last executing test programs: 29m58.721606106s ago: executing program 3 (id=124): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x1c8, 0x260, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@private=0xa010101, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x4, 0x36, 0x1d, 0x1c, 0x23, 0x21, 0x2c, 0x7, 0x1e, 0x7, 0x2e, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x451) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x21, 0x2, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 29m58.355600415s ago: executing program 3 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000080)}, 0x20) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 29m55.796145259s ago: executing program 3 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 29m54.116866269s ago: executing program 3 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 29m46.779888223s ago: executing program 3 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xffffffde, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x1, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) 29m45.421261653s ago: executing program 3 (id=147): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_clone3(&(0x7f0000000340)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 29m29.649344972s ago: executing program 32 (id=147): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_clone3(&(0x7f0000000340)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 28m53.267229971s ago: executing program 4 (id=210): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 28m46.523389949s ago: executing program 4 (id=219): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xf0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 28m44.716480151s ago: executing program 4 (id=223): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x4) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80080000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) 28m42.894931287s ago: executing program 4 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 28m30.921070436s ago: executing program 4 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000001c0)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f00", 0x17) 28m20.438260896s ago: executing program 4 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 28m5.262740323s ago: executing program 33 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 19m28.208191426s ago: executing program 0 (id=1309): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 19m21.914651183s ago: executing program 0 (id=1317): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002"], 0xdc}}, 0x0) 19m19.221653213s ago: executing program 0 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xffffffde, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x1, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) 19m16.665842753s ago: executing program 0 (id=1322): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7888d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba255854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e457a1fa6ce4f38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e9320574a599d763952148fb2bd655e900c850243e43246c70a3b317b0d87a001ce1972a24ba7a5e294243829ead8f34d4d740101eb880d8c51bc1f55905e873c1e2c6a411503f02ef69a757e52e6db9e9566232c3323909b8ac8d2ab060db81c109b1239c44a9420d9251e6fa5", 0x1e8}, {&(0x7f0000000f00)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02", 0x3a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="3da39b2ad5defd21d90486407e56e26daf1a5c6f937e2b330e7f2a369d4e1d7d075b45ee8b8b533ce21787a34cc98008199ec62730423ed278abd4e2bb8877d253d1c697ecb90b33871b36094c4147ad2fee445105fc4e7c5c81085705792d8826b0ac7cd3b3a9cb56b879719d2f4eb8993d039207f46b2c6a38bbf2045691da", 0x80}, {&(0x7f0000000780)="1d603f8414984774e404cec66360f9d4d4892eb91e3c91a2c4020ef536748012bc2f2f78eba95703840dad561da3bf32b3e6e4459419af41b845483434f66105e4192f", 0x43}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x2a0) 19m4.37175965s ago: executing program 0 (id=1339): syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4008841}, 0xc800) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$llc(r0, &(0x7f0000000300)={0x1a, 0xf, 0x42, 0x6, 0x3, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 19m1.868511681s ago: executing program 0 (id=1341): r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 18m46.510628606s ago: executing program 34 (id=1341): r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6m13.458252829s ago: executing program 6 (id=3283): add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m11.311562153s ago: executing program 6 (id=3291): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r3, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x10000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 6m9.811645565s ago: executing program 6 (id=3295): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xf, 0x410400, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r1, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x6b, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf722}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x918d}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 6m6.987683454s ago: executing program 6 (id=3302): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000004c0)={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x1a, 0x4, 0x0, 0x0, 0x7c, 0x64, 0x0, 0x0, 0x5, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x7, 0xa4, [@multicast1]}, @cipso={0x86, 0x4b, 0x3, [{0x1, 0xe, "f58838ba4aad0a31e6559627"}, {0x5, 0x2}, {0x0, 0x12, "7e2481cd4096341ceb00000000000000"}, {0x2, 0xa, "be69a5ad4e90e907"}, {0x5, 0x11, "8272fbe9d4833ad38bd5670836a541"}, {0x0, 0x2}, {0x6, 0x4, "36ca"}, {0x2, 0x2}]}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x3, 0x0, 0xfffc}}}}}}, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000040)="1304a93c", 0x1001}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000040)) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0x9) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) kcmp(r0, r0, 0x3, r2, r3) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 6m2.544435395s ago: executing program 6 (id=3314): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678', 0x8, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e800c) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) 6m1.212417544s ago: executing program 6 (id=3317): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) 5m46.035288801s ago: executing program 35 (id=3317): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) 17.213169622s ago: executing program 8 (id=4241): creat(&(0x7f00000001c0)='./file0\x00', 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x80000001, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f0000000600)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000004c0)="3de6a0842ea9c533770d02498f4c671acaecbe8bb4", 0x15, 0x0, 0x0, 0x2}]) 13.970617716s ago: executing program 8 (id=4256): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12.240464193s ago: executing program 8 (id=4261): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x81f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 10.005489483s ago: executing program 8 (id=4266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) mq_open(&(0x7f0000003b40)='#! ', 0x40, 0x101, &(0x7f0000003b80)={0x3, 0x9, 0xfffffffffffffffb, 0x6}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0xf2ff, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, 0x0, &(0x7f0000000040)) 9.938755578s ago: executing program 1 (id=4267): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[], 0xfe44, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 7.700363204s ago: executing program 1 (id=4269): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.442560695s ago: executing program 7 (id=4272): r0 = socket(0x10, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.312157956s ago: executing program 2 (id=4274): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x19) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="400100001000130726bd70000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe88000000000000000000000000fe010000"], 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x4840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.045997584s ago: executing program 5 (id=4275): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @local}, 0x14) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140), 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(0x0, r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg0\x00'}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 5.952170073s ago: executing program 7 (id=4276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x39, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.885428648s ago: executing program 7 (id=4277): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x4}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x4, 0x2, 0xfffffffd}}, 0x4, 0x0, 0xfe}}) 5.602500055s ago: executing program 7 (id=4278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x18, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) 5.436304344s ago: executing program 2 (id=4279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @multicast1, 0x16, 0x17}}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x0) 5.039717733s ago: executing program 5 (id=4280): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000000c0)={{0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905ad0aff03f70709090587", @ANYBLOB="e2"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000740)={{0x4, 0x0, 0xc, 0x5, 'syz1\x00', 0xb}, 0x3, 0x30, 0x3, 0xffffffffffffffff, 0x0, 0x6, 'syz1\x00', 0x0}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000240)={0x80, 0x983, 0x7, 0x0, 0xe, "d4050411adef244915ba67de72f22b96c239e9", 0x3ff, 0x7}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 4.952866497s ago: executing program 7 (id=4281): memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x3) openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf89, 0x14a}}) 4.500119757s ago: executing program 1 (id=4282): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 4.388376808s ago: executing program 1 (id=4283): r0 = userfaultfd(0x80801) syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r0, &(0x7f0000000340)=0x5, 0xe35) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="55c81de53bd38420ba7915b69afa7bb2b6aa16fe994a101f8a761ec519dce4de883b61fe552f613b533205ca69b5c15ad65cfdf582192d28ca6f01441aab2f7368e8d782c154aa58b3b4db90d4dc7a7a649ccc0dcadf37825756fdc8181d978d60d6f670e7d49c756b9f26c651448180c4b5226d6a9c00040637dcb82e380e1a7581a23739"], 0x3c}}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000280)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x45dcf12457bda5dd}) 4.155499742s ago: executing program 2 (id=4284): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.433520557s ago: executing program 7 (id=4285): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 1.42391432s ago: executing program 2 (id=4286): r0 = socket(0x10, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.221811608s ago: executing program 5 (id=4287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x39, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.025862705s ago: executing program 5 (id=4288): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000000)="3903826fb7811b494557d6a624f57998eca6e1f20e3ebd8ed6ee6e8acc2f91d700df582790648160", 0x28}, {0x0}, {&(0x7f0000000340)="d7bfcd4ea542a3a1fff4addc36b1628cd715cf8d6f2c21", 0x17}, {&(0x7f0000000380)="9ccadc5b9d8d6fa10691ee4b1140c9dc7799009c2f70373098cb1afabce1500f8c738bd4448672a4ba72ad385e8508992201cc6e7dd30f689dd871fe52fe293dadc0397b098de4fd98e73540abd4f95fd2f700d31669c707f172fe3fac460deac0c627cc8ff9a379d2d1f4d9e2645860fbbb86e1d8d55ac4472e5635250c26cc483a7b8a9d943ad3d6db1577321e92ac23983c3944dc9512def4ba70043df6fdb9bdadfa11f717e84a217df52e710d937a770dae062ed6e1734f45dc130b233e182cea23b15d2201c94f95228cee26b85e777e0d0fe2101836f004ed9ea0b20022dd3301625963c2", 0xe8}, {0x0}], 0x5) socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 857.597578ms ago: executing program 1 (id=4289): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x4}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x4, 0x2, 0xfffffffd}}, 0x4, 0x0, 0xfe}}) 823.391356ms ago: executing program 2 (id=4290): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @local}, 0x14) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140), 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(0x0, r2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 806.743065ms ago: executing program 5 (id=4291): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @local}, 0x14) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140), 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(0x0, r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0) r5 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='ro\x00H\x96\xf7\v\xcd \xd5\x19\x8ct\x14|\xa9\xd4\xc2\xf0\xf0\xab\xdf\x8f \x00\xc5\xb3\x99\xbf\xed\xa0\xe0\xa9\xc6\xab\xab\x95\xa8\x04O\b\xcc\x9b\x11\xa2`\xce\xffM]\xa1iB,\xae\x16\xf6|\xf5\'W\xd8~\xb7\xf80w+\xb7=f\xb7\xf2+\xe9zG\x9b\xadL\xfa\xbeb\xb1\xe6m\xab$\xd3\x97\xd6~ \xb8y\x13\xaf{\xc9\xa0\x941>\xa4Fgh\xb9r\x9b\xa4\xc1\x90\xf2\x85/A\xb3\x8e\x04~E\x7f\x14W\xcb?k\xa7ZB1\xe0n\x17\xc7U\xf6f\xd5\xdd\'\x05\x90\x10\xa2~\xf3\xe07`\x96\x85r', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48}) 252.546679ms ago: executing program 1 (id=4292): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x10000) pwrite64(r0, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md123', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='7:0', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='active', 0x6) 245.933607ms ago: executing program 2 (id=4293): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 221.127743ms ago: executing program 8 (id=4294): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 185.80864ms ago: executing program 5 (id=4295): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x1234', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 0s ago: executing program 8 (id=4296): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): roduct=0, SerialNumber=0 [ 1719.717424][T16728] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1719.752172][T16694] usb 6-1: Using ep0 maxpacket: 16 [ 1719.756802][T16694] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1719.770113][T16694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1719.773724][ T5330] usb 9-1: config 0 descriptor?? [ 1719.799791][T16694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.799899][T16694] usb 6-1: Product: syz [ 1719.799917][T16694] usb 6-1: Manufacturer: syz [ 1719.800001][T16694] usb 6-1: SerialNumber: syz [ 1719.859354][T16694] usb 6-1: config 0 descriptor?? [ 1719.897523][ T5330] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1719.923581][T16694] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1719.924288][T16694] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1720.439579][T16693] usb 2-1: USB disconnect, device number 65 [ 1720.476362][T16694] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1721.075227][T16694] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1721.075811][T16694] em28xx 6-1:0.0: board has no eeprom [ 1721.212135][T16694] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1721.212290][T16694] em28xx 6-1:0.0: dvb set to bulk mode. [ 1721.212553][T16693] em28xx 6-1:0.0: Binding DVB extension [ 1721.302790][ T5603] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1721.374451][T16694] usb 6-1: USB disconnect, device number 55 [ 1721.400860][T16694] em28xx 6-1:0.0: Disconnecting em28xx [ 1721.472078][ T5603] usb 3-1: Using ep0 maxpacket: 32 [ 1721.478618][ T5603] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1721.492831][ T5603] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1721.501057][ T5603] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.501086][ T5603] usb 3-1: config 0 has no interface number 0 [ 1721.501139][ T5603] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1721.501166][ T5603] usb 3-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1721.501206][ T5603] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1721.560519][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.564908][ T5603] usb 3-1: Product: syz [ 1721.564947][ T5603] usb 3-1: Manufacturer: syz [ 1721.564964][ T5603] usb 3-1: SerialNumber: syz [ 1721.618784][ T5603] usb 3-1: config 0 descriptor?? [ 1721.634330][ T5603] f81534 3-1:0.12: required endpoints missing [ 1721.813315][T16693] em28xx 6-1:0.0: Registering input extension [ 1721.817903][T16694] em28xx 6-1:0.0: Closing input extension [ 1721.877265][T16696] usb 3-1: USB disconnect, device number 60 [ 1722.082549][T16694] em28xx: Freeing device [ 1722.185637][T20769] fuse: Invalid rootmode [ 1722.402225][T16694] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1722.554699][T16694] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1722.569168][T16694] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.569885][T16694] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1722.571329][T16694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.704802][T16694] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1722.762241][T16696] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1722.789444][ T5330] gspca_vc032x: reg_r err -71 [ 1722.792368][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792419][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792456][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792488][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792509][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792538][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792549][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792560][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792763][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792794][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792831][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792854][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.792885][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.793203][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.793229][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.793252][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.793283][ T5330] gspca_vc032x: I2c Bus Busy Wait 00 [ 1722.793312][ T5330] gspca_vc032x: Unknown sensor... [ 1722.793547][ T5330] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 1722.902759][ T5330] usb 9-1: USB disconnect, device number 6 [ 1722.934603][T16696] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1722.960745][T16696] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1722.960837][T16696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.960861][T16696] usb 3-1: config 0 has no interface number 0 [ 1722.961020][T16696] usb 3-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1723.024158][T16696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.024245][T16696] usb 3-1: Product: syz [ 1723.024264][T16696] usb 3-1: Manufacturer: syz [ 1723.024319][T16696] usb 3-1: SerialNumber: syz [ 1723.067250][T16696] usb 3-1: config 0 descriptor?? [ 1723.311273][T16696] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1723.311725][T16696] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 1723.332876][T16696] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1723.333989][T16696] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1723.334389][T16696] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1723.404945][T16696] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1723.636129][T20779] input: syz1 as /devices/virtual/input/input59 [ 1723.777280][T16696] usb 3-1: USB disconnect, device number 61 [ 1723.802109][T16728] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1723.905503][T16696] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1723.936988][T16696] keyspan 3-1:0.133: device disconnected [ 1723.952056][T16728] usb 2-1: Using ep0 maxpacket: 16 [ 1723.958126][T16728] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1723.973321][T16728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.973989][T16728] usb 2-1: Product: syz [ 1723.974014][T16728] usb 2-1: Manufacturer: syz [ 1723.974030][T16728] usb 2-1: SerialNumber: syz [ 1724.005136][T16728] usb 2-1: config 0 descriptor?? [ 1724.935554][T16728] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1725.230713][T16728] usb 6-1: USB disconnect, device number 56 [ 1725.268555][T16728] idmouse 6-1:1.0: disconnected [ 1726.006462][T20807] fuse: Invalid rootmode [ 1726.502077][T16693] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1726.652015][T16693] usb 8-1: Using ep0 maxpacket: 32 [ 1726.658536][T16693] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1726.660236][T16693] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1726.660274][T16693] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.660297][T16693] usb 8-1: config 0 has no interface number 0 [ 1726.660346][T16693] usb 8-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1726.660372][T16693] usb 8-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1726.660502][T16693] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1726.753860][T16693] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.763506][T16693] usb 8-1: Product: syz [ 1726.763529][T16693] usb 8-1: Manufacturer: syz [ 1726.763546][T16693] usb 8-1: SerialNumber: syz [ 1726.800514][T16693] usb 8-1: config 0 descriptor?? [ 1726.825715][T16693] f81534 8-1:0.12: required endpoints missing [ 1726.951277][T20815] vivid-000: disconnect [ 1726.963796][T20813] vivid-000: reconnect [ 1727.036911][T16728] usb 8-1: USB disconnect, device number 45 [ 1727.086406][ T5990] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1727.253472][ T5990] usb 9-1: Using ep0 maxpacket: 32 [ 1727.259262][ T5990] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1727.261847][ T5990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.306092][ T5990] usb 9-1: config 0 descriptor?? [ 1727.337084][ T5990] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1727.543436][T16696] usb 2-1: USB disconnect, device number 66 [ 1729.092008][ T5990] gspca_vc032x: reg_w err -110 [ 1729.092084][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092095][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092149][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092185][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092212][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092251][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092281][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092308][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092329][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092351][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092378][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092406][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092427][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092456][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092465][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092493][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092513][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092534][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 1729.092556][ T5990] gspca_vc032x: Unknown sensor... [ 1729.092778][ T5990] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 1729.722125][T16693] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1729.812070][ T5603] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 1729.829256][ T4964] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1729.829283][ T4964] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1729.829298][ T4964] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1729.829360][ T4964] loop0: [ 1729.872001][T16693] usb 3-1: Using ep0 maxpacket: 16 [ 1729.877279][T16693] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1729.878417][T16693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.878442][T16693] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1729.881066][T16693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.881083][T16693] usb 3-1: Product: syz [ 1729.881093][T16693] usb 3-1: Manufacturer: syz [ 1729.881103][T16693] usb 3-1: SerialNumber: syz [ 1729.967261][T16693] usb 3-1: config 0 descriptor?? [ 1729.973658][ T5603] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1729.993825][ T5603] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 1729.993906][ T5603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.993929][ T5603] usb 8-1: config 0 has no interface number 0 [ 1729.993985][ T5603] usb 8-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1730.044384][T16728] usb 9-1: USB disconnect, device number 7 [ 1730.073333][ T5603] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.075241][ T5603] usb 8-1: Product: syz [ 1730.075294][ T5603] usb 8-1: Manufacturer: syz [ 1730.075338][ T5603] usb 8-1: SerialNumber: syz [ 1730.258273][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.259170][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.329063][ T5603] usb 8-1: config 0 descriptor?? [ 1730.349278][T16693] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1730.370461][T16693] imon 3-1:0.0: unable to initialize intf0, err -19 [ 1730.370477][T16693] imon:imon_probe: failed to initialize context! [ 1730.370487][T16693] imon 3-1:0.0: unable to register, err -19 [ 1730.419101][T20839] fuse: Bad value for 'rootmode' [ 1730.436863][T16693] usb 3-1: USB disconnect, device number 62 [ 1730.590136][ T5603] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 1730.590708][ T5603] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 82 [ 1730.623781][ T5603] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 1730.624022][ T5603] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 1730.624262][ T5603] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 1730.691403][ T5603] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1730.838496][T16696] usb 8-1: USB disconnect, device number 46 [ 1730.849277][T16728] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1730.882068][T16693] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1730.926308][T16728] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1730.961776][T16696] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1730.984117][T16696] keyspan 8-1:0.133: device disconnected [ 1731.032026][T16693] usb 3-1: Using ep0 maxpacket: 16 [ 1731.033303][T16693] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1731.040586][T16693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.040624][T16693] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1731.069668][T16693] usb 3-1: string descriptor 0 read error: -22 [ 1731.076014][T16693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.169425][T16693] usb 3-1: config 0 descriptor?? [ 1731.183749][T20846] fido_id[20846]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1731.213651][T16693] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1731.216833][T16693] imon 3-1:0.0: unable to initialize intf0, err -19 [ 1731.216857][T16693] imon:imon_probe: failed to initialize context! [ 1731.216873][T16693] imon 3-1:0.0: unable to register, err -19 [ 1731.279556][T20848] input: syz1 as /devices/virtual/input/input60 [ 1731.611998][T16728] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1731.772019][T16728] usb 6-1: Using ep0 maxpacket: 16 [ 1731.779444][T16728] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1731.794985][T16728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.795057][T16728] usb 6-1: Product: syz [ 1731.795075][T16728] usb 6-1: Manufacturer: syz [ 1731.795129][T16728] usb 6-1: SerialNumber: syz [ 1731.829139][T16728] usb 6-1: config 0 descriptor?? [ 1732.433901][T16728] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1733.097776][T16728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1733.101546][T16728] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1733.101672][T16728] usb 6-1: media controller created [ 1733.357867][T16728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1733.508731][T20863] vivid-000: disconnect [ 1733.520253][T20856] vivid-000: reconnect [ 1733.537197][T16728] zl10353_read_register: readreg error (reg=127, ret==0) [ 1733.537318][T16728] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1733.537339][T16728] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1733.628676][T16728] usb 6-1: USB disconnect, device number 57 [ 1733.903518][T16728] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1734.692140][T16693] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1734.842042][T16693] usb 9-1: Using ep0 maxpacket: 8 [ 1734.848642][T16693] usb 9-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 1734.891580][T16693] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 1734.899847][T16693] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.899872][T16693] usb 9-1: config 8 has no interface number 0 [ 1734.899919][T16693] usb 9-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1734.930078][T16693] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.930103][T16693] usb 9-1: Product: syz [ 1734.930117][T16693] usb 9-1: Manufacturer: syz [ 1734.930132][T16693] usb 9-1: SerialNumber: syz [ 1734.990738][T16728] usb 3-1: USB disconnect, device number 63 [ 1735.466377][T16728] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1735.634752][T16728] usb 3-1: device descriptor read/64, error -71 [ 1735.850107][T16693] vmk80xx 9-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 1735.893245][T16728] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1735.950551][T16693] usb 9-1: USB disconnect, device number 8 [ 1736.032145][T16728] usb 3-1: device descriptor read/64, error -71 [ 1736.102522][T16696] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1736.143318][T16728] usb usb3-port1: attempt power cycle [ 1736.292291][ T5330] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1736.312785][T16696] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1736.327882][T16696] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 1736.327954][T16696] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.327979][T16696] usb 6-1: config 0 has no interface number 0 [ 1736.328118][T16696] usb 6-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1736.375107][T16696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.375137][T16696] usb 6-1: Product: syz [ 1736.375155][T16696] usb 6-1: Manufacturer: syz [ 1736.375171][T16696] usb 6-1: SerialNumber: syz [ 1736.387739][T16696] usb 6-1: config 0 descriptor?? [ 1736.452136][ T5330] usb 8-1: Using ep0 maxpacket: 8 [ 1736.453560][ T5330] usb 8-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 1736.460083][ T5330] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 1736.460333][ T5330] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.460607][ T5330] usb 8-1: config 8 has no interface number 0 [ 1736.470319][ T5330] usb 8-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1736.512159][T16728] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1736.525392][ T5330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.526421][ T5330] usb 8-1: Product: syz [ 1736.526471][ T5330] usb 8-1: Manufacturer: syz [ 1736.527861][ T5330] usb 8-1: SerialNumber: syz [ 1736.547792][T16728] usb 3-1: device descriptor read/8, error -71 [ 1736.694816][T16696] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 1736.705071][T16696] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 1736.721487][T16696] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 1736.729728][T16696] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 1736.730186][T16696] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 1736.802177][T16728] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1736.822900][T16728] usb 3-1: device descriptor read/8, error -71 [ 1736.937314][T16728] usb usb3-port1: unable to enumerate USB device [ 1737.001553][T16696] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1738.581451][T20901] input: syz1 as /devices/virtual/input/input61 [ 1738.937859][ T5330] vmk80xx 8-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 1739.110452][T16693] usb 6-1: USB disconnect, device number 58 [ 1739.223666][ T5330] usb 8-1: USB disconnect, device number 47 [ 1739.297814][T16693] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1739.308062][T16693] keyspan 6-1:0.133: device disconnected [ 1739.783186][T16693] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1739.783842][T16696] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1739.952048][T16696] usb 9-1: Using ep0 maxpacket: 16 [ 1739.952269][T16693] usb 6-1: Using ep0 maxpacket: 16 [ 1739.953157][T16696] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1739.954966][T16696] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1739.960010][T16696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.960034][T16696] usb 9-1: Product: syz [ 1739.960049][T16696] usb 9-1: Manufacturer: syz [ 1739.960304][T16696] usb 9-1: SerialNumber: syz [ 1739.976351][T16696] usb 9-1: config 0 descriptor?? [ 1739.996078][T16696] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1739.996219][T16696] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1740.012637][T16693] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1740.014756][T16693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.014792][T16693] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1740.018727][T16693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.018753][T16693] usb 6-1: Product: syz [ 1740.018768][T16693] usb 6-1: Manufacturer: syz [ 1740.018840][T16693] usb 6-1: SerialNumber: syz [ 1740.179860][T16693] usb 6-1: config 0 descriptor?? [ 1741.040532][T16693] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1741.049494][T16693] imon 6-1:0.0: unable to initialize intf0, err -19 [ 1741.049517][T16693] imon:imon_probe: failed to initialize context! [ 1741.049531][T16693] imon 6-1:0.0: unable to register, err -19 [ 1741.237543][T16696] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1741.249735][T16693] usb 6-1: USB disconnect, device number 59 [ 1741.512061][T20053] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1741.648688][T16696] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1741.658250][T16696] em28xx 9-1:0.0: board has no eeprom [ 1741.672023][T16693] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1741.678086][T20053] usb 2-1: Using ep0 maxpacket: 16 [ 1741.682791][T20053] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1741.683639][T20053] usb 2-1: config 0 has no interfaces? [ 1741.708815][T20053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.708845][T20053] usb 2-1: Product: syz [ 1741.708862][T20053] usb 2-1: Manufacturer: syz [ 1741.708879][T20053] usb 2-1: SerialNumber: syz [ 1741.739910][T20053] usb 2-1: config 0 descriptor?? [ 1741.792037][T16696] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1741.792113][T16696] em28xx 9-1:0.0: dvb set to bulk mode. [ 1741.795290][T20053] em28xx 9-1:0.0: Binding DVB extension [ 1741.824634][T16696] usb 9-1: USB disconnect, device number 9 [ 1741.832007][T16693] usb 6-1: Using ep0 maxpacket: 16 [ 1741.838215][T16693] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1741.840544][T16693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.840588][T16693] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1741.879686][T16693] usb 6-1: string descriptor 0 read error: -22 [ 1741.881501][T16693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.892491][T16696] em28xx 9-1:0.0: Disconnecting em28xx [ 1741.919613][T16693] usb 6-1: config 0 descriptor?? [ 1741.930686][T16693] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1741.930775][T16693] imon 6-1:0.0: unable to initialize intf0, err -19 [ 1741.930801][T16693] imon:imon_probe: failed to initialize context! [ 1741.930813][T16693] imon 6-1:0.0: unable to register, err -19 [ 1742.023136][T20053] em28xx 9-1:0.0: Registering input extension [ 1742.023800][T16696] em28xx 9-1:0.0: Closing input extension [ 1742.060550][T16696] em28xx: Freeing device [ 1742.222142][T16694] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1742.373234][T16694] usb 3-1: Using ep0 maxpacket: 16 [ 1742.375723][T16694] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1742.393655][T16694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1742.412146][T16694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.412231][T16694] usb 3-1: Product: syz [ 1742.412250][T16694] usb 3-1: Manufacturer: syz [ 1742.412267][T16694] usb 3-1: SerialNumber: syz [ 1742.444686][T16694] usb 3-1: config 0 descriptor?? [ 1742.484527][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3707'. [ 1742.486717][T16694] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1742.486820][T16694] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1742.664369][T20954] input: syz1 as /devices/virtual/input/input63 [ 1742.712049][T16696] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1742.863339][T16696] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1742.875546][T16696] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1742.875757][T16696] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.876201][T16696] usb 9-1: config 0 has no interface number 0 [ 1742.876670][T16696] usb 9-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1742.928872][T16696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.928890][T16696] usb 9-1: Product: syz [ 1742.928900][T16696] usb 9-1: Manufacturer: syz [ 1742.928910][T16696] usb 9-1: SerialNumber: syz [ 1742.954779][T16696] usb 9-1: config 0 descriptor?? [ 1743.120465][T16694] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1743.278653][T16696] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1743.283632][T16696] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 82 [ 1743.334222][T16696] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1743.334459][T16696] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1743.335071][T16696] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1743.359973][T16696] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1743.710717][T16694] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1743.710799][T16694] em28xx 3-1:0.0: board has no eeprom [ 1744.002025][T16694] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1744.002095][T16694] em28xx 3-1:0.0: dvb set to bulk mode. [ 1744.003323][T16696] em28xx 3-1:0.0: Binding DVB extension [ 1744.059256][T16694] usb 3-1: USB disconnect, device number 68 [ 1744.088003][T16694] em28xx 3-1:0.0: Disconnecting em28xx [ 1744.108148][T16728] usb 9-1: USB disconnect, device number 10 [ 1744.147075][T16728] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1744.158734][T16728] keyspan 9-1:0.133: device disconnected [ 1744.318989][T20053] usb 2-1: USB disconnect, device number 67 [ 1744.389618][T16696] em28xx 3-1:0.0: Registering input extension [ 1744.394723][T16694] em28xx 3-1:0.0: Closing input extension [ 1744.495318][T16694] em28xx: Freeing device [ 1745.912070][ T5990] usb 6-1: USB disconnect, device number 60 [ 1746.106933][T20983] syzkaller0: entered promiscuous mode [ 1746.107611][T20983] syzkaller0: entered allmulticast mode [ 1746.206880][T13564] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1746.373415][T13564] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1746.384167][T13564] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1746.384195][T13564] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1746.384234][T13564] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.463902][T13564] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1746.914475][T13564] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1747.092627][T13564] usb 3-1: Using ep0 maxpacket: 32 [ 1747.098663][T13564] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1747.100309][T13564] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1747.100332][T13564] usb 3-1: config 0 has no interface number 0 [ 1747.100373][T13564] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1747.139136][T13564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.147220][T13564] usb 3-1: Product: syz [ 1747.147239][T13564] usb 3-1: Manufacturer: syz [ 1747.147255][T13564] usb 3-1: SerialNumber: syz [ 1747.181079][T13564] usb 3-1: config 0 descriptor?? [ 1747.252075][T16694] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1747.403462][T16694] usb 2-1: Using ep0 maxpacket: 32 [ 1747.414424][T16694] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1747.428475][T16694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.475563][T16694] usb 2-1: config 0 descriptor?? [ 1747.501694][T16694] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1747.692348][T20979] Bluetooth: hci3: command 0x0406 tx timeout [ 1747.946334][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 1747.954376][ T36] audit: type=1326 audit(1787998094.324:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c795e159 code=0x7ffc0000 [ 1747.980337][ T36] audit: type=1326 audit(1787998094.334:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c795e159 code=0x7ffc0000 [ 1748.010845][ T36] audit: type=1326 audit(1787998094.334:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c795e159 code=0x7ffc0000 [ 1748.039286][ T36] audit: type=1326 audit(1787998094.384:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c795e159 code=0x7ffc0000 [ 1748.069038][ T36] audit: type=1326 audit(1787998094.384:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42c795dec2 code=0x7ffc0000 [ 1748.080347][ T36] audit: type=1326 audit(1787998094.384:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f42c795df57 code=0x7ffc0000 [ 1748.080394][ T36] audit: type=1326 audit(1787998094.384:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f42c791ae51 code=0x7ffc0000 [ 1748.082287][ T36] audit: type=1326 audit(1787998094.384:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f42c795ef49 code=0x7ffc0000 [ 1748.170650][ T36] audit: type=1326 audit(1787998094.484:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f42c795e159 code=0x7ffc0000 [ 1748.205299][ T36] audit: type=1326 audit(1787998094.574:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20994 comm="syz.2.3720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c795e159 code=0x7ffc0000 [ 1748.283682][ T5990] usb 8-1: USB disconnect, device number 48 [ 1748.449944][ T5990] idmouse 8-1:1.0: disconnected [ 1749.145667][T13564] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1749.154057][T13564] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1749.154147][T13564] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1749.155032][T13564] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1749.305356][T13564] usb 3-1: USB disconnect, device number 69 [ 1749.952077][T20053] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 1750.128459][T21035] syzkaller0: entered promiscuous mode [ 1750.134618][T21035] syzkaller0: entered allmulticast mode [ 1750.171582][T20053] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1750.213779][T20053] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 1750.214761][T20053] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.215271][T20053] usb 8-1: config 0 has no interface number 0 [ 1750.216387][T20053] usb 8-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1750.259636][T20053] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.261285][T20053] usb 8-1: Product: syz [ 1750.261322][T20053] usb 8-1: Manufacturer: syz [ 1750.277693][T20053] usb 8-1: SerialNumber: syz [ 1750.527445][T20053] usb 8-1: config 0 descriptor?? [ 1751.433682][T20053] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 1751.434053][T20053] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 82 [ 1751.453815][T20053] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 1751.469601][T20053] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 1751.469782][T20053] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 1751.496496][T20053] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1751.914812][T16694] gspca_vc032x: reg_r err -71 [ 1751.914897][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.914937][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.914979][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915016][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915053][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915125][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915164][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915198][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915222][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915252][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915286][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915304][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915335][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915359][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915382][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915392][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915403][T16694] gspca_vc032x: I2c Bus Busy Wait 00 [ 1751.915413][T16694] gspca_vc032x: Unknown sensor... [ 1751.915570][T16694] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1752.042245][T16694] usb 2-1: USB disconnect, device number 68 [ 1752.455406][T16694] usb 8-1: USB disconnect, device number 49 [ 1752.486092][T16694] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1752.499015][T16694] keyspan 8-1:0.133: device disconnected [ 1752.692585][T21053] input: syz1 as /devices/virtual/input/input67 [ 1752.982062][T16728] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1753.144875][T16728] usb 9-1: Using ep0 maxpacket: 16 [ 1753.155753][T16728] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1753.170942][T16728] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.173329][T16728] usb 9-1: Product: syz [ 1753.173349][T16728] usb 9-1: Manufacturer: syz [ 1753.173364][T16728] usb 9-1: SerialNumber: syz [ 1753.224154][T16728] usb 9-1: config 0 descriptor?? [ 1753.609078][T21068] netlink: 'syz.7.3743': attribute type 1 has an invalid length. [ 1753.671768][T21068] bond3: entered promiscuous mode [ 1753.672186][T16728] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1753.676254][T21068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1753.709369][T16728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1753.719319][T16728] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1753.725800][T16728] usb 9-1: media controller created [ 1753.761511][T16728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1753.950790][T21077] syzkaller0: entered promiscuous mode [ 1753.956519][T21077] syzkaller0: entered allmulticast mode [ 1754.102196][T13564] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1754.322515][T13564] usb 6-1: Using ep0 maxpacket: 32 [ 1754.332428][T16728] zl10353_read_register: readreg error (reg=127, ret==0) [ 1754.339601][T16728] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1754.339619][T16728] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1754.341247][T13564] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1754.368606][T13564] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1754.376990][T13564] usb 6-1: config 0 has no interface number 0 [ 1754.377058][T13564] usb 6-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 1754.377087][T13564] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1754.407107][T13564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.415848][T13564] usb 6-1: Product: syz [ 1754.415868][T13564] usb 6-1: Manufacturer: syz [ 1754.415883][T13564] usb 6-1: SerialNumber: syz [ 1754.447915][T13564] usb 6-1: config 0 descriptor?? [ 1754.455749][T21053] dtv5100: wlen = 0, aborting. [ 1754.477916][T13564] f81534 6-1:0.12: required endpoints missing [ 1754.674079][T13564] usb 6-1: USB disconnect, device number 61 [ 1755.112067][T21081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1755.300313][T13564] usb 9-1: USB disconnect, device number 11 [ 1755.488435][T13564] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1756.452062][T16696] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1756.603166][T16696] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1756.613269][T16696] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1756.613366][T16696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.613390][T16696] usb 2-1: config 0 has no interface number 0 [ 1756.613465][T16696] usb 2-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1756.633353][T16696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.633433][T16696] usb 2-1: Product: syz [ 1756.633573][T16696] usb 2-1: Manufacturer: syz [ 1756.633592][T16696] usb 2-1: SerialNumber: syz [ 1756.708246][T16696] usb 2-1: config 0 descriptor?? [ 1756.817875][T21116] syzkaller0: entered promiscuous mode [ 1756.833290][T21116] syzkaller0: entered allmulticast mode [ 1756.961164][T16696] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1756.961670][T16696] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 1756.983373][T16696] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1756.983588][T16696] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1756.983763][T16696] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1757.007043][T16696] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1757.184889][T13564] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1757.364027][T16728] usb 2-1: USB disconnect, device number 69 [ 1757.403770][T13564] usb 6-1: Using ep0 maxpacket: 32 [ 1757.412300][T13564] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1757.447013][T13564] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1757.451918][T13564] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.451940][T13564] usb 6-1: config 0 has no interface number 0 [ 1757.451982][T13564] usb 6-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1757.452004][T13564] usb 6-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1757.452030][T13564] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1757.507326][T13564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.515420][T13564] usb 6-1: Product: syz [ 1757.515438][T13564] usb 6-1: Manufacturer: syz [ 1757.515455][T13564] usb 6-1: SerialNumber: syz [ 1757.557301][T16728] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1757.567537][T16728] keyspan 2-1:0.133: device disconnected [ 1757.588051][T13564] usb 6-1: config 0 descriptor?? [ 1757.606335][T13564] f81534 6-1:0.12: required endpoints missing [ 1758.002063][T16696] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1758.152003][T16696] usb 9-1: Using ep0 maxpacket: 32 [ 1758.157927][T16696] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1758.160983][T16696] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1758.161008][T16696] usb 9-1: config 0 has no interface number 0 [ 1758.161053][T16696] usb 9-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1758.161076][T16696] usb 9-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1758.161100][T16696] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1758.179332][T16696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.179357][T16696] usb 9-1: Product: syz [ 1758.179373][T16696] usb 9-1: Manufacturer: syz [ 1758.179388][T16696] usb 9-1: SerialNumber: syz [ 1758.247008][T16696] usb 9-1: config 0 descriptor?? [ 1758.276562][T16696] f81534 9-1:0.12: unsupported endpoint max packet size [ 1758.448292][T21139] input: syz1 as /devices/virtual/input/input68 [ 1758.471227][T16728] usb 9-1: USB disconnect, device number 12 [ 1758.742170][T13564] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1758.902293][T13564] usb 8-1: Using ep0 maxpacket: 16 [ 1758.906399][T13564] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1758.922535][T13564] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.922599][T13564] usb 8-1: Product: syz [ 1758.922638][T13564] usb 8-1: Manufacturer: syz [ 1758.922692][T13564] usb 8-1: SerialNumber: syz [ 1758.960730][T13564] usb 8-1: config 0 descriptor?? [ 1759.399133][T13564] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1759.414887][T13564] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1759.418743][T13564] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1759.418876][T13564] usb 8-1: media controller created [ 1759.486366][T13564] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1759.608821][T21139] dtv5100: wlen = 0, aborting. [ 1759.861740][T21139] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3765'. [ 1760.030695][T16694] usb 6-1: USB disconnect, device number 62 [ 1760.219566][T21165] input: syz1 as /devices/virtual/input/input69 [ 1760.240008][T21163] syzkaller0: entered promiscuous mode [ 1760.240305][T21163] syzkaller0: entered allmulticast mode [ 1760.322307][T13564] zl10353_read_register: readreg error (reg=127, ret==0) [ 1760.322407][T13564] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1760.322422][T13564] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1760.622033][T16728] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1760.650583][T21159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1760.694452][T16694] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1760.743768][T13564] usb 8-1: USB disconnect, device number 50 [ 1760.794484][T13564] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1760.803993][T16728] usb 6-1: Using ep0 maxpacket: 16 [ 1760.805876][T16728] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1760.820527][T16728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.820688][T16728] usb 6-1: Product: syz [ 1760.820705][T16728] usb 6-1: Manufacturer: syz [ 1760.820759][T16728] usb 6-1: SerialNumber: syz [ 1760.864381][T16728] usb 6-1: config 0 descriptor?? [ 1760.872756][T16694] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1760.883972][T16694] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1760.883997][T16694] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.884017][T16694] usb 9-1: config 0 has no interface number 0 [ 1760.884095][T16694] usb 9-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1760.887455][T16694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.887481][T16694] usb 9-1: Product: syz [ 1760.887496][T16694] usb 9-1: Manufacturer: syz [ 1760.887510][T16694] usb 9-1: SerialNumber: syz [ 1760.954246][T16694] usb 9-1: config 0 descriptor?? [ 1761.189440][T16694] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1761.202052][T16694] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 82 [ 1761.213739][T16694] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1761.221723][T16694] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1761.221803][T16694] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1761.244253][T16694] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1761.295510][T16728] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1761.313314][T16728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1761.323009][T16728] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1761.325411][T16728] usb 6-1: media controller created [ 1761.458097][T16728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1761.507889][T21165] dtv5100: wlen = 0, aborting. [ 1761.903425][T16696] usb 9-1: USB disconnect, device number 13 [ 1762.157039][T16696] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1762.170175][T16696] keyspan 9-1:0.133: device disconnected [ 1762.262295][T16728] zl10353_read_register: readreg error (reg=127, ret==0) [ 1762.262397][T16728] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1762.262412][T16728] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1762.369508][T21182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3778'. [ 1762.509437][T21177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1762.601781][T21185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3777'. [ 1763.216293][T21168] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3773'. [ 1763.232070][ T5603] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 1763.232343][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1763.325049][T16694] usb 6-1: USB disconnect, device number 63 [ 1763.404879][T16694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1763.502030][ T5603] usb 8-1: device descriptor read/64, error -32 [ 1763.745084][ T5603] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 1763.905632][ T5603] usb 8-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=ac.d9 [ 1763.910380][ T5603] usb 8-1: config 1 has an invalid interface number: 69 but max is 0 [ 1763.910407][ T5603] usb 8-1: config 1 has no interface number 0 [ 1763.910509][ T5603] usb 8-1: config 1 interface 69 has no altsetting 0 [ 1763.928398][ T5603] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.928471][ T5603] usb 8-1: Product: syz [ 1763.928519][ T5603] usb 8-1: Manufacturer: syz [ 1763.928560][ T5603] usb 8-1: SerialNumber: syz [ 1764.082039][T16694] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1764.231992][T16694] usb 2-1: Using ep0 maxpacket: 32 [ 1764.237801][T16694] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1764.249218][T16694] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1764.257730][T16694] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.257754][T16694] usb 2-1: config 0 has no interface number 0 [ 1764.257798][T16694] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1764.257822][T16694] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1764.257850][T16694] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1764.273504][T16694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.273528][T16694] usb 2-1: Product: syz [ 1764.273544][T16694] usb 2-1: Manufacturer: syz [ 1764.273557][T16694] usb 2-1: SerialNumber: syz [ 1764.340582][T16694] usb 2-1: config 0 descriptor?? [ 1764.355904][T16694] f81534 2-1:0.12: required endpoints missing [ 1764.476446][ T5603] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 1764.479598][ T5603] usbduxfast 8-1:1.69: driver 'usbduxfast' failed to auto-configure device. [ 1764.516618][ T5603] usb 8-1: USB disconnect, device number 52 [ 1765.032121][ T5603] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 1765.139929][T21220] vlan1: entered allmulticast mode [ 1765.145332][T21220] veth0_vlan: entered allmulticast mode [ 1765.182766][ T5603] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1765.197552][ T5603] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1765.197716][ T5603] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1765.197805][ T5603] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1765.197874][ T5603] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1765.197946][ T5603] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1765.211988][ T5603] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1765.212049][ T5603] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1765.212083][ T5603] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1765.212107][ T5603] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1765.212133][ T5603] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1765.252644][ T5603] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1765.252836][ T5603] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1765.252901][ T5603] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1765.252972][ T5603] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1765.253041][ T5603] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1765.359524][ T5603] usb 6-1: string descriptor 0 read error: -22 [ 1765.359830][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.397295][ T5603] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1766.562056][ T5603] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1766.737455][ T5603] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1766.757349][ T5603] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1766.757438][ T5603] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.757518][ T5603] usb 3-1: config 0 has no interface number 0 [ 1766.757701][ T5603] usb 3-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1766.809525][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.809769][ T5603] usb 3-1: Product: syz [ 1766.809821][ T5603] usb 3-1: Manufacturer: syz [ 1766.809853][ T5603] usb 3-1: SerialNumber: syz [ 1766.852431][ T5603] usb 3-1: config 0 descriptor?? [ 1766.858926][T16694] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1766.909089][T13564] usb 2-1: USB disconnect, device number 70 [ 1767.013225][T16694] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1767.025748][T16694] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.025797][T16694] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1767.026526][T16694] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.165351][T16694] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 1767.175386][ T5603] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1767.175793][ T5603] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 1767.204368][ T5603] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1767.207218][ T5603] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1767.207420][ T5603] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1767.223552][ T5603] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1767.462214][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3797'. [ 1767.525610][T21245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.586708][T21245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.824738][T16694] usb 3-1: USB disconnect, device number 70 [ 1767.840630][T16694] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1767.853065][T16694] keyspan 3-1:0.133: device disconnected [ 1769.634490][T13564] usb 8-1: USB disconnect, device number 53 [ 1769.774089][ T5603] usb 6-1: USB disconnect, device number 64 [ 1770.082771][T13564] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1770.235155][T13564] usb 8-1: Using ep0 maxpacket: 32 [ 1770.238093][T13564] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1770.244350][T13564] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1770.244425][T13564] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.244490][T13564] usb 8-1: config 0 has no interface number 0 [ 1770.245642][T13564] usb 8-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1770.245713][T13564] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1770.269320][T13564] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.269367][T13564] usb 8-1: Product: syz [ 1770.269410][T13564] usb 8-1: Manufacturer: syz [ 1770.269445][T13564] usb 8-1: SerialNumber: syz [ 1770.317167][T13564] usb 8-1: config 0 descriptor?? [ 1770.352227][T13564] f81534 8-1:0.12: required endpoints missing [ 1770.783860][T21286] program syz.8.3811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1771.302038][T16694] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1771.455730][T16694] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1771.456216][T16694] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1771.464985][T16694] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.465027][T16694] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1771.501237][T16694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.501313][T16694] usb 9-1: Product: syz [ 1771.501329][T16694] usb 9-1: Manufacturer: syz [ 1771.501387][T16694] usb 9-1: SerialNumber: syz [ 1771.566434][T16694] usb 9-1: selecting invalid altsetting 1 [ 1771.628660][T16694] usb 9-1: unit 6 not found! [ 1771.890248][T16694] usb 9-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1772.065239][T16694] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1772.079996][T16694] usb 9-1: USB disconnect, device number 14 [ 1772.151786][ T9878] udevd[9878]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1772.717354][T21330] netlink: 'syz.2.3825': attribute type 1 has an invalid length. [ 1772.782405][T13564] usb 8-1: USB disconnect, device number 54 [ 1773.032343][T21332] tipc: Enabling of bearer rejected, failed to enable media [ 1773.458177][T21359] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3832'. [ 1773.705234][T21368] input: syz1 as /devices/virtual/input/input70 [ 1773.803932][T13564] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1773.910786][T21374] vivid-000: disconnect [ 1773.920209][T21365] vivid-000: reconnect [ 1773.972065][T13564] usb 3-1: Using ep0 maxpacket: 32 [ 1773.977806][T13564] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1773.979711][T13564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.004105][T13564] usb 3-1: config 0 descriptor?? [ 1774.028165][T13564] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1774.032164][T16693] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1774.191980][T16693] usb 9-1: Using ep0 maxpacket: 16 [ 1774.192935][T16693] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1774.213418][T16693] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.213499][T16693] usb 9-1: Product: syz [ 1774.213560][T16693] usb 9-1: Manufacturer: syz [ 1774.213606][T16693] usb 9-1: SerialNumber: syz [ 1774.243663][T16693] usb 9-1: config 0 descriptor?? [ 1774.674020][T16693] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1774.702944][T16693] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1774.720213][T16693] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1774.720266][T16693] usb 9-1: media controller created [ 1774.893690][T21368] dtv5100: wlen = 0, aborting. [ 1774.917371][T16693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1775.258634][T21368] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3837'. [ 1775.523927][ T4964] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1775.525738][ T4964] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1775.525865][ T4964] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1775.526886][ T4964] loop0: [ 1775.652391][T16693] zl10353_read_register: readreg error (reg=127, ret==0) [ 1775.652499][T16693] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1775.652515][T16693] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1776.500996][T21383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1776.573853][T16728] usb 9-1: USB disconnect, device number 15 [ 1776.590628][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3847'. [ 1776.746219][T16728] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1776.932676][T13564] gspca_vc032x: reg_r err -71 [ 1776.932734][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932747][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932756][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932766][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932775][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932784][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932793][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932803][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932812][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932821][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932831][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932840][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932849][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932858][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932867][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932877][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932885][T13564] gspca_vc032x: I2c Bus Busy Wait 00 [ 1776.932894][T13564] gspca_vc032x: Unknown sensor... [ 1776.932969][T13564] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1777.047672][T13564] usb 3-1: USB disconnect, device number 71 [ 1777.138388][T20979] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1777.198048][T20979] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1777.240347][T20979] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1777.250533][T20979] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1777.269664][T20979] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1777.902822][T21411] netlink: 'syz.8.3850': attribute type 1 has an invalid length. [ 1778.686287][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3857'. [ 1778.872131][ T5603] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1779.032876][ T5603] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1779.034309][ T5603] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1779.034366][ T5603] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1779.034398][ T5603] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1779.034428][ T5603] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1779.034653][ T5603] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1779.036193][ T5603] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1779.036244][ T5603] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1779.036273][ T5603] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1779.036300][ T5603] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1779.036328][ T5603] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1779.037714][ T5603] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1779.037766][ T5603] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1779.037793][ T5603] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1779.037817][ T5603] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1779.037843][ T5603] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1779.115818][ T5603] usb 2-1: string descriptor 0 read error: -22 [ 1779.116723][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.253774][ T5603] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1779.332349][T16728] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1779.460049][T15414] Bluetooth: hci5: command tx timeout [ 1779.479911][T16693] usb 2-1: USB disconnect, device number 71 [ 1779.522070][T16728] usb 8-1: Using ep0 maxpacket: 32 [ 1779.528579][T16728] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1779.529732][T16728] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1779.529755][T16728] usb 8-1: config 0 has no interface number 0 [ 1779.529798][T16728] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1779.533046][T16728] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.533069][T16728] usb 8-1: Product: syz [ 1779.533084][T16728] usb 8-1: Manufacturer: syz [ 1779.533098][T16728] usb 8-1: SerialNumber: syz [ 1779.640121][T16728] usb 8-1: config 0 descriptor?? [ 1780.893716][T16693] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1780.951146][ T36] kauditd_printk_skb: 101 callbacks suppressed [ 1780.957533][ T36] audit: type=1326 audit(1787998127.324:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc11e159 code=0x7ffc0000 [ 1780.982761][ T36] audit: type=1326 audit(1787998127.364:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc11e159 code=0x7ffc0000 [ 1780.984515][ T36] audit: type=1326 audit(1787998127.364:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc11e159 code=0x7ffc0000 [ 1780.991167][ T36] audit: type=1326 audit(1787998127.364:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc11e159 code=0x7ffc0000 [ 1781.052240][T16693] usb 9-1: Using ep0 maxpacket: 16 [ 1781.053536][T16693] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1781.056066][T16693] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.056145][T16693] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1781.060910][T16693] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.060966][T16693] usb 9-1: Product: syz [ 1781.060992][T16693] usb 9-1: Manufacturer: syz [ 1781.061007][T16693] usb 9-1: SerialNumber: syz [ 1781.119364][ T36] audit: type=1326 audit(1787998127.484:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cc11e159 code=0x7ffc0000 [ 1781.119450][ T36] audit: type=1326 audit(1787998127.484:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12cc11dec2 code=0x7ffc0000 [ 1781.119543][ T36] audit: type=1326 audit(1787998127.484:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f12cc11df57 code=0x7ffc0000 [ 1781.136303][T16693] usb 9-1: config 0 descriptor?? [ 1781.142469][ T36] audit: type=1326 audit(1787998127.524:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f12cc0dae51 code=0x7ffc0000 [ 1781.142522][ T36] audit: type=1326 audit(1787998127.524:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f12cc11ef49 code=0x7ffc0000 [ 1781.143313][ T36] audit: type=1326 audit(1787998127.524:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21432 comm="syz.7.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f12cc0daebb code=0x7ffc0000 [ 1781.415210][T16693] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1781.415460][T16693] imon 9-1:0.0: unable to initialize intf0, err -19 [ 1781.415483][T16693] imon:imon_probe: failed to initialize context! [ 1781.415495][T16693] imon 9-1:0.0: unable to register, err -19 [ 1781.446815][T16693] usb 9-1: USB disconnect, device number 16 [ 1781.532039][T15414] Bluetooth: hci5: command tx timeout [ 1781.666277][T16728] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1781.666428][T16728] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 1781.666517][T16728] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1781.666764][T16728] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 1781.732279][T16728] usb 8-1: USB disconnect, device number 55 [ 1781.883574][T16693] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1782.033522][T16693] usb 9-1: Using ep0 maxpacket: 16 [ 1782.039831][T16693] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1782.041310][T16693] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.041348][T16693] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1782.070853][T16693] usb 9-1: string descriptor 0 read error: -22 [ 1782.077384][T16693] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.120237][T16693] usb 9-1: config 0 descriptor?? [ 1782.144535][T16693] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1782.153566][T16693] imon 9-1:0.0: unable to initialize intf0, err -19 [ 1782.153585][T16693] imon:imon_probe: failed to initialize context! [ 1782.153600][T16693] imon 9-1:0.0: unable to register, err -19 [ 1782.622517][T15414] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1783.148525][T21398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.151228][T21398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.151467][T21398] bridge_slave_0: entered allmulticast mode [ 1783.193909][T21398] bridge_slave_0: entered promiscuous mode [ 1783.217281][T21398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.217819][T21398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.218482][T21398] bridge_slave_1: entered allmulticast mode [ 1783.241729][T21398] bridge_slave_1: entered promiscuous mode [ 1783.456178][T21398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1783.478961][T21398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.616492][T15414] Bluetooth: hci5: command tx timeout [ 1784.360200][T21398] team0: Port device team_slave_0 added [ 1784.382991][T21398] team0: Port device team_slave_1 added [ 1784.616879][T21398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1784.624055][T21398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1784.624103][T21398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1784.629211][T21398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1784.629226][T21398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1784.629258][T21398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.947398][ T5603] usb 9-1: USB disconnect, device number 17 [ 1785.083448][T16693] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1785.243537][T16693] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1785.257703][T16693] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1785.267367][T16693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1785.267395][T16693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1785.267416][T16693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1785.267457][T16693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.323999][T16693] usb 3-1: config 0 descriptor?? [ 1785.666215][ T13] bridge_slave_1: left allmulticast mode [ 1785.672896][ T13] bridge_slave_1: left promiscuous mode [ 1785.673567][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.695424][T15414] Bluetooth: hci5: command tx timeout [ 1785.769830][T16693] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1785.865993][ T13] bridge_slave_0: left allmulticast mode [ 1785.873136][ T13] bridge_slave_0: left promiscuous mode [ 1785.873438][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.916896][T15414] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1786.060014][ T13] dvmrp8: left allmulticast mode [ 1786.603337][ T13] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1786.626359][ T5603] usb 3-1: USB disconnect, device number 72 [ 1787.215908][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.523320][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1788.270955][ T13] bond0 (unregistering): Released all slaves [ 1788.283262][ T13] bond1 (unregistering): Released all slaves [ 1788.303854][ T13] bond2 (unregistering): Released all slaves [ 1788.373166][T21544] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3885'. [ 1788.460669][ T5603] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1788.578960][T21398] hsr_slave_0: entered promiscuous mode [ 1788.580184][T21398] hsr_slave_1: entered promiscuous mode [ 1788.581009][T21398] debugfs: 'hsr0' already exists in 'hsr' [ 1788.581032][T21398] Cannot create hsr debugfs directory [ 1788.623237][ T5603] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1788.634236][ T5603] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1788.634288][ T5603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.688278][ T5603] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 1788.748072][T21529] tipc: Enabled bearer , priority 0 [ 1788.789883][T21536] syzkaller0: entered promiscuous mode [ 1788.795489][T21536] syzkaller0: entered allmulticast mode [ 1788.798268][ T13] tipc: Disabling bearer [ 1788.798476][ T13] tipc: Left network mode [ 1788.892094][T21526] tipc: Resetting bearer [ 1789.012442][T21552] input: syz1 as /devices/virtual/input/input72 [ 1789.074926][T21526] tipc: Disabling bearer [ 1789.324508][T16696] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1789.482173][T16696] usb 3-1: Using ep0 maxpacket: 16 [ 1789.485040][T16696] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1789.576792][T16696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.576877][T16696] usb 3-1: Product: syz [ 1789.576896][T16696] usb 3-1: Manufacturer: syz [ 1789.577236][T16696] usb 3-1: SerialNumber: syz [ 1789.623167][T16696] usb 3-1: config 0 descriptor?? [ 1790.042267][T16696] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1790.064388][T16696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1790.068671][T16696] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1790.068820][T16696] usb 3-1: media controller created [ 1790.127597][T16696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1790.189823][T16693] usb 9-1: USB disconnect, device number 18 [ 1790.812438][T16696] zl10353_read_register: readreg error (reg=127, ret==0) [ 1790.812546][T16696] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1790.812564][T16696] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1790.927595][ T5259] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1791.235818][T21589] syzkaller0: entered promiscuous mode [ 1791.235888][T21589] syzkaller0: entered allmulticast mode [ 1791.236497][T13564] usb 3-1: USB disconnect, device number 73 [ 1791.271397][T21589] tipc: Enabled bearer , priority 0 [ 1791.312515][T21588] tipc: Resetting bearer [ 1791.319251][T13564] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1791.464030][T21588] tipc: Disabling bearer [ 1791.713682][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.713812][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.485145][T21594] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3895'. [ 1792.728399][T15414] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1792.912168][ T5603] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1793.022332][T16696] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1793.082766][ T5603] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1793.093084][ T5603] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1793.093164][ T5603] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1793.093246][ T5603] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1793.093316][ T5603] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1793.093420][ T5603] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.174394][ T5603] usb 8-1: config 0 descriptor?? [ 1793.179559][T16696] usb 2-1: Using ep0 maxpacket: 16 [ 1793.185689][T16696] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1793.205960][T16696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1793.255075][T16696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.263209][T16696] usb 2-1: Product: syz [ 1793.263229][T16696] usb 2-1: Manufacturer: syz [ 1793.263244][T16696] usb 2-1: SerialNumber: syz [ 1793.297612][T16696] usb 2-1: config 0 descriptor?? [ 1793.317158][T16696] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1793.321972][T16696] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1793.717297][ T5603] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1793.971548][T16696] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1794.477154][T16696] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1794.478968][T16696] em28xx 2-1:0.0: board has no eeprom [ 1795.336034][T21637] jffs2: notice: (21637) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1795.374579][T16696] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1795.382577][T16696] em28xx 2-1:0.0: dvb set to bulk mode. [ 1795.384158][T16693] em28xx 2-1:0.0: Binding DVB extension [ 1795.391822][ T5603] usb 8-1: USB disconnect, device number 56 [ 1795.549188][T16696] usb 2-1: USB disconnect, device number 72 [ 1795.571658][T21641] program syz.8.3902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1795.599689][T16696] em28xx 2-1:0.0: Disconnecting em28xx [ 1795.783638][T16693] em28xx 2-1:0.0: Registering input extension [ 1795.790664][T16696] em28xx 2-1:0.0: Closing input extension [ 1796.012473][T16696] em28xx: Freeing device [ 1797.109278][T21670] input: syz0 as /devices/virtual/input/input75 [ 1797.636155][T21681] input: syz0 as /devices/virtual/input/input76 [ 1797.713408][T16694] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1799.892417][T16694] usb 9-1: Using ep0 maxpacket: 32 [ 1799.948333][T16694] usb 9-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1800.035215][T16694] usb 9-1: config 2 has an invalid interface number: 45 but max is 0 [ 1800.035292][T16694] usb 9-1: config 2 has no interface number 0 [ 1800.036957][T16694] usb 9-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1800.037049][T16694] usb 9-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1800.078543][T16694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.078615][T16694] usb 9-1: Product: syz [ 1800.078631][T16694] usb 9-1: Manufacturer: syz [ 1800.078691][T16694] usb 9-1: SerialNumber: syz [ 1800.110025][T16694] kobil_sct 9-1:2.45: KOBIL USB smart card terminal converter detected [ 1800.128088][T16694] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1800.538344][T21694] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3917'. [ 1801.167271][T16694] usb 9-1: USB disconnect, device number 19 [ 1802.197612][ T4964] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1802.197703][ T4964] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1802.197718][ T4964] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1802.197902][ T4964] loop0: [ 1802.690738][T16694] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1802.753462][T16694] kobil_sct 9-1:2.45: device disconnected [ 1806.934335][ T13] hsr_slave_0: left promiscuous mode [ 1807.003674][ T13] hsr_slave_1: left promiscuous mode [ 1807.028273][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1807.067481][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.222094][T13564] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1807.402010][T13564] usb 3-1: Using ep0 maxpacket: 16 [ 1807.465526][T13564] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1807.474619][T13564] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1807.479701][T13564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.479726][T13564] usb 3-1: Product: syz [ 1807.479740][T13564] usb 3-1: Manufacturer: syz [ 1807.479755][T13564] usb 3-1: SerialNumber: syz [ 1807.623753][T13564] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1807.626632][T13564] r8152-cfgselector 3-1: config 0 descriptor?? [ 1807.915594][T13564] r8152-cfgselector 3-1: Needed 1 retries to read version [ 1808.795384][T21766] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1809.627299][T16696] r8152-cfgselector 3-1: USB disconnect, device number 74 [ 1810.186587][T21755] block device autoloading is deprecated and will be removed. [ 1810.392606][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1810.465464][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1810.581527][T21772] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1815.465599][T21398] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1816.918577][T21398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1817.286847][T21398] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1817.407915][T21398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.483301][T21398] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1817.526407][T21398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1818.902685][T21398] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1818.982722][T21398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1819.631929][T21398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1820.357209][T21398] 8021q: adding VLAN 0 to HW filter on device team0 [ 1820.927840][T18063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.940133][T18063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.059020][T20744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.068089][T20744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.814246][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3946'. [ 1826.857574][T21398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1826.986154][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3956'. [ 1827.345056][T20053] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1827.392593][T15414] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1827.410372][T15414] CPU: 0 UID: 0 PID: 15414 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1827.410403][T15414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.410419][T15414] Workqueue: hci0 hci_rx_work [ 1827.410566][T15414] Call Trace: [ 1827.410576][T15414] [ 1827.410586][T15414] dump_stack_lvl+0xe8/0x150 [ 1827.410622][T15414] sysfs_create_dir_ns+0x271/0x2a0 [ 1827.410675][T15414] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1827.410703][T15414] ? rt_spin_unlock+0x165/0x200 [ 1827.410739][T15414] kobject_add_internal+0x62c/0xce0 [ 1827.410824][T15414] kobject_add+0x163/0x240 [ 1827.410848][T15414] ? rt_spin_unlock+0x159/0x200 [ 1827.410882][T15414] ? __pfx_kobject_add+0x10/0x10 [ 1827.410914][T15414] ? get_device_parent+0x370/0x3a0 [ 1827.411000][T15414] device_add+0x3fa/0xb80 [ 1827.411027][T15414] hci_conn_add_sysfs+0xd5/0x210 [ 1827.411102][T15414] le_conn_complete_evt+0xfe3/0x16d0 [ 1827.411178][T15414] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1827.411204][T15414] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1827.411227][T15414] ? rt_mutex_slowunlock+0x219/0x460 [ 1827.411257][T15414] ? skb_pull_data+0xf0/0x200 [ 1827.411359][T15414] hci_le_conn_complete_evt+0x187/0x470 [ 1827.411390][T15414] hci_event_packet+0x67a/0xf10 [ 1827.411441][T15414] ? reacquire_held_locks+0x117/0x1a0 [ 1827.411478][T15414] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1827.411499][T15414] ? __pfx_hci_event_packet+0x10/0x10 [ 1827.411528][T15414] ? rt_spin_unlock+0x159/0x200 [ 1827.411564][T15414] ? hci_send_to_monitor+0xe2/0x590 [ 1827.411592][T15414] hci_rx_work+0x3ee/0x1020 [ 1827.411627][T15414] ? process_scheduled_works+0x97a/0x1630 [ 1827.411662][T15414] process_scheduled_works+0xc3d/0x1630 [ 1827.411720][T15414] ? __pfx_process_scheduled_works+0x10/0x10 [ 1827.411755][T15414] ? assign_work+0x3cf/0x5d0 [ 1827.411788][T15414] worker_thread+0xa47/0xfb0 [ 1827.411830][T15414] ? __kthread_parkme+0x71/0x1f0 [ 1827.411868][T15414] kthread+0x38b/0x470 [ 1827.411888][T15414] ? __pfx_worker_thread+0x10/0x10 [ 1827.411914][T15414] ? __pfx_kthread+0x10/0x10 [ 1827.411935][T15414] ret_from_fork+0x514/0xb70 [ 1827.411959][T15414] ? __pfx_ret_from_fork+0x10/0x10 [ 1827.411979][T15414] ? __switch_to+0xc89/0x1420 [ 1827.412011][T15414] ? __pfx_kthread+0x10/0x10 [ 1827.412034][T15414] ret_from_fork_asm+0x1a/0x30 [ 1827.412069][T15414] [ 1827.412446][T15414] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1827.412488][T15414] Bluetooth: hci0: failed to register connection device [ 1827.528446][T20053] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1827.636472][T20053] usb 8-1: config 0 has no interfaces? [ 1827.636545][T20053] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.694894][T20053] usb 8-1: config 0 descriptor?? [ 1827.933617][T20053] usb 8-1: USB disconnect, device number 57 [ 1829.243974][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3959'. [ 1829.366002][T21893] Bluetooth: MGMT ver 1.23 [ 1829.675048][T21398] veth0_vlan: entered promiscuous mode [ 1829.750176][T21398] veth1_vlan: entered promiscuous mode [ 1829.982491][T21398] veth0_macvtap: entered promiscuous mode [ 1830.007029][T21398] veth1_macvtap: entered promiscuous mode [ 1830.123718][T21398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1830.170252][T21398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1830.325794][T20743] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.329193][T20743] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.329317][T20743] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.329485][T20743] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.146779][T21917] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 1834.087875][T18063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1834.087946][T18063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.435636][T21934] program syz.8.3972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1837.375411][T20743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.375485][T20743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.551475][T21948] netlink: 'syz.1.3976': attribute type 1 has an invalid length. [ 1837.581156][T15414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1837.645082][T15414] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1837.652355][T15414] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1837.659983][T15414] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1837.661433][T15414] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1838.003154][T21948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1838.420892][T21953] bond1: (slave geneve2): making interface the new active one [ 1838.702011][T21953] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1838.892203][T18063] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.903124][T18063] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.903152][T18063] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.903176][T18063] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1839.169309][T21964] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1839.234305][T21964] tc_dump_action: action bad kind [ 1840.407459][T15414] Bluetooth: hci4: command tx timeout [ 1840.907443][T21826] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1840.930572][T21977] Config c/1 of g_uac2 needs at least one function. [ 1841.008504][T21977] udc usbip-vudc.0: failed to start g_uac2: -22 [ 1841.008597][T21977] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 1841.062824][T21826] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1841.064839][T21826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.064993][T21826] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1841.065056][T21826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1841.065135][T21826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1841.065158][T21826] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1841.073943][T21826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1841.073968][T21826] usb 3-1: Product: syz [ 1841.073983][T21826] usb 3-1: Manufacturer: syz [ 1841.073999][T21826] usb 3-1: SerialNumber: syz [ 1841.138995][T21826] usb 3-1: config 0 descriptor?? [ 1841.202916][T21984] syzkaller1: entered promiscuous mode [ 1841.209468][T21984] syzkaller1: entered allmulticast mode [ 1841.357155][T21977] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 1841.520982][T21826] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1841.521058][T21826] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1841.738862][T21826] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1841.739068][T21826] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1841.739861][T21826] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1841.884675][T21980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.896601][T21980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.424140][T20979] Bluetooth: hci4: command tx timeout [ 1843.673804][T21998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.675831][T21998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.747176][T22000] Invalid logical block size (8192) [ 1844.198162][T20979] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1844.505079][T20979] Bluetooth: hci4: command tx timeout [ 1846.627913][T20979] Bluetooth: hci4: command tx timeout [ 1847.138291][ T5990] usb 3-1: USB disconnect, device number 75 [ 1847.895482][T22016] udc dummy_udc.0: failed to start g1: -4 [ 1847.901530][T22016] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 1847.968520][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.088029][T22016] UDC core: g1: couldn't find an available UDC or it's busy [ 1848.186739][T22034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1849.751871][T22042] LUN: removable file: (no medium) [ 1849.824610][ T36] kauditd_printk_skb: 131 callbacks suppressed [ 1849.824683][ T36] audit: type=1800 audit(1787998196.204:336): pid=22042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4000" name="file" dev="configfs" ino=88672 res=0 errno=0 [ 1850.662536][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.104279][T22061] hfsplus: unable to find HFS+ superblock [ 1853.437157][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.437232][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.565311][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.693987][T22082] input: syz0 as /devices/virtual/input/input77 [ 1856.160905][T22074] ifb0: entered promiscuous mode [ 1856.237862][T22074] macvlan0: entered promiscuous mode [ 1856.404626][T22074] ifb0: left promiscuous mode [ 1857.117836][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.174116][T22097] ªªªªªª: renamed from vlan0 [ 1859.837695][T21946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.911305][T21946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.927915][T21946] bridge_slave_0: entered allmulticast mode [ 1859.975727][T21946] bridge_slave_0: entered promiscuous mode [ 1860.092681][T21946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.097930][T21946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.101783][T21946] bridge_slave_1: entered allmulticast mode [ 1860.170921][T21946] bridge_slave_1: entered promiscuous mode [ 1860.578086][T21946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1860.589074][T21946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1864.993029][T21946] team0: Port device team_slave_0 added [ 1866.275751][T21946] team0: Port device team_slave_1 added [ 1866.556045][T21946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1866.563165][T21946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1866.563196][T21946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1866.759719][T21946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1866.759784][T21946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1866.759836][T21946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.919850][T21946] hsr_slave_0: entered promiscuous mode [ 1869.930709][T21946] hsr_slave_1: entered promiscuous mode [ 1869.945787][T21946] debugfs: 'hsr0' already exists in 'hsr' [ 1869.945876][T21946] Cannot create hsr debugfs directory [ 1870.190279][ T56] bridge_slave_1: left allmulticast mode [ 1870.197510][ T56] bridge_slave_1: left promiscuous mode [ 1870.197826][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.363550][ T56] bridge_slave_0: left allmulticast mode [ 1870.382002][ T56] bridge_slave_0: left promiscuous mode [ 1870.382600][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.833558][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.932622][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.956106][ T56] bond0 (unregistering): Released all slaves [ 1877.359184][T21826] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1877.571978][T21826] usb 9-1: Using ep0 maxpacket: 32 [ 1877.580079][T21826] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1877.583284][T21826] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1877.583312][T21826] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1878.531390][ T5259] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1879.214566][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1879.280938][T21826] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=8 [ 1879.282574][T21826] usb 9-1: Product: syz [ 1879.282593][T21826] usb 9-1: Manufacturer: syz [ 1879.282608][T21826] usb 9-1: SerialNumber: syz [ 1880.376634][T21826] usb 9-1: can't set config #4, error -71 [ 1880.389215][T21826] usb 9-1: USB disconnect, device number 20 [ 1881.841924][T16696] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1881.982190][T16696] usb 3-1: device descriptor read/64, error -71 [ 1882.221979][T16696] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1882.352131][T16696] usb 3-1: device descriptor read/64, error -71 [ 1882.503612][T16696] usb usb3-port1: attempt power cycle [ 1883.241969][T16696] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1883.262664][T16696] usb 3-1: device descriptor read/8, error -71 [ 1884.584881][T16696] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1884.674389][T16696] usb 3-1: device descriptor read/8, error -71 [ 1884.791391][T16696] usb usb3-port1: unable to enumerate USB device [ 1884.869749][ T5259] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1887.840379][ T36] audit: type=1800 audit(1787998234.214:337): pid=22337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4074" name="file" dev="configfs" ino=90364 res=0 errno=0 [ 1888.582806][ T5990] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 1888.794164][ T5990] usb 8-1: device descriptor read/64, error -71 [ 1889.054268][ T5990] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 1889.195623][ T5990] usb 8-1: device descriptor read/64, error -71 [ 1889.401211][ T5990] usb usb8-port1: attempt power cycle [ 1890.140767][ T5990] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 1890.181570][ T5990] usb 8-1: device descriptor read/8, error -71 [ 1890.462227][ T5990] usb 8-1: new full-speed USB device number 61 using dummy_hcd [ 1890.499437][ T5990] usb 8-1: device descriptor read/8, error -71 [ 1890.621321][ T5990] usb usb8-port1: unable to enumerate USB device [ 1893.984758][ T56] hsr_slave_0: left promiscuous mode [ 1894.032119][ T56] hsr_slave_1: left promiscuous mode [ 1894.034851][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1894.034912][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1894.087013][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1894.087113][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1894.195270][ T36] audit: type=1800 audit(1787998240.574:338): pid=22378 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4087" name="file" dev="configfs" ino=90567 res=0 errno=0 [ 1894.278717][ T56] veth1_macvtap: left promiscuous mode [ 1894.279573][ T56] veth0_macvtap: left promiscuous mode [ 1894.279959][ T56] veth1_vlan: left promiscuous mode [ 1894.280237][ T56] veth0_vlan: left promiscuous mode [ 1895.059319][T22386] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1895.074245][T22386] block device autoloading is deprecated and will be removed. [ 1896.952339][T20053] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1897.112603][T20053] usb 9-1: device descriptor read/64, error -71 [ 1897.362529][T20053] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1897.801991][T20053] usb 9-1: device descriptor read/64, error -71 [ 1897.951572][T20053] usb usb9-port1: attempt power cycle [ 1898.210933][T15414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1898.270159][T15414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1898.279635][T15414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1898.307740][T15414] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1898.316692][T15414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1898.330750][T20053] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1898.359177][T20053] usb 9-1: device descriptor read/8, error -71 [ 1898.601953][T20053] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1898.632796][T20053] usb 9-1: device descriptor read/8, error -71 [ 1898.742353][T20053] usb usb9-port1: unable to enumerate USB device [ 1898.772595][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1898.780487][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4097'. [ 1898.792985][T22419] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4097'. [ 1898.834755][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1898.996421][T22426] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1900.487695][T22421] kvm: pic: level sensitive irq not supported [ 1900.782106][T20979] Bluetooth: hci5: command tx timeout [ 1902.812105][T20979] Bluetooth: hci5: command tx timeout [ 1904.902115][T20979] Bluetooth: hci5: command tx timeout [ 1905.802283][ T5990] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1906.080716][ T5990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1906.080818][ T5990] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 1906.091577][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.091616][ T5990] usb 3-1: Product: syz [ 1906.091643][ T5990] usb 3-1: Manufacturer: syz [ 1906.091671][ T5990] usb 3-1: SerialNumber: syz [ 1907.318655][ T36] audit: type=1800 audit(1787998253.694:339): pid=22516 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4112" name="file" dev="configfs" ino=90075 res=0 errno=0 [ 1907.391358][ T5990] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1907.391414][ T5990] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1907.396441][ T5990] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1907.433917][ T5990] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1907.795289][T20979] Bluetooth: hci5: command tx timeout [ 1907.842915][ T5990] usb 3-1: USB disconnect, device number 80 [ 1908.172539][ T5603] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1908.311957][ T5603] usb 9-1: device descriptor read/64, error -71 [ 1908.561931][ T5603] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1908.733538][ T5603] usb 9-1: device descriptor read/64, error -71 [ 1908.845209][ T5603] usb usb9-port1: attempt power cycle [ 1909.821901][ T5603] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1910.030176][ T5603] usb 9-1: device descriptor read/8, error -71 [ 1910.164319][T22412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.164475][T22412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.164641][T22412] bridge_slave_0: entered allmulticast mode [ 1910.171032][T22412] bridge_slave_0: entered promiscuous mode [ 1910.182520][T22412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.182626][T22412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.182778][T22412] bridge_slave_1: entered allmulticast mode [ 1910.211739][T22412] bridge_slave_1: entered promiscuous mode [ 1910.358087][T22412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1910.394820][T22412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1910.490495][T22412] team0: Port device team_slave_0 added [ 1910.501519][T22412] team0: Port device team_slave_1 added [ 1910.542989][T22412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1910.550103][T22412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1910.550134][T22412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1910.589744][T22412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1910.603066][T22412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1910.603096][T22412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.760429][T22412] hsr_slave_0: entered promiscuous mode [ 1910.774013][T22412] hsr_slave_1: entered promiscuous mode [ 1910.777513][T22412] debugfs: 'hsr0' already exists in 'hsr' [ 1910.777537][T22412] Cannot create hsr debugfs directory [ 1913.421956][T21826] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1913.573784][T21826] usb 8-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1913.593458][T21826] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1913.604445][T21826] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1913.606113][T21826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1913.606136][T21826] usb 8-1: Product: syz [ 1913.606151][T21826] usb 8-1: Manufacturer: syz [ 1913.669370][T21826] mos7840 8-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1913.792413][ T56] bridge_slave_1: left allmulticast mode [ 1913.792501][ T56] bridge_slave_1: left promiscuous mode [ 1913.792920][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.953487][ T56] bridge_slave_0: left allmulticast mode [ 1913.955141][ T56] bridge_slave_0: left promiscuous mode [ 1913.955583][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.575072][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.575205][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.649805][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1917.856852][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1918.032551][ T56] bond0 (unregistering): Released all slaves [ 1918.237171][T22625] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1918.237237][T22625] tc_dump_action: action bad kind [ 1918.606464][T21826] usb 8-1: Moschip 7840/7820 USB Serial Driver converter now attached to ttyUSB0 [ 1918.643843][T21826] usb 8-1: USB disconnect, device number 62 [ 1918.888308][T21826] mos7840 ttyUSB0: Moschip 7840/7820 USB Serial Driver converter now disconnected from ttyUSB0 [ 1918.902596][T21826] mos7840 8-1:1.0: device disconnected [ 1920.721325][T20979] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1920.963149][ T56] hsr_slave_0: left promiscuous mode [ 1921.002008][ T56] hsr_slave_1: left promiscuous mode [ 1921.004453][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1921.042610][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1921.215347][T21826] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1921.383061][T21826] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1921.386747][T21826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1921.386868][T21826] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1921.386931][T21826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1921.386994][T21826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1921.387057][T21826] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1921.410586][T21826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1921.410647][T21826] usb 3-1: Product: syz [ 1921.410684][T21826] usb 3-1: Manufacturer: syz [ 1921.410731][T21826] usb 3-1: SerialNumber: syz [ 1921.450942][T21826] usb 3-1: config 0 descriptor?? [ 1921.688227][T21826] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1921.688357][T21826] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1921.783098][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1921.900507][T21826] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1921.900589][T21826] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1921.901240][T21826] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1921.938872][T22651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.952236][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1921.963931][T22651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.297808][T22670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.301257][T22670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.123350][T22655] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1924.123421][T22655] tc_dump_action: action bad kind [ 1924.422517][T16728] usb 3-1: USB disconnect, device number 81 [ 1925.039874][T22412] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1925.164823][T22412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1925.166029][T22412] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1925.194611][T22412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1925.198091][T22412] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1925.295293][T22412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1925.299604][T22412] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1925.489105][T22412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1925.616172][T22709] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f801 [ 1926.410330][T22716] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4161'. [ 1926.410408][T22716] tc_dump_action: action bad kind [ 1926.474716][T22412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1926.509096][T22412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1926.541899][T15996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1926.542227][T15996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1926.571135][T20742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.571663][T20742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1926.694759][T16696] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1926.730350][T22726] Invalid logical block size (8192) [ 1926.900516][T16696] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1926.921303][T16696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.948055][T16696] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1926.948084][T16696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1926.948148][T16696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1926.948211][T16696] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1927.198917][T16696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1927.198944][T16696] usb 3-1: Product: syz [ 1927.198958][T16696] usb 3-1: Manufacturer: syz [ 1927.198973][T16696] usb 3-1: SerialNumber: syz [ 1927.393960][T22731] nbd0: detected capacity change from 0 to 63 [ 1927.938524][T16696] usb 3-1: config 0 descriptor?? [ 1928.615785][T16696] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1928.623917][T16696] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1928.839160][T16696] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1928.849657][T16696] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1928.983640][T16696] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1929.088574][T22718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.149258][T22718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.980921][T20979] block nbd0: Receive control failed (result -104) [ 1930.537266][T22739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.539756][T22739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.612115][T22412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1930.884929][T22412] veth0_vlan: entered promiscuous mode [ 1930.911167][T22412] veth1_vlan: entered promiscuous mode [ 1930.964962][T22412] veth0_macvtap: entered promiscuous mode [ 1930.987857][T22412] veth1_macvtap: entered promiscuous mode [ 1931.010226][T22412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1931.078314][T22412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1931.149358][T19284] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.149415][T19284] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.149444][T19284] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.155500][T19284] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.616187][T22769] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4176'. [ 1931.712015][ T5990] usb 3-1: USB disconnect, device number 82 [ 1932.125663][T22779] hfsplus: unable to find HFS+ superblock [ 1932.927111][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.928515][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.097860][T13361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1933.097928][T13361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.872214][ T5603] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 1934.167903][ T5603] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1934.199579][ T5603] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1934.203997][ T5603] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1934.204045][ T5603] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1934.204099][ T5603] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1934.204152][ T5603] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1934.524672][ T5603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1934.524831][ T5603] usb 9-1: Product: syz [ 1934.524895][ T5603] usb 9-1: Manufacturer: syz [ 1934.524912][ T5603] usb 9-1: SerialNumber: syz [ 1935.176942][ T5603] usb 9-1: config 0 descriptor?? [ 1935.256277][T22804] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4188'. [ 1935.414277][ T5603] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1935.421132][ T5603] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1935.958565][ T5603] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1935.958833][ T5603] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1935.959890][ T5603] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1936.708566][T22813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.710971][T22813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.443333][ T5990] usb 9-1: USB disconnect, device number 29 [ 1940.561538][T22836] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4199'. [ 1944.506288][T22874] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4211'. [ 1945.018129][T22887] hfsplus: unable to find HFS+ superblock [ 1945.775687][T22900] netlink: 140 bytes leftover after parsing attributes in process `syz.8.4223'. [ 1945.821901][ T9387] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1945.974201][ T9387] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1945.991408][ T9387] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1945.991453][ T9387] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.977284][ T9387] wacom 0003:056A:033B.0025: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1949.083406][ T9387] wacom 0003:056A:033B.0025: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.7-1/input0 [ 1949.108071][ T9387] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:056A:033B.0025/input/input78 [ 1949.482018][ T9387] usb 8-1: USB disconnect, device number 63 [ 1950.962022][ T9387] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1951.122205][ T9387] usb 6-1: Using ep0 maxpacket: 8 [ 1951.129127][ T9387] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1951.131009][ T9387] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1951.131059][ T9387] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1951.131083][ T9387] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1951.131108][ T9387] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1951.131131][ T9387] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1951.131172][ T9387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.293470][T22954] hfsplus: unable to find HFS+ superblock [ 1951.495801][ T9387] usb 6-1: usb_control_msg returned -32 [ 1951.497450][ T9387] usbtmc 6-1:16.0: can't read capabilities [ 1951.613844][T22961] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4243'. [ 1952.082929][T22974] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1953.326533][T20979] Bluetooth: hci5: link tx timeout [ 1953.339501][T20979] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1953.760177][T16694] usb 6-1: USB disconnect, device number 65 [ 1953.875563][T22955] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR [ 1955.611889][T20979] Bluetooth: hci5: command 0x0406 tx timeout [ 1955.763039][T22999] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4255'. [ 1956.223169][T20053] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1957.085171][T20053] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1957.098954][T20053] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.107206][T20053] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1957.107238][T20053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1957.107266][T20053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1957.107365][T20053] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1957.246483][T20053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1957.246554][T20053] usb 6-1: Product: syz [ 1957.246570][T20053] usb 6-1: Manufacturer: syz [ 1957.246601][T20053] usb 6-1: SerialNumber: syz [ 1957.280151][T20053] usb 6-1: config 0 descriptor?? [ 1958.246368][T20053] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1958.253274][T20053] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1958.399726][T20053] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1958.399751][T20053] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1958.400003][T20053] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1958.432714][T23035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1958.435808][T23035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1958.558758][T23038] Invalid logical block size (8192) [ 1958.572424][T16694] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1958.721874][T16694] usb 3-1: Using ep0 maxpacket: 8 [ 1958.761685][T16694] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1958.879979][T16694] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1958.880117][T16694] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1958.880173][T16694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1958.880199][T16694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1958.880260][T16694] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1958.880339][T16694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.061081][T23039] nbd1: detected capacity change from 0 to 63 [ 1960.222842][T16694] usb 3-1: usb_control_msg returned -32 [ 1960.229636][T16694] usbtmc 3-1:16.0: can't read capabilities [ 1960.614015][ T1687] block nbd0: Possible stuck request ffff888026e50000: control (read@0,1024B). Runtime 30 seconds [ 1960.650180][ T1687] block nbd0: Possible stuck request ffff888026e501c0: control (read@1024,1024B). Runtime 30 seconds [ 1960.663407][ T1687] block nbd0: Possible stuck request ffff888026e50380: control (read@2048,1024B). Runtime 30 seconds [ 1960.663476][ T1687] block nbd0: Possible stuck request ffff888026e50540: control (read@3072,1024B). Runtime 30 seconds [ 1961.461689][T16693] usb 6-1: USB disconnect, device number 66 [ 1961.726815][T15414] block nbd1: Receive control failed (result -104) [ 1961.767198][T23046] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4270'. [ 1961.887155][T16694] usb 3-1: USB disconnect, device number 83 [ 1963.811925][T16693] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1963.825634][T23081] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4282'. [ 1963.962796][T16693] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1963.973843][T16693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.973891][T16693] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1963.973917][T16693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1963.973943][T16693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1963.973965][T16693] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1963.976656][T16693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1963.976679][T16693] usb 6-1: Product: syz [ 1963.976711][T16693] usb 6-1: Manufacturer: syz [ 1963.976726][T16693] usb 6-1: SerialNumber: syz [ 1963.981676][T16693] usb 6-1: config 0 descriptor?? [ 1964.146574][T23083] Invalid logical block size (8192) [ 1964.361363][T23085] nbd2: detected capacity change from 0 to 63 [ 1964.747052][T16693] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1964.754768][T16693] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1964.827263][T16693] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1964.827288][T16693] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1964.827552][T16693] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1965.238391][T23090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.281461][T23090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1967.120509][T16693] usb 6-1: USB disconnect, device number 67 [ 1967.324763][T15414] block nbd2: Receive control failed (result -104) [ 1968.170657][T23116] netlink: 140 bytes leftover after parsing attributes in process `syz.8.4294'. [ 1968.265361][T23114] ------------[ cut here ]------------ [ 1968.265378][T23114] kernel BUG at net/core/dev.c:11397! [ 1968.265548][T23114] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1968.283735][T23114] CPU: 1 UID: 0 PID: 23114 Comm: syz.5.4295 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1968.296170][T23114] Tainted: [L]=SOFTLOCKUP [ 1968.300677][T23114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1968.311108][T23114] RIP: 0010:register_netdevice+0x1eb4/0x1ed0 [ 1968.317357][T23114] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c bd fb ff ff 4c 89 f7 e8 ef 43 0a f9 e9 b0 fb ff ff e8 25 97 9e f8 90 0f 0b e8 1d 97 9e f8 90 <0f> 0b e8 15 97 9e f8 90 0f 0b e8 0d 97 9e f8 41 be 42 00 00 00 e9 [ 1968.337608][T23114] RSP: 0018:ffffc9000649f5e0 EFLAGS: 00010287 [ 1968.344652][T23114] RAX: ffffffff8927dc13 RBX: 1ffff92000c93ed0 RCX: 0000000000080000 [ 1968.354214][T23114] RDX: ffffc90007581000 RSI: 000000000000058a RDI: 000000000000058b [ 1968.362571][T23114] RBP: ffffc9000649f758 R08: 0000000000000000 R09: 0000000000000000 [ 1968.370848][T23114] R10: dffffc0000000000 R11: fffffbfff1f63b70 R12: ffff888036354888 [ 1968.379537][T23114] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888036354000 [ 1968.387706][T23114] FS: 00007f43718466c0(0000) GS:ffff888125cd6000(0000) knlGS:0000000000000000 [ 1968.396917][T23114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1968.403744][T23114] CR2: 00007ffe64684e30 CR3: 0000000058dfa000 CR4: 00000000003526f0 [ 1968.411913][T23114] Call Trace: [ 1968.415471][T23114] [ 1968.418684][T23114] ? __pfx_register_netdevice+0x10/0x10 [ 1968.424264][T23114] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1968.430286][T23114] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1968.436395][T23114] ? _mutex_lock_killable+0x152/0x1d0 [ 1968.442078][T23114] ? register_netdev+0x18/0x60 [ 1968.446964][T23114] register_netdev+0x40/0x60 [ 1968.451679][T23114] pn_bind+0x115/0xb20 [ 1968.456329][T23114] usb_add_function+0x290/0x930 [ 1968.461311][T23114] configfs_composite_bind+0xde0/0x1410 [ 1968.467019][T23114] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1968.473203][T23114] gadget_bind_driver+0x2ca/0x9e0 [ 1968.478422][T23114] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1968.484416][T23114] really_probe+0x254/0xae0 [ 1968.489252][T23114] __driver_probe_device+0x1e8/0x360 [ 1968.494571][T23114] driver_probe_device+0x4f/0x240 [ 1968.499714][T23114] __driver_attach+0x339/0x600 [ 1968.504587][T23114] bus_for_each_dev+0x23e/0x2c0 [ 1968.509445][T23114] ? __pfx___driver_attach+0x10/0x10 [ 1968.514830][T23114] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1968.520298][T23114] ? rt_spin_unlock+0x165/0x200 [ 1968.525163][T23114] bus_add_driver+0x348/0x670 [ 1968.530108][T23114] driver_register+0x23a/0x320 [ 1968.535059][T23114] usb_gadget_register_driver_owner+0xf9/0x270 [ 1968.541316][T23114] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1968.547486][T23114] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1968.553819][T23114] configfs_write_iter+0x33a/0x430 [ 1968.559202][T23114] vfs_write+0x61e/0xbb0 [ 1968.563822][T23114] ? __pfx_vfs_write+0x10/0x10 [ 1968.568599][T23114] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1968.574410][T23114] ? mutex_lock_nested+0x152/0x1d0 [ 1968.579965][T23114] ? fdget_pos+0x252/0x320 [ 1968.584479][T23114] ksys_write+0x156/0x270 [ 1968.588827][T23114] ? __pfx_ksys_write+0x10/0x10 [ 1968.593786][T23114] do_syscall_64+0x166/0x520 [ 1968.598567][T23114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.604731][T23114] ? clear_bhb_loop+0x70/0xc0 [ 1968.609613][T23114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.615875][T23114] RIP: 0033:0x7f43735ee159 [ 1968.620754][T23114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1968.640729][T23114] RSP: 002b:00007f4371846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1968.649161][T23114] RAX: ffffffffffffffda RBX: 00007f4373875fa0 RCX: 00007f43735ee159 [ 1968.657233][T23114] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000009 [ 1968.665393][T23114] RBP: 00007f4373685024 R08: 0000000000000000 R09: 0000000000000000 [ 1968.673462][T23114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1968.681794][T23114] R13: 00007f4373876038 R14: 00007f4373875fa0 R15: 00007fffdecc4d38 [ 1968.689785][T23114] [ 1968.692822][T23114] Modules linked in: [ 1968.696820][T23114] ---[ end trace 0000000000000000 ]--- [ 1968.710364][T23111] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1968.764920][T23114] RIP: 0010:register_netdevice+0x1eb4/0x1ed0 [ 1968.771114][T23114] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c bd fb ff ff 4c 89 f7 e8 ef 43 0a f9 e9 b0 fb ff ff e8 25 97 9e f8 90 0f 0b e8 1d 97 9e f8 90 <0f> 0b e8 15 97 9e f8 90 0f 0b e8 0d 97 9e f8 41 be 42 00 00 00 e9 [ 1968.771138][T23114] RSP: 0018:ffffc9000649f5e0 EFLAGS: 00010287 [ 1968.771159][T23114] RAX: ffffffff8927dc13 RBX: 1ffff92000c93ed0 RCX: 0000000000080000 [ 1968.771176][T23114] RDX: ffffc90007581000 RSI: 000000000000058a RDI: 000000000000058b [ 1968.771190][T23114] RBP: ffffc9000649f758 R08: 0000000000000000 R09: 0000000000000000 [ 1968.771203][T23114] R10: dffffc0000000000 R11: fffffbfff1f63b70 R12: ffff888036354888 [ 1968.771218][T23114] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888036354000 [ 1968.771233][T23114] FS: 00007f43718466c0(0000) GS:ffff888125cd6000(0000) knlGS:0000000000000000 [ 1968.771256][T23114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1968.771271][T23114] CR2: 00007f4371804d58 CR3: 0000000058dfa000 CR4: 00000000003526f0 [ 1968.771298][T23114] Kernel panic - not syncing: Fatal exception [ 1968.870849][T23114] Kernel Offset: disabled [ 1968.875274][T23114] Rebooting in 86400 seconds..