: syz0 as /devices/virtual/input/input8 [ 195.413472][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.419957][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.798921][ T6406] loop2: detected capacity change from 0 to 128 [ 200.806491][ T6406] ext4: Unknown parameter 'uid<00000000000000000000' [ 200.838066][ T5154] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 201.021746][ T6310] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.576291][ T6409] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 202.552617][ T5154] usb 2-1: device descriptor read/all, error -71 [ 203.919565][ T5154] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 204.766862][ T6423] input: syz0 as /devices/virtual/input/input9 [ 205.454095][ T5154] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 205.476796][ T5154] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 205.553258][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.562130][ T5154] usb 2-1: Product: syz [ 205.567120][ T5154] usb 2-1: Manufacturer: syz [ 205.571837][ T5154] usb 2-1: SerialNumber: syz [ 205.605544][ T5154] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 205.792523][ T5154] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 205.870512][ T5154] usb 2-1: USB disconnect, device number 3 [ 207.789239][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 207.789513][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 207.795379][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 207.801603][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 208.003380][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 208.219926][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 208.235785][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.268345][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.298782][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.319995][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.342011][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.371166][ T23] usb 3-1: config 0 descriptor?? [ 208.848608][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input10 [ 208.902124][ T23] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 208.949976][ T5784] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 209.069995][ T5824] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 209.120235][ T5784] usb 1-1: device descriptor read/64, error -71 [ 209.138716][ T23] usb 3-1: USB disconnect, device number 2 [ 209.284225][ T5824] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 209.292360][ T5824] usb 2-1: config 0 has no interface number 0 [ 209.298477][ T5824] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.309596][ T5824] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.319417][ T5824] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 209.328602][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.339438][ T5824] usb 2-1: config 0 descriptor?? [ 209.400295][ T5784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 210.667628][ T5784] usb 1-1: device descriptor read/64, error -71 [ 210.820365][ T5784] usb usb1-port1: attempt power cycle [ 210.877989][ T5824] asus 0003:0B05:17E0.0002: item fetching failed at offset 5/7 [ 210.893415][ T5824] asus 0003:0B05:17E0.0002: Asus hid parse failed: -22 [ 210.903696][ T5824] asus: probe of 0003:0B05:17E0.0002 failed with error -22 [ 211.030024][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 211.068951][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.090829][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.210188][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 211.226859][ T5890] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 211.237514][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.250095][ T5784] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 211.259359][ T5890] usb 3-1: Product: syz [ 211.268690][ T5890] usb 3-1: Manufacturer: syz [ 211.273392][ T5890] usb 3-1: SerialNumber: syz [ 211.312575][ T5784] usb 1-1: device descriptor read/8, error -71 [ 211.490250][ T5890] ems_usb 3-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 211.502058][ T5890] ems_usb: probe of 3-1:91.0 failed with error -22 [ 211.517088][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.517188][ T5890] usb 3-1: USB disconnect, device number 3 [ 211.526426][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.658750][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.680369][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.680789][ T5784] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 212.733155][ T5784] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 212.750093][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.770654][ T5784] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 212.779883][ T5784] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 212.798169][ T5784] usb 1-1: Manufacturer: syz [ 212.806789][ T5784] usb 1-1: config 0 descriptor?? [ 212.888145][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.900965][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.910484][ T5784] rc_core: IR keymap rc-hauppauge not found [ 212.916437][ T5784] Registered IR keymap rc-empty [ 212.929697][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.942440][ T5784] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 212.971636][ T5784] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 212.971717][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.007621][ T8] usb 2-1: USB disconnect, device number 4 [ 213.061818][ T5784] ------------[ cut here ]------------ [ 213.067354][ T5784] usb 1-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType 78 [ 213.103153][ T5784] WARNING: CPU: 1 PID: 5784 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 213.112978][ T5784] Modules linked in: [ 213.116927][ T5784] CPU: 1 PID: 5784 Comm: kworker/1:3 Not tainted syzkaller #0 [ 213.124544][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.134832][ T5784] Workqueue: usb_hub_wq hub_event [ 213.141761][ T5784] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 213.147459][ T5784] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 213.167480][ T5784] RSP: 0018:ffffc90004516e00 EFLAGS: 00010246 [ 213.173673][ T5784] RAX: 8c3e8e2d20ee4f00 RBX: ffff888025d97100 RCX: 0000000000100000 [ 213.181809][ T5784] RDX: ffffc9001811b000 RSI: 000000000008701b RDI: 000000000008701c [ 213.189822][ T5784] RBP: 1ffff110060087c8 R08: ffffc90004516a07 R09: 1ffff920008a2d40 [ 213.197924][ T5784] R10: dffffc0000000000 R11: fffff520008a2d41 R12: dffffc0000000000 [ 213.206116][ T5784] R13: ffff888030043e40 R14: 0000000080000580 R15: ffff888142ff2820 [ 213.214584][ T5784] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 213.224022][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.230706][ T5784] CR2: 00007f9b18f91d90 CR3: 00000000314d2000 CR4: 00000000003506e0 [ 213.240579][ T5784] Call Trace: [ 213.243905][ T5784] [ 213.246891][ T5784] igorplugusb_probe+0x812/0xc60 [ 213.252500][ T5784] usb_probe_interface+0x5c9/0xb20 [ 213.257682][ T5784] ? usb_register_driver+0x3d0/0x3d0 [ 213.263118][ T5784] really_probe+0x25b/0xb20 [ 213.267675][ T5784] ? pm_runtime_barrier+0x14b/0x1c0 [ 213.273092][ T5784] __driver_probe_device+0x1ef/0x390 [ 213.278429][ T5784] driver_probe_device+0x4f/0x420 [ 213.283589][ T5784] __device_attach_driver+0x2ca/0x510 [ 213.289021][ T5784] bus_for_each_drv+0x252/0x2e0 [ 213.294096][ T5784] ? coredump_store+0x90/0x90 [ 213.298825][ T5784] ? bus_find_device+0x300/0x300 [ 213.304252][ T5784] __device_attach+0x2c2/0x420 [ 213.309069][ T5784] ? device_attach+0x20/0x20 [ 213.313839][ T5784] ? __kmem_cache_free+0xba/0x1e0 [ 213.318926][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 213.324304][ T5784] bus_probe_device+0x180/0x260 [ 213.329201][ T5784] device_add+0x88e/0xc50 [ 213.333683][ T5784] usb_set_configuration+0x1a79/0x20c0 [ 213.339236][ T5784] usb_generic_driver_probe+0x8d/0x150 [ 213.346559][ T5784] usb_probe_device+0x13d/0x270 [ 213.351807][ T5784] ? usb_register_device_driver+0x230/0x230 [ 213.357756][ T5784] really_probe+0x25b/0xb20 [ 213.362389][ T5784] ? pm_runtime_barrier+0x14b/0x1c0 [ 213.367644][ T5784] __driver_probe_device+0x1ef/0x390 [ 213.373081][ T5784] driver_probe_device+0x4f/0x420 [ 213.378166][ T5784] __device_attach_driver+0x2ca/0x510 [ 213.382134][ T5824] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.383633][ T5784] bus_for_each_drv+0x252/0x2e0 [ 213.396082][ T5784] ? coredump_store+0x90/0x90 [ 213.400892][ T5784] ? bus_find_device+0x300/0x300 [ 213.405883][ T5784] __device_attach+0x2c2/0x420 [ 213.410802][ T5784] ? device_attach+0x20/0x20 [ 213.415437][ T5784] ? __kmem_cache_free+0xba/0x1e0 [ 213.420803][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 213.426064][ T5784] bus_probe_device+0x180/0x260 [ 213.431046][ T5784] device_add+0x88e/0xc50 [ 213.435427][ T5784] usb_new_device+0xa3c/0x1660 [ 213.440331][ T5784] ? usb_disconnect+0x8a0/0x8a0 [ 213.446916][ T5784] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.452599][ T5784] ? lockdep_hardirqs_on+0x98/0x150 [ 213.457860][ T5784] hub_event+0x29bf/0x49f0 [ 213.462478][ T5784] ? hub_post_resume+0x120/0x120 [ 213.467558][ T5784] ? read_lock_is_recursive+0x20/0x20 [ 213.473070][ T5784] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.478318][ T5784] ? process_scheduled_works+0x96f/0x15d0 [ 213.484182][ T5784] ? process_scheduled_works+0x96f/0x15d0 [ 213.489952][ T5784] process_scheduled_works+0xa5d/0x15d0 [ 213.495874][ T5784] ? worker_attach_to_pool+0x380/0x380 [ 213.501501][ T5784] ? assign_work+0x3d2/0x5d0 [ 213.506240][ T5784] worker_thread+0xa55/0xfc0 [ 213.510939][ T5784] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 213.517054][ T5784] ? _raw_spin_unlock+0x40/0x40 [ 213.522011][ T5784] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 213.527989][ T5784] kthread+0x2fa/0x390 [ 213.532196][ T5784] ? pr_cont_work+0x560/0x560 [ 213.536913][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 213.541637][ T5784] ret_from_fork+0x48/0x80 [ 213.546109][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 213.552521][ T5784] ret_from_fork_asm+0x11/0x20 [ 213.557364][ T5784] [ 213.560713][ T5784] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.568035][ T5784] CPU: 1 PID: 5784 Comm: kworker/1:3 Not tainted syzkaller #0 [ 213.575525][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.585697][ T5784] Workqueue: usb_hub_wq hub_event [ 213.590783][ T5784] Call Trace: [ 213.594091][ T5784] [ 213.597047][ T5784] dump_stack_lvl+0x18c/0x250 [ 213.601772][ T5784] ? show_regs_print_info+0x20/0x20 [ 213.607007][ T5784] ? load_image+0x420/0x420 [ 213.611554][ T5784] panic+0x2dc/0x730 [ 213.615525][ T5784] ? bpf_jit_dump+0xd0/0xd0 [ 213.620075][ T5784] ? ret_from_fork_asm+0x11/0x20 [ 213.620692][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 213.630269][ T5784] __warn+0x2e0/0x470 [ 213.634274][ T5784] ? usb_submit_urb+0x10ac/0x17d0 [ 213.639338][ T5784] ? usb_submit_urb+0x10ac/0x17d0 [ 213.644378][ T5784] report_bug+0x2be/0x4f0 [ 213.648723][ T5784] ? usb_submit_urb+0x10ac/0x17d0 [ 213.653796][ T5784] ? usb_submit_urb+0x10ac/0x17d0 [ 213.658834][ T5784] ? usb_submit_urb+0x10ae/0x17d0 [ 213.663875][ T5784] handle_bug+0xcf/0x120 [ 213.668136][ T5784] exc_invalid_op+0x1a/0x50 [ 213.672827][ T5784] asm_exc_invalid_op+0x1a/0x20 [ 213.677696][ T5784] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 213.683345][ T5784] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 213.702961][ T5784] RSP: 0018:ffffc90004516e00 EFLAGS: 00010246 [ 213.709040][ T5784] RAX: 8c3e8e2d20ee4f00 RBX: ffff888025d97100 RCX: 0000000000100000 [ 213.717030][ T5784] RDX: ffffc9001811b000 RSI: 000000000008701b RDI: 000000000008701c [ 213.725011][ T5784] RBP: 1ffff110060087c8 R08: ffffc90004516a07 R09: 1ffff920008a2d40 [ 213.733164][ T5784] R10: dffffc0000000000 R11: fffff520008a2d41 R12: dffffc0000000000 [ 213.741142][ T5784] R13: ffff888030043e40 R14: 0000000080000580 R15: ffff888142ff2820 [ 213.749158][ T5784] igorplugusb_probe+0x812/0xc60 [ 213.754120][ T5784] usb_probe_interface+0x5c9/0xb20 [ 213.759257][ T5784] ? usb_register_driver+0x3d0/0x3d0 [ 213.764559][ T5784] really_probe+0x25b/0xb20 [ 213.769079][ T5784] ? pm_runtime_barrier+0x14b/0x1c0 [ 213.774306][ T5784] __driver_probe_device+0x1ef/0x390 [ 213.779781][ T5784] driver_probe_device+0x4f/0x420 [ 213.784818][ T5784] __device_attach_driver+0x2ca/0x510 [ 213.790209][ T5784] bus_for_each_drv+0x252/0x2e0 [ 213.795086][ T5784] ? coredump_store+0x90/0x90 [ 213.799778][ T5784] ? bus_find_device+0x300/0x300 [ 213.804735][ T5784] __device_attach+0x2c2/0x420 [ 213.809515][ T5784] ? device_attach+0x20/0x20 [ 213.814119][ T5784] ? __kmem_cache_free+0xba/0x1e0 [ 213.819173][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 213.824392][ T5784] bus_probe_device+0x180/0x260 [ 213.829261][ T5784] device_add+0x88e/0xc50 [ 213.833609][ T5784] usb_set_configuration+0x1a79/0x20c0 [ 213.839119][ T5784] usb_generic_driver_probe+0x8d/0x150 [ 213.844597][ T5784] usb_probe_device+0x13d/0x270 [ 213.849460][ T5784] ? usb_register_device_driver+0x230/0x230 [ 213.855363][ T5784] really_probe+0x25b/0xb20 [ 213.859876][ T5784] ? pm_runtime_barrier+0x14b/0x1c0 [ 213.865085][ T5784] __driver_probe_device+0x1ef/0x390 [ 213.870385][ T5784] driver_probe_device+0x4f/0x420 [ 213.875508][ T5784] __device_attach_driver+0x2ca/0x510 [ 213.880896][ T5784] bus_for_each_drv+0x252/0x2e0 [ 213.885752][ T5784] ? coredump_store+0x90/0x90 [ 213.890527][ T5784] ? bus_find_device+0x300/0x300 [ 213.895481][ T5784] __device_attach+0x2c2/0x420 [ 213.900257][ T5784] ? device_attach+0x20/0x20 [ 213.904862][ T5784] ? __kmem_cache_free+0xba/0x1e0 [ 213.910001][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 213.915240][ T5784] bus_probe_device+0x180/0x260 [ 213.920207][ T5784] device_add+0x88e/0xc50 [ 213.924562][ T5784] usb_new_device+0xa3c/0x1660 [ 213.929350][ T5784] ? usb_disconnect+0x8a0/0x8a0 [ 213.934302][ T5784] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.939800][ T5784] ? lockdep_hardirqs_on+0x98/0x150 [ 213.945019][ T5784] hub_event+0x29bf/0x49f0 [ 213.949500][ T5784] ? hub_post_resume+0x120/0x120 [ 213.954453][ T5784] ? read_lock_is_recursive+0x20/0x20 [ 213.959843][ T5784] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.965061][ T5784] ? process_scheduled_works+0x96f/0x15d0 [ 213.970796][ T5784] ? process_scheduled_works+0x96f/0x15d0 [ 213.976612][ T5784] process_scheduled_works+0xa5d/0x15d0 [ 213.982192][ T5784] ? worker_attach_to_pool+0x380/0x380 [ 213.987676][ T5784] ? assign_work+0x3d2/0x5d0 [ 213.992281][ T5784] worker_thread+0xa55/0xfc0 [ 213.996881][ T5784] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 214.002797][ T5784] ? _raw_spin_unlock+0x40/0x40 [ 214.007660][ T5784] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 214.013583][ T5784] kthread+0x2fa/0x390 [ 214.017662][ T5784] ? pr_cont_work+0x560/0x560 [ 214.022487][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 214.027099][ T5784] ret_from_fork+0x48/0x80 [ 214.031537][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 214.036146][ T5784] ret_from_fork_asm+0x11/0x20 [ 214.040942][ T5784] [ 214.044203][ T5784] Kernel Offset: disabled [ 214.048574][ T5784] Rebooting in 86400 seconds..