last executing test programs: 18m0.38588321s ago: executing program 32 (id=73): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000300)) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0x4112, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 15m13.381776048s ago: executing program 33 (id=370): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x280d00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4a00, 0x0, 0x2000, 0x20042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}]}}}]}, 0x40}}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000280)={0x38, 0x6, 0x5a, 0x8001, 0x0, 0x9, 0x40004, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) getrusage(0xfffffffffffffffe, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x30, 0x4, 0x53, 0xfffff03d}]}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 14m39.060933725s ago: executing program 6 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x69, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) 14m32.027993927s ago: executing program 6 (id=460): socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x300fff2) 14m31.041043845s ago: executing program 6 (id=463): socket$inet6(0xa, 0x80001, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r0 = open(0x0, 0x0, 0xdb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_ethernet(0x45, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) getitimer(0xe, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f00000002c0)=""/78, 0x4e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b45, 0x0) 14m30.107179499s ago: executing program 6 (id=467): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x0}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9, 0x4}}, 0xe8) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x69) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 14m22.271308734s ago: executing program 6 (id=480): socket$inet6(0xa, 0x80001, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r0 = open(0x0, 0x0, 0xdb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_ethernet(0x45, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) getitimer(0xe, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f00000002c0)=""/78, 0x4e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) 14m21.496071149s ago: executing program 6 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000300)='./bus\x00', 0x1c12c2, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 14m6.129383594s ago: executing program 34 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000300)='./bus\x00', 0x1c12c2, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 12m59.759171268s ago: executing program 3 (id=772): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1}, 0x74e96c96}], 0x1, 0x40, 0x0) 12m59.4362913s ago: executing program 3 (id=776): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0x9, 0xfffd, 0xffffdfffffffffff, 0x282, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) 12m57.250927512s ago: executing program 3 (id=781): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0xa, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 12m57.18693285s ago: executing program 3 (id=785): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 12m55.480918869s ago: executing program 3 (id=788): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 12m51.697077998s ago: executing program 3 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002d80)={0x17}) 12m50.49454021s ago: executing program 35 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002d80)={0x17}) 11m58.333228923s ago: executing program 7 (id=1063): r0 = io_uring_setup(0x44b2, &(0x7f0000000580)={0x0, 0xc864, 0x80, 0x2, 0xad}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) 11m58.097125141s ago: executing program 7 (id=1066): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 11m56.531799707s ago: executing program 7 (id=1071): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) sendto$inet6(r2, &(0x7f00000000c0)="95fcfcc177c8", 0x6, 0x4004001, 0x0, 0x0) 11m56.286773015s ago: executing program 7 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 11m55.21045466s ago: executing program 7 (id=1077): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 11m51.310417314s ago: executing program 7 (id=1086): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r4, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) 11m35.955115639s ago: executing program 36 (id=1086): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r4, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) 11m16.55750058s ago: executing program 8 (id=1172): socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x7, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0x10) 11m14.891007117s ago: executing program 8 (id=1173): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x300, 0x0, 0xff, 0x1, 0x0, 0x6}, 0x20) r2 = timerfd_create(0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x200000000000000, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x2, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0xe3, 0x18, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 11m13.71450272s ago: executing program 8 (id=1174): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0xffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m12.511490695s ago: executing program 8 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x22903) socket$inet6(0xa, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x20004000) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) 11m11.106675706s ago: executing program 8 (id=1176): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r1, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, 0x0, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 11m10.089285211s ago: executing program 8 (id=1182): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x8000) 10m54.736350088s ago: executing program 37 (id=1182): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x8000) 44.84926769s ago: executing program 5 (id=4062): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0xb465b2feae86b711, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 41.299345923s ago: executing program 5 (id=4078): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r2, 0x1009}], 0x1, 0x8000007) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 40.961445208s ago: executing program 5 (id=4081): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000"], 0x0) syz_emit_ethernet(0x57, &(0x7f0000000480)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1d2000", 0x1d, 0x2c, 0x0, @remote, @local, {[@routing={0x33, 0x0, 0x0, 0xe}], {{0x8000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {':'}}}}}}}, 0x0) 40.772866245s ago: executing program 5 (id=4082): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x32f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 40.590569434s ago: executing program 5 (id=4084): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x3}, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb517", 0x3e}, {0x0}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x28, 0x41, 0x0) 39.61470694s ago: executing program 5 (id=4090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8040) 39.345926916s ago: executing program 38 (id=4090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8040) 14.831908916s ago: executing program 1 (id=4181): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0xfffd, 0x0, 0xf82, 0x9}, &(0x7f00000001c0)=0x10) syz_emit_ethernet(0x129a, &(0x7f0000002e00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6a40000012641100ff010000000000000000000000000001ff02000000000000000000000000000133000141650000008714000000000000c91000000000000000000000000000000001800087cffd88fcee6ae536b8c262754f3f8ec5fa7a086511afb5bf6b285621c8b330927a16149838d79d3ff338b9c577ff508de5c17126f5a0c2d7c191f7eb1ff291c53d77353dd1d4c8e2f2d603400cf856575165e7bd94a7d3d51257c559d3ec1d72c741aa710b5c29512380d245c2b10fc74e10d5fb6a76dd85c5cad5d16e87be2fa83b5610f09a7dd9ca5b5d12a9f2f988186f99589ae69f88a805fde9bdc3bbd2a54df889217e752b7808d4d58970bd6bd69b6ebdc304a469a1605f0d2ad15a87e59403c15737dcd04f4cc3376a1be190954a09bcfca45dddc9dc4eef5d4c15eea50df3dde4a5fd6002d389ee6c5f49e7e0b136868da9799043ef44fce3e886ace4ba544b17cd1f62dffa4a1e77d18124304fb64c192e6f32d92ced6a37216c43a8b60b3659832b586bf301b97e5da1171aebd2094d1c3a869f9a8882130c525982ebaa7405352f1a1700b612c56f95f99ece44bfc97972de9e5b6a305162a14814e5650647a0bfa36044bfb32292a735530fe3136fce8dda40cf18c334a74e2b45cb56f84c7cf3ce783e104b7a303725c51fda58eca6132da8142cc4d5a5c46bfecbbf9b0382438126c87fc9ccd9e54b7563c14af10ddcab508c530718a51c89da5f91edf2206fef8d35bed7dff645bae4bd07d77c1ab795f659c5df7c40914b5bd75ac9932fd9e1f8e62d5244b58ad5af3ab91e11c17be3e01ac0aed8ff1c8e251ba0a9dbf84e4f4cdf4e4a10bb7ba5da4c31f7bfdc5b2b7cf58067820ba9f69994ddd97e705ae624d4d5d3eb3888d7de30c84bdaf3be067dc83ffd81f6d24e8e49c0e1339a77dffd695cabbbb171b2f664e798dfea0000dc7976055253358f73a633556f7e39de07f57d32e481f41b5f287e9ddde4e0b2db190a37b273208df7c536d8b331a64f6c38bb37b6c66c8ca37a0828cd155ee6a57c7e1d44d087a98aaddc6f00bf7c25846e6dffb0f3178cada93dcaf72cd46602f90d417bdba1345c4b5f2bc1cf93a276255ec18fd7d4c5c4317082886ffa394beb4868cad97f5d297d15a2bd1ca25f9bf34283a33813379954617c47085b51e9cdbbb7c2012161711df77d22b52a1d444028ea7f3287022329dcf8e0b8c89d9c0f16b866f14c10efe3082e9b1dba2508cae5deb398f94f038d71c27f7bd05db9adc24133341f688915b656f5548301f5c2c523e607a3b609e295d8ae53fc57d94788d47c3dd6a101acb101c64f1d4414cae3ad26bf97dd467edc8cd99ad7a4d108aefb9086980f063132ccba176b804d649c1d4304cda2fa693510c3b2c003c32fcd682199bf48774dee0d5dfc2f76e65b8f448dd9c92557ce6ca5e8739e1a81ee9ebf62523c2b7112af846bb7cf34abc1ac30d42311f4443f5ecefa4eaad4728ee99269dd0319911b2abcff7b3e73785b37c39802fe457c04d60249d1494a73c7b7182967a3120258ef64ff8a89811969968790a84c96c53268e98aff617aa9984840909cbc6162b416cf1850a856d35ae7f6afacac31cef7ba854852b2b07ecdaa621e45e354265e5604f2585cc943e7ff06f7bd0acfa24333c7177038641cb6709e230395c9d2a98c71d0fca3493627929890f7e2b0ee33a470de227a993a953265b8d0b5307123575afd3480fb79a7dc9934185e773fcf7d0dbf781ee8498d621d1415535becbb4b69aa3a92be6c1fda8919934bb5ad5fe6cdf8c9e40bef5c60e198c2693dcc8b24db242251a50ffe218340576d9b54f0b08c694b69ab4eb5f85ea3f4b008ba7b1811ffa09e160c2ec59f58d569a6949944f7d15e61e3eff7797b93208b89f25873d6c1c5f6ceb9e1c7680c40f351bc3f23e790d3f18c7b27ab116331dca9e1245e29b91ea2d7a0075ad71765628093d2379f3e1389f3421cc3b1cf2f09d6aee49978a1ebb24da4c1514d9a327c7ca987db9d0c4ea94696ff9ec108181f7bed9ac0567d428d7da544a1f0d0aa05b9f2afa16c2998993f584ce0f98adc08d293f6613f8d984783641f73e5feb21fb9bde3e6d7d5ce9139a93ce80fce5480e78df6257261427a13aa0eb04825b7cb5c3e8193f9bca7916b06f5f457c6f0344d625f60ac1d150df9d6d30a87a12f9fafbca818fd75fcc723aebdfab109d96673cd87bc6ba4d4cbb710ead33c637197ab72f08bdbc4c0a46146da96e738171ee1f483a7a2f401d4483f7f3b06555d46e3585efe5c495fdf78bd57a129ba486c65646bc48e9e60079d4d27588034742621e940f2597863f214668a9ac3b41a7ff39cbd8f361b7d86024f79df5cb4ce7486db85e6e349ea3626145cda7ab43e457fd598ebda2896cfc3b02d872f6a55afe4ae56844b55debd3715ed85318d8d0c686e097ebabcd2ef6d9a40428fa5360dd6c94e7baa924049c5510e81922ae107451814e7d92f3297d521a843dfcdd823232ac1bd3de39aa796ca1bacd44bbb809e05caf263f65ff0c793988d844fa9a0228006cf3ece98af488e0839c358565f11d314031632f5f740ca8a572eca6751a6434a947be4c3bd14447208e751b6cc8366bd593616577f11812063b07a84cdcc40da51a06bd80dc4a5a060d3c8be9b126f7d39237e9b05ee76dedbe28028e3c15514f82eda080c55534686fc74e57de19c0151f2fa167afe422b29f3991ec1138de0b561947d6175f9c8f5727d405866de4e5ba7a840b9ef07dbc4e6bba88f01bff87f7cad1a224beb5c3eea6046fe90080d7f3d69f7b65e3f70c49d96ef0da03aa5a8bdcd46c531895ef112beae0dbcba63c61d95458dee87a25b1cc4a75eb0cdf3b2f427d9792ed4bf6a4bf8ec5411beeb173b8071174ddb6b0c7d7e5174734da7371cfc909f491474921861587b3419e2465dd7161b136701ee377677101df4b9ebd9e4c32fa17cb29925834b4fdf9c68bdf6be5fd76823f5ba2d9f1d130a04fab715dea7c3850675782aa0afd12f2ba0866eb579d1e397af270202686d57bb877bae1f45beb3ac7190e5bbe79cb14911809d03a5bf1c402683e96d0b90efd127dd16b29f78c0d9d9fe620bb8ffb5963482a96268c5a0f434ce4ad0c323b0c4ddaba50787b87647a8057f2e280df36d83871ddcb5b7707244dc735f8767e7d0fb67f8a05c0c1ce8da3379b815e3aa5ecadbc33a534915aa68baa6e13335e842a1460f08cb6ba24a611c105a0a263449b9cedb8bf79d295b5beed5a0a7d0036742366d1a3da82d3a609d990a8bb9e27ccc61f4eeebfd39895703374f6f2e4582958cd89d21db6c21e99318197dbd2832db931b0b7b98504abf9266fea76e7aa05aa6a09165f5a184cfca06e820bb19d5f65ead75ce6f561e94fac7d341d25136fbdf550664c15febd1727f586279406cbe9dada31785883d03a05b4c0d8edffcdd8c6460c0ba048f480ed4a03a8ff7ac2a5ef46d31b0f9e13c898ee6d8853f90e7d4ee826f2d6a40550797096bd5932efd002a400c762f55228a86a812e9620866b26125e90a0ab7f9405058dc6804e922ed620f1b5b4f4811cdcd987929708a132b70409bc942dea0db37e6399913369d48ef4fc1ba737e0f47d8b8ea0be52dc8357bf5ae42888599454f1b9f38d910e77fa065d19be89efffe3489182bf48825892e3bb31d86977b69c2e65c2be9a948b2221d2b0f630e7d0657c0782e8b1ce4d0bbf485a96d0fb50a8a5352b82c65b7952612a9b2d10d904c48585d9309c00d135b3d141883cab0ac5b1f4f75ec337c59b76b21782860d909e8f7697f6dfa58988271d3b8023bd72923a69cec2b48b9d44bc33729ddfa4a76adf2b34593f263403c9c30b6b66f59672a3eb708b1e017568a675352c51a67580aff76c3911ba9ac206ffec023a0e607466e44c433748804b507e5054a313ae3ad5ce9cc3a2bc639a00187db34285c73d985972fbfa50dbd8dd9063bbe76aceaabfb0aea5ef1e24350760837011c848f7600c5dd7969b4e61230ac1fb5cc610da5d6838609d578df20fc71ed84c2d179b6496cc289be64e8c48284c9c7ef52214bf61b446d8af058bbed89ce5ac42b8d6061e7ac7744eabf5cb291ae04c8fe8aab3124561f6e9c25b064bbd6ed32aa2957d411400fd6210201473b4ea1dacee7fbca4e94f881c055f6d8478e9912f3f22266b592b1498e73a4fd0a2302c1cd3e28ca14168d85ee5a65b0b9d9adadc4505fcdadcc1a8a5011b50b0b87d54b69203b6b11093facbf6c5cef28b33e968ce7b16c79b72f50b9575038f587fe2740415454fd23c01101ed83e7ebe078658abaa6d1b181bc71b2ea5ab20bd7bfa77afb3ffd06717c147e44f416d19d185bf20c835ced388c24a70a3789ea28e6df1b160bfb3bb7d7ae0db265823f87702bc2daee3b57c03695909f112f73dd4c9dead4295f4bc6a767ca8a07848f2f7b0bd3dfa87ca8fc4c690c04454a6dccda407966b50af51a349e0e4da54b6afe6706ee3c8a8100a375ed30deb36fff06c8345f503db564c2e61c4491ce58f5383e4034e27322e8ab9d16184bb39b9540af961a496729a77733b7cc58917b82417c441b146c0e638be63dfa0da8bc60b78d289dac4fca238f5285f7c4408ae1fd3dbb0576d87e67511418a075df1aebe7b288e83bc823f0f7c3d55064e7f041286b79e54cb19c9f9fe4df09ed01372c7fd2dca6c657d78868f115d8dc2911babcb7d6fe04639350cb8be46c88446bda62b8c207127c821d10d9732bed797b4d1d9d6ee3d11df00185e91291ba0f4e4e7ab3366562db76178be993096925a85f33825a5a78ad309b0a3d54527585116fed205d4e2356b0b4aa18d0f883040b28e6368f268b97622aaae696acb32329d273d3dfe60e38fb6f84664666e6281f3189c52c1d24d3c27e2cb1383e8f87e99c63c32e99efd0fcf0426fc8a479ad9a480c849a5676fbf8d8ac3f3141788ab6d1a2b01869cb7927e551bd906751e1bafc708daf2a9ef38a18c46a206df38e8e1fd97ffd10fc4f200c0164080ac3db95ad9d3040fb8c38d247f3b99013792efc07ceae5ad34bfd6b754c4ca82f68baaf04470a23ee5cd1625e5db35a3614483a1afa6877435af48b468e6218cb1df4bd220ab2711a584a71091b381ab47f42769e0d2e9e5c4847dfda9619292115a2fb2fc7df3df10b348df7d3fd9b7e631b30801edbfc569a75b4a1171ebc98468c56af88491369d28044e940cebfdb2f0def340ec551a53287d3190159f348113663b1429f95b9d44a8fbca51af7e677169bfd7e26af0147831f8925937cc246141718176f970d416c79f83cab7ccde9c41b66224dfe000b81f0120c4a4e7fe7c3f4b438a99e54f44c79cb5a3eee6f1ac1e1c0c5a5ed006753574dfee1afb23b4c84c75d1ab4e0831f37cba9187c53be5e70d55c344b8a62b6e04a7baa86e9a5f4b13e8313ca6f405961f65c8a47b5d8241b66916fa8cf3d26f4f2b0e3ab1f779e293757b56eee1bd85bdc5ba7028dab38e0a5d5929bace27b3b69ccf0887e9b70849e0a8714eb0de4e77fbe752216234ccf7a02a4860449e2bdf6e9e9d578a775d6ec37f4d901b92ec67f2cfb8b44ddb166b8674a5125e5549d54c2b4faad54aa5a0cd17da923c32388590313ebae586084dd657904f8954a611ba63924600b2075ce7fd98128af771f29c679e6f2475883043975bebb64f22023100da4ffd1f5ed019cb1738a986dab9bf9a2f702a211956787178fad8defbcfe31a1a4d5973af26a86f2c311d329d283ff371f3f3924e8e88a8bb3a3b07f0f793a72bcf60158a67d5af68bc1855b8e8c8aacecfe735bc554ee050200010401080647c3c83fb95dd1509fae06bd02b755c66b3d3be45d4163b2c56940e57ed5168d28e5b5c32e235d0402ac9877524d645b5fe8795a34cc67a58ad1d25116852692e2d6ab411ba94420000100063833f5457555e245c7a8399bd4706bd964a970575eb88cdc687aefcb49683b70d9f16aa3fd1f722c35005053904cbda36b0f2d2342351841b7000000000000004908010a00000000fc010000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000017304000000000000c910fe80000000000000000000000000001ec910fe800000000000000000000000000022040181003206020500000000fc020000000000000000000000000000fc010000000000000000000000000001fe8000000000000000000000000000388400006500000000870a0108000000000000000000000000000000000000000000000000000000000000000000000001fe80000000000000000000000000000c2001000000000000000000000000000200000000000000000000ffff000000004e1d4e22009c90780100000007000000a098f75bcd9a5516f311a8eaa9ce4a38b9000000000000000000000000000000674e20c1c38da0a452bae176e96e2b1e08fcde1ee4805fe36ef556ff6cb46fd595915c864cafe26107bc517193b48ef75e34272cb58a0edc78aea033a347974dea840918d802fa5f8a1c7c9a75d450fb18d042893597291d77675a63867fef542bcf00"/4762], 0x0) io_setup(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) close_range(r2, r2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0xc000) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 14.83150212s ago: executing program 2 (id=4182): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_open_dev$sndpcmc(&(0x7f0000000040), 0x9, 0x32180) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000000c0)=""/36, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast2, 0x0, 0x2, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) r5 = dup(r0) write$UHID_INPUT(r5, 0x0, 0x0) 13.747394073s ago: executing program 2 (id=4186): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xf0cbff9905faea99, 0x6, 0x2853) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000095371331f31600400000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) 12.120204336s ago: executing program 1 (id=4191): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xf4) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 9.245179547s ago: executing program 1 (id=4198): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000480)={0x40, 0xd, 0xd, "735aef93caa1b0c2cd3e67eb88"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.653131921s ago: executing program 0 (id=4203): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8d2dc, 0x80, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.563438741s ago: executing program 0 (id=4205): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x81, "7f0c09", 0x9}) 7.445447246s ago: executing program 2 (id=4206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xcaf, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x7530, &(0x7f00000003c0)={0x0, 0x48d7, 0x800, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket(0xb, 0x2, 0x15) close_range(r3, 0xffffffffffffffff, 0x0) 6.560070867s ago: executing program 4 (id=4208): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 6.133109163s ago: executing program 9 (id=4210): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7", 0x50}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 6.090535628s ago: executing program 1 (id=4211): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000006c0)={0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[]}) 5.998098539s ago: executing program 2 (id=4212): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)) syz_open_dev$dri(0x0, 0x1, 0x0) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x8, 0x1, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f00000005c0)=""/104, 0x68}, {0x0}, {&(0x7f0000000980)=""/76, 0x4c}, {0x0}, {0x0}], &(0x7f0000000d00)=[0x6, 0x9, 0x4a, 0xfffffffffffffffd]}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x2) shutdown(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x5a}, 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{0x0}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 5.24655905s ago: executing program 2 (id=4213): syz_open_procfs$pagemap(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0x0, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb"], &(0x7f0000003ff6)='GPL\x00', 0x4}, 0x94) syz_usb_connect(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0xb4, 0xf9, 0xe2, 0x8, 0xd46, 0x78, 0x7aeb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xe0, 0xd, "", [{{0x9, 0x4, 0x76, 0x3, 0x2, 0xff, 0xff, 0xff, 0xfd, [], [{{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x0, 0x4}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x3, 0x66, 0x9d}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.00108403s ago: executing program 4 (id=4214): r0 = syz_open_dev$media(0x0, 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0xfffd}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) 3.907876282s ago: executing program 4 (id=4215): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xffc, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 3.587668001s ago: executing program 4 (id=4216): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xf0cbff9905faea99, 0x6, 0x2853) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000095371331f31600400000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) 3.472319764s ago: executing program 0 (id=4217): syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f700000001090212"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendto(r3, 0x0, 0x0, 0x20000041, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000040)={0xfffffffffffffec2, 0x0}, 0x10) 3.117210906s ago: executing program 9 (id=4218): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0), 0x0, 0x8000007) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.014521851s ago: executing program 2 (id=4219): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff0802030109021200010000000009"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.93518436s ago: executing program 1 (id=4220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0x1000, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0xfec, 0x1, [@m_ipt={0x34, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x58, 0xc, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xc0, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x95, 0x6, "78eecaa209275119972ece92d2e88234b9706d227b2a1990c2f992e5abc79d597fc027585b2a522cbba2bbfd70572af8567f1ac5a6e5481a81de72a4d3833341dd6471dd4c2e672e8897a728399ac8a74c6279db2979b2a6718d193ae48042161bb00344ee79f3bef993b0ebcfa56777889cafa2e9d829ae9a3c3afaaaf9f70a7d5fa46e3ad32738204d8e94f4c600a9d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0x3c, 0xa, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xdc8, 0x8, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x2a, 0x6, {0x3, 'security\x00', 0x2, 0x4}}, @TCA_IPT_HOOK={0x8}]}, {0xd61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x98, 0x14, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x69, 0x6, {0xb8, 'raw\x00', 0x1f, 0x26, "374cf76660b32ef74cf77b9ffe7f6bfbf5178692237ffdfcb310b13da6b966c705e4ab4efe4a16c41962f45abf219e56c0297164ac536ffe18646a20a5f435"}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 2.80529713s ago: executing program 1 (id=4221): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000480)={0x40, 0xd, 0xd, "735aef93caa1b0c2cd3e67eb88"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.128180855s ago: executing program 9 (id=4222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xcaf, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = io_uring_setup(0x7530, &(0x7f00000003c0)={0x0, 0x48d7, 0x800, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket(0xb, 0x2, 0x15) close_range(r3, 0xffffffffffffffff, 0x0) 1.8788812s ago: executing program 9 (id=4223): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)) syz_open_dev$dri(0x0, 0x1, 0x0) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x8, 0x1, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f00000005c0)=""/104, 0x68}, {0x0}, {&(0x7f0000000980)=""/76, 0x4c}, {0x0}, {0x0}], &(0x7f0000000d00)=[0x6, 0x9, 0x4a, 0xfffffffffffffffd]}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x2) shutdown(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x5a}, 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{0x0}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 1.121498704s ago: executing program 4 (id=4224): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.005422799s ago: executing program 4 (id=4225): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$media(0x0, 0x2, 0x129081) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0xfffd}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) 916.448112ms ago: executing program 9 (id=4226): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xffc, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 806.003597ms ago: executing program 9 (id=4227): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x81, "7f0c09", 0x9}) 237.044373ms ago: executing program 0 (id=4228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 122.669416ms ago: executing program 0 (id=4229): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x100300) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) 0s ago: executing program 0 (id=4230): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000006c0)={0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[]}) kernel console output (not intermixed with test programs): 2/2026 [ 834.405582][ T5802] Workqueue: hci4 hci_rx_work [ 834.405618][ T5802] Call Trace: [ 834.405627][ T5802] [ 834.405637][ T5802] dump_stack_lvl+0xe8/0x150 [ 834.405672][ T5802] sysfs_create_dir_ns+0x271/0x2a0 [ 834.405696][ T5802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 834.405725][ T5802] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 834.405753][ T5802] ? rt_spin_unlock+0x160/0x200 [ 834.405789][ T5802] kobject_add_internal+0x631/0xd10 [ 834.405820][ T5802] kobject_add+0x163/0x240 [ 834.405845][ T5802] ? __pfx_kobject_add+0x10/0x10 [ 834.405873][ T5802] ? get_device_parent+0x370/0x3a0 [ 834.405902][ T5802] device_add+0x408/0xb80 [ 834.405927][ T5802] hci_conn_add_sysfs+0xd5/0x210 [ 834.405958][ T5802] le_conn_complete_evt+0xf1d/0x1430 [ 834.405990][ T5802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 834.406012][ T5802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 834.406041][ T5802] ? lockdep_hardirqs_on+0x7a/0x110 [ 834.406073][ T5802] ? skb_pull_data+0xfb/0x200 [ 834.406105][ T5802] hci_le_conn_complete_evt+0x187/0x470 [ 834.406133][ T5802] hci_event_packet+0x7af/0x12c0 [ 834.406166][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 834.406198][ T5802] ? __pfx_hci_event_packet+0x10/0x10 [ 834.406224][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 834.406257][ T5802] ? hci_send_to_monitor+0xe2/0x590 [ 834.406283][ T5802] hci_rx_work+0x3ee/0x1030 [ 834.406316][ T5802] ? process_scheduled_works+0xa8d/0x18c0 [ 834.406347][ T5802] process_scheduled_works+0xb6e/0x18c0 [ 834.406406][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 834.406440][ T5802] ? assign_work+0x3d5/0x5e0 [ 834.406472][ T5802] worker_thread+0xa53/0xfc0 [ 834.406528][ T5802] kthread+0x388/0x470 [ 834.406549][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 834.406576][ T5802] ? __pfx_kthread+0x10/0x10 [ 834.406598][ T5802] ret_from_fork+0x51e/0xb90 [ 834.406629][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 834.406656][ T5802] ? __switch_to+0xc7d/0x1450 [ 834.406685][ T5802] ? __pfx_kthread+0x10/0x10 [ 834.406707][ T5802] ret_from_fork_asm+0x1a/0x30 [ 834.406748][ T5802] [ 834.406895][ T5802] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 834.406933][ T5802] Bluetooth: hci4: failed to register connection device [ 836.608072][ T5965] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 836.761344][ T5965] usb 10-1: Using ep0 maxpacket: 16 [ 837.124686][ T5965] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.124739][ T5965] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.152888][ T5965] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 837.152916][ T5965] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.152935][ T5965] usb 10-1: Product: syz [ 837.152947][ T5965] usb 10-1: Manufacturer: syz [ 837.152961][ T5965] usb 10-1: SerialNumber: syz [ 837.189068][ T5965] usb 10-1: config 0 descriptor?? [ 837.841200][ T5858] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 839.430603][ T5858] usb 2-1: Using ep0 maxpacket: 32 [ 839.435694][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.435744][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 839.490967][ T5858] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 839.490997][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 839.491016][ T5858] usb 2-1: Product: syz [ 839.491029][ T5858] usb 2-1: Manufacturer: syz [ 839.491041][ T5858] usb 2-1: SerialNumber: syz [ 839.840468][ T5858] usb 2-1: config 0 descriptor?? [ 839.914869][ T5872] usb 10-1: USB disconnect, device number 36 [ 840.174739][ T5858] usb 2-1: USB disconnect, device number 16 [ 840.588039][ T5858] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 840.870306][T12287] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 841.149025][ T5858] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 841.149083][ T5858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 841.149138][ T5858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 841.149197][ T5858] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 841.149275][ T5858] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 841.149297][ T5858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.527267][ T5858] usb 10-1: config 0 descriptor?? [ 841.742851][T14379] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 842.406950][ T5858] hid_parser_main: 357 callbacks suppressed [ 842.406973][ T5858] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 842.407003][ T5858] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 842.407027][ T5858] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 842.407050][ T5858] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 842.407076][ T5858] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 842.407103][ T5858] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 842.527160][ T5858] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 842.528014][T14390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2623'. [ 842.727156][ T5858] usb 10-1: USB disconnect, device number 37 [ 844.468024][ T5858] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 845.596547][ T5858] usb 10-1: Using ep0 maxpacket: 32 [ 845.627003][ T5858] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.648466][ T5858] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 845.648504][ T5858] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 845.648551][ T5858] usb 10-1: Product: syz [ 845.648566][ T5858] usb 10-1: Manufacturer: syz [ 845.648615][ T5858] usb 10-1: SerialNumber: syz [ 845.751513][ T5858] usb 10-1: config 0 descriptor?? [ 846.267648][T10543] usb 10-1: USB disconnect, device number 38 [ 846.391005][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2639'. [ 846.600137][T10543] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 846.747173][T14449] binder: 14448:14449 ioctl c0306201 0 returned -14 [ 846.798345][T10543] usb 5-1: Using ep0 maxpacket: 32 [ 846.803562][T10543] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 846.803590][T10543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.803608][T10543] usb 5-1: Product: syz [ 846.803621][T10543] usb 5-1: Manufacturer: syz [ 846.803634][T10543] usb 5-1: SerialNumber: syz [ 846.910624][T10543] usb 5-1: config 0 descriptor?? [ 847.033712][T10543] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 849.012233][T10543] gspca_topro: reg_w err -110 [ 849.038142][T10543] gspca_topro: Sensor soi763a [ 849.300910][ T5802] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 851.068658][T10543] usb 5-1: USB disconnect, device number 39 [ 851.569077][T14480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2650'. [ 855.538993][T14527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2669'. [ 856.301375][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2678'. [ 856.709832][ T5917] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 857.808547][ T5917] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.810693][ T5917] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.810719][ T5917] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 857.810738][ T5917] usb 10-1: Product: syz [ 857.810751][ T5917] usb 10-1: SerialNumber: syz [ 857.812116][T14563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2686'. [ 859.973718][ T5917] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 859.973744][ T5917] cdc_ncm 10-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 859.973761][ T5917] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 860.508819][ T5917] cdc_ncm 10-1:1.0: setting tx_max = 184 [ 861.590055][ T5917] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 861.633563][ T5917] usb 10-1: USB disconnect, device number 39 [ 861.635779][ T5917] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 861.802266][T14603] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2699'. [ 861.880632][T14594] Bluetooth: MGMT ver 1.23 [ 862.038062][ T5965] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 862.195566][ T5965] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 862.195597][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.195617][ T5965] usb 5-1: Product: syz [ 862.195631][ T5965] usb 5-1: Manufacturer: syz [ 862.195644][ T5965] usb 5-1: SerialNumber: syz [ 862.262093][ T5965] usb 5-1: config 0 descriptor?? [ 862.274535][ T5965] hub 5-1:0.0: bad descriptor, ignoring hub [ 862.274573][ T5965] hub 5-1:0.0: probe with driver hub failed with error -5 [ 863.074233][ T5965] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 863.105072][ T5965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 863.106520][ T5965] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 863.106554][ T5965] usb 5-1: media controller created [ 863.147992][ T5917] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 863.183524][ T5965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 863.289137][T12287] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 863.662635][ T5917] usb 10-1: config 0 has no interfaces? [ 863.662662][ T5917] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 863.662674][ T5917] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.667031][ T5965] DVB: Unable to find symbol dib7000p_attach() [ 863.667046][ T5965] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 863.684771][ T5917] usb 10-1: config 0 descriptor?? [ 863.839703][ T5965] rc_core: IR keymap rc-dib0700-rc5 not found [ 863.839722][ T5965] Registered IR keymap rc-empty [ 863.840234][ T5965] dvb-usb: could not initialize remote control. [ 863.840245][ T5965] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 863.918616][ T5917] usb 10-1: USB disconnect, device number 40 [ 864.088204][T10543] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 864.092504][ T5965] usb 5-1: USB disconnect, device number 40 [ 864.183301][ T5965] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 864.240761][T10543] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.242415][T10543] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 864.242441][T10543] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 864.242466][T10543] usb 1-1: Product: syz [ 864.242479][T10543] usb 1-1: SerialNumber: syz [ 864.643271][T14637] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2711'. [ 864.690339][T14636] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 864.691656][T14636] macsec1: entered promiscuous mode [ 866.188200][T10543] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 866.188226][T10543] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 866.188241][T10543] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 866.238003][ T5917] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 866.388289][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 866.403163][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.403212][ T5917] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 866.404887][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.404912][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 866.404930][ T5917] usb 2-1: SerialNumber: syz [ 866.410073][T10543] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 866.489044][T10543] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 866.553180][T10543] usb 1-1: USB disconnect, device number 35 [ 866.561241][ T808] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 866.563840][T10543] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 866.693929][ T5917] usb 2-1: USB disconnect, device number 17 [ 866.710680][ T808] usb 5-1: config 0 has no interfaces? [ 866.710715][ T808] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 866.710736][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.801892][ T808] usb 5-1: config 0 descriptor?? [ 867.130216][T10543] usb 5-1: USB disconnect, device number 41 [ 869.956624][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.398049][ T5872] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 870.415569][T10543] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 870.548084][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 870.550945][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 870.550975][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 870.554096][ T5872] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 870.554122][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.554327][ T5872] usb 2-1: Product: syz [ 870.554342][ T5872] usb 2-1: Manufacturer: syz [ 870.554356][ T5872] usb 2-1: SerialNumber: syz [ 870.570445][ T5872] usb 2-1: config 0 descriptor?? [ 870.573942][T10543] usb 10-1: config 0 has no interfaces? [ 870.573975][T10543] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 870.573998][T10543] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.654783][T10543] usb 10-1: config 0 descriptor?? [ 870.664507][ T5872] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 870.892225][ T5872] usb 10-1: USB disconnect, device number 41 [ 871.363882][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 871.420588][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 871.433945][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 871.444976][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 871.445738][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 873.749221][ T5965] usb 2-1: USB disconnect, device number 18 [ 875.127654][T12287] Bluetooth: hci2: command tx timeout [ 875.728057][ T5872] usb 10-1: new full-speed USB device number 42 using dummy_hcd [ 876.151087][ T5872] usb 10-1: config 0 has no interfaces? [ 876.151121][ T5872] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 876.151145][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.203860][ T5872] usb 10-1: config 0 descriptor?? [ 876.478851][ T5917] usb 10-1: USB disconnect, device number 42 [ 876.501580][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 876.581908][T14747] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 876.583072][T14747] macsec1: entered promiscuous mode [ 876.682093][T14707] chnl_net:caif_netlink_parms(): no params data found [ 877.112522][T14768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2758'. [ 877.221892][T14707] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.243724][T14707] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.243985][T14707] bridge_slave_0: entered allmulticast mode [ 877.269041][T14707] bridge_slave_0: entered promiscuous mode [ 877.289078][T14707] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.289186][T14707] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.289455][T14707] bridge_slave_1: entered allmulticast mode [ 877.300889][T14707] bridge_slave_1: entered promiscuous mode [ 877.431740][T12287] Bluetooth: hci2: command tx timeout [ 877.860112][T14707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.114330][T14707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.337233][T14707] team0: Port device team_slave_0 added [ 878.346779][T14707] team0: Port device team_slave_1 added [ 878.444638][T14707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.444654][T14707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.444679][T14707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.458040][T14707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.458055][T14707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.458082][T14707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.483843][T12287] Bluetooth: hci2: command tx timeout [ 880.178249][T14707] hsr_slave_0: entered promiscuous mode [ 880.179557][T14707] hsr_slave_1: entered promiscuous mode [ 880.180412][T14707] debugfs: 'hsr0' already exists in 'hsr' [ 880.180434][T14707] Cannot create hsr debugfs directory [ 881.558351][T12287] Bluetooth: hci2: command tx timeout [ 882.071735][T14825] binder: 14824:14825 ioctl c0306201 0 returned -14 [ 882.124951][T14829] binder: 14824:14829 ioctl c0306201 200000000040 returned -22 [ 882.125348][T14829] binder: 14824:14829 ioctl c0306201 200000000640 returned -22 [ 882.221742][T14707] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.517979][ T808] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 882.645212][T14707] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.668006][ T808] usb 1-1: device descriptor read/64, error -71 [ 883.173333][ T808] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 883.334729][T12287] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 883.658645][ T808] usb 1-1: device descriptor read/64, error -71 [ 884.150687][ T808] usb usb1-port1: attempt power cycle [ 884.331315][T14707] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.361259][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 884.434256][T14856] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 884.434357][T14856] macsec1: entered promiscuous mode [ 884.490435][ T808] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 884.509008][ T808] usb 1-1: device descriptor read/8, error -71 [ 884.958261][ T808] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 884.986554][ T808] usb 1-1: device descriptor read/8, error -71 [ 885.088342][ T808] usb usb1-port1: unable to enumerate USB device [ 885.279490][T14707] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 885.282153][T14707] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.528106][T10543] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 886.815014][T10543] usb 2-1: config 0 has no interfaces? [ 886.815048][T10543] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 886.815068][T10543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.175127][T10543] usb 2-1: config 0 descriptor?? [ 887.384118][ T5882] usb 2-1: USB disconnect, device number 19 [ 887.388058][T12287] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 887.388381][T12287] Bluetooth: hci1: Injecting HCI hardware error event [ 887.392221][ T5802] Bluetooth: hci1: hardware error 0x00 [ 887.910672][T14707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 888.110744][T10543] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 888.152998][T14707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 888.203183][T14707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 888.276166][T10543] usb 1-1: Using ep0 maxpacket: 32 [ 888.284719][T10543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 888.284749][T10543] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 888.290548][T14707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 888.294487][T10543] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 888.294512][T10543] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 888.294531][T10543] usb 1-1: Product: syz [ 888.294544][T10543] usb 1-1: Manufacturer: syz [ 888.294557][T10543] usb 1-1: SerialNumber: syz [ 888.309800][T10543] usb 1-1: config 0 descriptor?? [ 889.258007][ T5965] usb 1-1: USB disconnect, device number 40 [ 889.632015][T14707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.728152][ T5965] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 889.858172][ T5965] usb 2-1: device descriptor read/64, error -71 [ 889.908426][ T5802] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 889.914515][T14707] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.921412][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.921523][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.959307][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.959423][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.928664][ T5965] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 891.068660][ T5965] usb 2-1: device descriptor read/64, error -71 [ 891.181944][ T5965] usb usb2-port1: attempt power cycle [ 891.565765][ T5965] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 891.632857][ T5965] usb 2-1: device descriptor read/8, error -71 [ 891.870926][ T5965] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 891.888628][ T5965] usb 2-1: device descriptor read/8, error -71 [ 892.008504][ T5965] usb usb2-port1: unable to enumerate USB device [ 892.867932][ T5882] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 893.047469][ T5882] usb 10-1: config 0 has no interfaces? [ 893.047504][ T5882] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 893.047525][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.069848][ T5882] usb 10-1: config 0 descriptor?? [ 893.298901][ T808] usb 10-1: USB disconnect, device number 43 [ 893.562774][T14707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.252198][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 894.252237][ T37] audit: type=1326 audit(1773721275.982:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 894.252476][ T37] audit: type=1326 audit(1773721275.982:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 894.252770][ T37] audit: type=1326 audit(1773721275.982:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 894.252960][ T37] audit: type=1326 audit(1773721275.982:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 894.253154][ T37] audit: type=1326 audit(1773721275.982:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 894.253367][ T37] audit: type=1326 audit(1773721275.992:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 894.253559][ T37] audit: type=1326 audit(1773721275.992:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 894.253889][ T37] audit: type=1326 audit(1773721275.992:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 894.254057][ T37] audit: type=1326 audit(1773721275.992:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 894.254245][ T37] audit: type=1326 audit(1773721275.992:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14955 comm="syz.0.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 895.027158][T14707] veth0_vlan: entered promiscuous mode [ 895.039344][T14707] veth1_vlan: entered promiscuous mode [ 895.098357][T14707] veth0_macvtap: entered promiscuous mode [ 895.104266][T14707] veth1_macvtap: entered promiscuous mode [ 895.186530][T14707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.219462][T14707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.285215][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.287589][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.287635][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.287669][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.230119][ T7274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.230137][ T7274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.344829][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.344848][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.458028][ T5917] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 897.386207][ T5917] usb 10-1: device descriptor read/64, error -71 [ 897.678735][ T5917] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 898.017973][ T5917] usb 10-1: device descriptor read/64, error -71 [ 898.162009][ T5917] usb usb10-port1: attempt power cycle [ 899.019705][ T5917] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 899.046448][ T5917] usb 10-1: device descriptor read/8, error -71 [ 899.288175][ T5917] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 899.539052][ T5917] usb 10-1: device not accepting address 47, error -71 [ 899.548152][ T5917] usb usb10-port1: unable to enumerate USB device [ 900.161554][T15031] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2842'. [ 901.619265][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 901.748834][ T9] usb 1-1: device descriptor read/64, error -71 [ 901.988060][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 902.118102][ T9] usb 1-1: device descriptor read/64, error -71 [ 902.228400][ T9] usb usb1-port1: attempt power cycle [ 902.597964][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 902.819308][ T9] usb 1-1: device descriptor read/8, error -71 [ 903.548033][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 903.570164][ T9] usb 1-1: device descriptor read/8, error -71 [ 903.678544][ T9] usb usb1-port1: unable to enumerate USB device [ 904.067577][T15083] syzkaller0: entered promiscuous mode [ 904.067603][T15083] syzkaller0: entered allmulticast mode [ 907.508042][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 907.661346][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.661364][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 907.661389][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 907.665923][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.665939][ T31] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 907.665950][ T31] usb 1-1: Product: syz [ 907.665957][ T31] usb 1-1: SerialNumber: syz [ 907.762687][ T31] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 907.762713][ T31] cdc_ncm 1-1:1.0: bind() failure [ 909.967756][T15165] netlink: 'syz.9.2890': attribute type 10 has an invalid length. [ 909.985565][T15165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.987528][T15165] batadv0: entered promiscuous mode [ 909.994107][T15165] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 910.004391][T15165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.004416][T15165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.460934][T15165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.460960][T15165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.501613][ T5872] usb 1-1: USB disconnect, device number 45 [ 910.983827][T15165] bond0: (slave batadv0): Releasing backup interface [ 911.018469][T15165] batadv0 (unregistering): left promiscuous mode [ 912.778008][ T5917] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 914.188045][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 914.192138][ T5917] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 914.192163][ T5917] usb 5-1: config 0 has no interface number 0 [ 914.192206][ T5917] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 914.192222][ T5917] usb 5-1: config 0 interface 89 has no altsetting 0 [ 914.215528][ T5917] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 914.215556][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.215575][ T5917] usb 5-1: Product: syz [ 914.215587][ T5917] usb 5-1: Manufacturer: syz [ 914.215599][ T5917] usb 5-1: SerialNumber: syz [ 914.300925][ T5917] usb 5-1: config 0 descriptor?? [ 914.341245][ T5917] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 914.341280][ T5917] em28xx 5-1:0.89: Video interface 89 found: [ 914.962179][ T5917] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 914.997960][ T5880] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 915.148478][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 915.152181][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 915.155569][ T5880] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 915.155595][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 915.155613][ T5880] usb 1-1: Product: syz [ 915.155626][ T5880] usb 1-1: Manufacturer: syz [ 915.155640][ T5880] usb 1-1: SerialNumber: syz [ 915.177353][ T5880] usb 1-1: config 0 descriptor?? [ 915.202491][T15210] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 916.655606][ T5917] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 916.655639][ T5917] em28xx 5-1:0.89: board has no eeprom [ 916.738060][ T5917] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 916.738207][ T5917] em28xx 5-1:0.89: analog set to bulk mode. [ 916.738565][ T9] em28xx 5-1:0.89: Registering V4L2 extension [ 916.792472][ T5917] usb 5-1: USB disconnect, device number 42 [ 916.804967][ T5917] em28xx 5-1:0.89: Disconnecting em28xx [ 917.142859][ T9] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 917.142882][ T9] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 917.142894][ T9] em28xx 5-1:0.89: No AC97 audio processor [ 917.906516][ T9] usb 5-1: Decoder not found [ 917.909171][ T9] em28xx 5-1:0.89: failed to create media graph [ 917.931245][ T9] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 919.247921][ T808] usb 1-1: USB disconnect, device number 46 [ 919.306361][ T9] em28xx 5-1:0.89: Registering snapshot button... [ 919.363780][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input8 [ 919.403023][ T9] em28xx 5-1:0.89: Remote control support is not available for this card. [ 919.403115][ T5917] em28xx 5-1:0.89: Closing input extension [ 919.404124][ T5917] em28xx 5-1:0.89: Deregistering snapshot button [ 919.921499][ T5917] em28xx 5-1:0.89: Freeing device [ 926.451472][T15321] netlink: 'syz.5.2944': attribute type 1 has an invalid length. [ 927.877438][T15321] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 931.625121][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.899047][ T5872] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 934.982850][ T9] kernel read not supported for file /video37 (pid: 9 comm: kworker/0:0) [ 935.059156][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.059221][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.059267][ T5872] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 935.059288][ T5872] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.061105][ T5872] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 935.061132][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 935.061151][ T5872] usb 5-1: Product: syz [ 935.061162][ T5872] usb 5-1: SerialNumber: syz [ 937.432047][ T5872] cdc_ncm 5-1:1.0: bind() failure [ 937.446841][ T5872] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 937.446885][ T5872] cdc_ncm 5-1:1.1: bind() failure [ 937.640966][ T31] usb 5-1: USB disconnect, device number 43 [ 939.433717][T15471] 9p: Bad value for 'rfdno' [ 939.987176][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 939.987195][ T37] audit: type=1326 audit(1773722089.762:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 939.987237][ T37] audit: type=1326 audit(1773722089.762:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 939.987275][ T37] audit: type=1326 audit(1773722089.762:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 939.987312][ T37] audit: type=1326 audit(1773722089.762:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 939.987349][ T37] audit: type=1326 audit(1773722089.762:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 939.987387][ T37] audit: type=1326 audit(1773722089.762:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 939.987425][ T37] audit: type=1326 audit(1773722089.762:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 939.987463][ T37] audit: type=1326 audit(1773722089.762:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 939.987500][ T37] audit: type=1326 audit(1773722089.762:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 939.987537][ T37] audit: type=1326 audit(1773722089.762:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15478 comm="syz.1.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69da3bc799 code=0x7ffc0000 [ 942.137985][T15509] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3009'. [ 942.363518][ T31] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 942.539354][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.539418][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.539461][ T31] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.541873][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.541899][ T31] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 942.541918][ T31] usb 5-1: Product: syz [ 942.541930][ T31] usb 5-1: SerialNumber: syz [ 944.968123][ T31] cdc_ncm 5-1:1.0: bind() failure [ 944.988251][T15544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3021'. [ 945.019469][ T31] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 945.019514][ T31] cdc_ncm 5-1:1.1: bind() failure [ 945.262048][ T31] usb 5-1: USB disconnect, device number 44 [ 946.415916][T15552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.198879][ T5802] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 948.759325][T15584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3033'. [ 948.928341][ T5965] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 949.311639][ T5965] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 949.311688][ T5965] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 128, using maximum allowed: 30 [ 949.311726][ T5965] usb 2-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 949.311751][ T5965] usb 2-1: config 0 interface 0 has no altsetting 0 [ 949.362485][ T5965] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 949.362514][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 949.362530][ T5965] usb 2-1: Product: syz [ 949.362541][ T5965] usb 2-1: Manufacturer: syz [ 949.362552][ T5965] usb 2-1: SerialNumber: syz [ 949.391905][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3038'. [ 949.428014][ T5965] usb 2-1: config 0 descriptor?? [ 949.448575][ T5965] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 949.448631][ T5965] pctv452e: pctv452e_power_ctrl: 1 [ 949.448631][ T5965] [ 949.660938][ T5965] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 949.660938][ T5965] [ 949.660964][ T5965] dvb-usb: bulk message failed: -22 (5/0) [ 950.285564][ T5965] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 950.594109][ T5965] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 950.668434][ T5965] usb 2-1: USB disconnect, device number 24 [ 952.299541][T15621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3048'. [ 955.809584][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3064'. [ 956.020468][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3065'. [ 957.374690][T15676] 9p: Bad value for 'rfdno' [ 957.934343][T12287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 957.934384][T12287] CPU: 0 UID: 0 PID: 12287 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 957.934413][T12287] Tainted: [L]=SOFTLOCKUP [ 957.934421][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 957.934434][T12287] Workqueue: hci2 hci_rx_work [ 957.934472][T12287] Call Trace: [ 957.934479][T12287] [ 957.934490][T12287] dump_stack_lvl+0xe8/0x150 [ 957.934526][T12287] sysfs_create_dir_ns+0x271/0x2a0 [ 957.934551][T12287] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 957.934579][T12287] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 957.934606][T12287] ? rt_spin_unlock+0x160/0x200 [ 957.934632][T12287] kobject_add_internal+0x631/0xd10 [ 957.934664][T12287] kobject_add+0x163/0x240 [ 957.934690][T12287] ? __pfx_kobject_add+0x10/0x10 [ 957.934718][T12287] ? get_device_parent+0x370/0x3a0 [ 957.934746][T12287] device_add+0x408/0xb80 [ 957.934772][T12287] hci_conn_add_sysfs+0xd5/0x210 [ 957.934802][T12287] le_conn_complete_evt+0xf1d/0x1430 [ 957.934834][T12287] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 957.934856][T12287] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 957.934885][T12287] ? lockdep_hardirqs_on+0x7a/0x110 [ 957.934917][T12287] ? skb_pull_data+0xfb/0x200 [ 957.934946][T12287] hci_le_conn_complete_evt+0x187/0x470 [ 957.934975][T12287] hci_event_packet+0x7af/0x12c0 [ 957.935008][T12287] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 957.935039][T12287] ? __pfx_hci_event_packet+0x10/0x10 [ 957.935065][T12287] ? rt_spin_unlock+0x14f/0x200 [ 957.935098][T12287] ? hci_send_to_monitor+0xe2/0x590 [ 957.935125][T12287] hci_rx_work+0x3ee/0x1030 [ 957.935159][T12287] ? process_scheduled_works+0xa8d/0x18c0 [ 957.935190][T12287] process_scheduled_works+0xb6e/0x18c0 [ 957.935250][T12287] ? __pfx_process_scheduled_works+0x10/0x10 [ 957.935285][T12287] ? assign_work+0x3d5/0x5e0 [ 957.935317][T12287] worker_thread+0xa53/0xfc0 [ 957.935380][T12287] kthread+0x388/0x470 [ 957.935402][T12287] ? __pfx_worker_thread+0x10/0x10 [ 957.935428][T12287] ? __pfx_kthread+0x10/0x10 [ 957.935449][T12287] ret_from_fork+0x51e/0xb90 [ 957.935482][T12287] ? __pfx_ret_from_fork+0x10/0x10 [ 957.935508][T12287] ? __switch_to+0xc7d/0x1450 [ 957.935537][T12287] ? __pfx_kthread+0x10/0x10 [ 957.935560][T12287] ret_from_fork_asm+0x1a/0x30 [ 957.935597][T12287] [ 957.935626][T12287] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 957.935664][T12287] Bluetooth: hci2: failed to register connection device [ 961.398486][T15712] tipc: Started in network mode [ 961.398514][T15712] tipc: Node identity 7e32aec14e39, cluster identity 4711 [ 961.398686][T15712] tipc: Enabled bearer , priority 0 [ 961.570455][T15712] tipc: Resetting bearer [ 962.518169][T15726] 9p: Bad value for 'rfdno' [ 965.070760][T15709] tipc: Disabling bearer [ 966.499736][ T808] tipc: Node number set to 806072001 [ 968.160163][T15774] 9p: Bad value for 'rfdno' [ 971.710747][T15816] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.713310][T15816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.098225][T15828] 9p: Bad value for 'rfdno' [ 972.168062][ T5965] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 972.352921][ T5965] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.353726][ T5965] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.354012][ T5965] usb 10-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 972.354084][ T5965] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 972.617415][ T5965] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 972.617521][ T5965] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 972.617593][ T5965] usb 10-1: Product: syz [ 972.617660][ T5965] usb 10-1: SerialNumber: syz [ 974.774317][ T5965] cdc_ncm 10-1:1.0: bind() failure [ 974.801309][ T5965] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 974.801340][ T5965] cdc_ncm 10-1:1.1: bind() failure [ 974.972930][ T5965] usb 10-1: USB disconnect, device number 48 [ 976.132047][T15889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.949992][T15926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.864036][T15967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 986.971094][T16040] netlink: 'syz.9.3196': attribute type 1 has an invalid length. [ 987.034249][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3196'. [ 987.159420][T16040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 989.991965][T16063] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 989.998171][T16063] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 989.999575][T16063] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 990.001083][T16063] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 990.002841][T16063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 990.783682][T16060] chnl_net:caif_netlink_parms(): no params data found [ 990.944003][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.944197][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.944700][T16060] bridge_slave_0: entered allmulticast mode [ 990.947163][T16060] bridge_slave_0: entered promiscuous mode [ 990.980777][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.980967][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.981162][T16060] bridge_slave_1: entered allmulticast mode [ 990.983734][T16060] bridge_slave_1: entered promiscuous mode [ 991.071187][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.075682][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.454419][T16060] team0: Port device team_slave_0 added [ 991.457747][T16060] team0: Port device team_slave_1 added [ 991.575888][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.575904][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.575929][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.588697][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.588712][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.588736][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.801317][T16060] hsr_slave_0: entered promiscuous mode [ 991.802126][T16060] hsr_slave_1: entered promiscuous mode [ 991.802659][T16060] debugfs: 'hsr0' already exists in 'hsr' [ 991.802676][T16060] Cannot create hsr debugfs directory [ 991.877922][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 992.030341][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.030366][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 992.031592][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 992.031618][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 992.031636][ T31] usb 2-1: SerialNumber: syz [ 992.108009][T16063] Bluetooth: hci3: command tx timeout [ 992.274839][ T31] usb 2-1: 0:2 : does not exist [ 992.371642][ T31] usb 2-1: USB disconnect, device number 25 [ 992.440453][T13601] udevd[13601]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.657203][T16088] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 992.838548][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.535097][T16060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.188063][T16063] Bluetooth: hci3: command tx timeout [ 994.676942][T16060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.918725][T16063] Bluetooth: hci2: command 0x0406 tx timeout [ 995.079694][T16060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.275707][T16140] netlink: 'syz.0.3230': attribute type 1 has an invalid length. [ 995.334942][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 995.415059][T16140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 996.024542][T16060] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 996.029825][T16060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.268017][ T5802] Bluetooth: hci3: command tx timeout [ 996.314130][T16158] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3237'. [ 998.836348][ T5802] Bluetooth: hci3: command tx timeout [ 999.215314][T16060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 999.245083][T16060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 999.329134][T16060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 999.559466][T16060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1001.484887][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.513007][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.574024][T16060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1001.574047][T16060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1001.672584][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.672711][ T6494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.674935][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.675056][ T6494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.742898][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.577703][T16060] veth0_vlan: entered promiscuous mode [ 1004.644063][T16060] veth1_vlan: entered promiscuous mode [ 1005.887271][T16060] veth0_macvtap: entered promiscuous mode [ 1005.944107][T16060] veth1_macvtap: entered promiscuous mode [ 1007.054002][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.100536][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.162071][ T7850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.162276][ T7850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.162324][ T7850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.162356][ T7850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.776113][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.776134][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.108060][T16275] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3275'. [ 1008.250514][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.250534][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.542846][T16280] netem: change failed [ 1009.592515][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3283'. [ 1016.282497][T16387] [U] ] [ 1016.322916][T16387] [U] Rː1GYNB [ 1016.323164][T16387] [U] 9ܦ2ٿ}RI~M_! [ 1016.548568][T16394] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3319'. [ 1017.777932][ T808] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1017.937415][ T808] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1017.958219][ T808] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1017.958246][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1017.958265][ T808] usb 5-1: Product: syz [ 1017.958278][ T808] usb 5-1: Manufacturer: syz [ 1017.958292][ T808] usb 5-1: SerialNumber: syz [ 1017.982510][ T808] usb 5-1: config 0 descriptor?? [ 1017.994431][ T808] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1017.994474][ T808] pctv452e: pctv452e_power_ctrl: 1 [ 1017.994474][ T808] [ 1017.994516][ T808] usb 5-1: selecting invalid altsetting 3 [ 1017.994530][ T808] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1017.994530][ T808] [ 1017.994544][ T808] dvb-usb: bulk message failed: -22 (5/0) [ 1018.023420][ T808] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1018.042870][ T808] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1018.506470][T15745] usb 5-1: USB disconnect, device number 45 [ 1021.232772][ T5802] Bluetooth: Wrong link type (-71) [ 1021.658469][T16476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.905995][T16488] netlink: 'syz.9.3353': attribute type 1 has an invalid length. [ 1023.208465][T16488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1031.347859][ T5880] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1031.520087][ T5880] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1031.522779][ T5880] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1031.522796][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1031.522806][ T5880] usb 2-1: Product: syz [ 1031.522813][ T5880] usb 2-1: Manufacturer: syz [ 1031.522820][ T5880] usb 2-1: SerialNumber: syz [ 1031.530613][ T5880] usb 2-1: config 0 descriptor?? [ 1031.564484][ T5880] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1031.564527][ T5880] pctv452e: pctv452e_power_ctrl: 1 [ 1031.564527][ T5880] [ 1031.564570][ T5880] usb 2-1: selecting invalid altsetting 3 [ 1031.564584][ T5880] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1031.564584][ T5880] [ 1031.564599][ T5880] dvb-usb: bulk message failed: -22 (5/0) [ 1031.630685][ T5880] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1031.667602][ T5880] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1031.748947][ T5880] usb 2-1: USB disconnect, device number 26 [ 1031.807970][ T5965] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1031.979458][ T5965] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.983646][ T5965] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1031.983681][ T5965] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1031.983700][ T5965] usb 10-1: Product: syz [ 1031.983710][ T5965] usb 10-1: SerialNumber: syz [ 1033.813485][ T5965] cdc_ncm 10-1:1.0: failed to get mac address [ 1033.813807][ T5965] cdc_ncm 10-1:1.0: bind() failure [ 1033.834649][ T5965] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1033.837960][ T5965] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1033.844018][ T5965] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1033.895147][ T5965] usb 10-1: USB disconnect, device number 49 [ 1034.127897][ T5872] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1034.322057][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1034.328563][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1034.328596][ T5872] usb 5-1: can't read configurations, error -71 [ 1037.428002][T10543] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1037.580537][T10543] usb 2-1: Using ep0 maxpacket: 32 [ 1037.582395][T10543] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.582418][T10543] usb 2-1: config 0 has no interfaces? [ 1037.582446][T10543] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1037.582468][T10543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.662061][T10543] usb 2-1: config 0 descriptor?? [ 1039.760529][ T5802] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1040.275754][ T808] usb 2-1: USB disconnect, device number 27 [ 1047.299224][T16063] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1048.597928][T10543] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1048.796081][T10543] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.797383][T10543] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.797398][T10543] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1048.797408][T10543] usb 10-1: Product: syz [ 1048.797416][T10543] usb 10-1: SerialNumber: syz [ 1050.266958][T16794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1050.683829][T10543] cdc_ncm 10-1:1.0: failed to get mac address [ 1050.684296][T10543] cdc_ncm 10-1:1.0: bind() failure [ 1050.748495][T10543] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1050.749369][T10543] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1050.750930][T10543] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1050.814988][T10543] usb 10-1: USB disconnect, device number 50 [ 1052.325453][T10543] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1052.611686][T10543] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1052.611708][T10543] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1052.611730][T10543] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1052.611742][T10543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.695945][T16826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.708953][T16812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1052.743497][T10543] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1054.129105][T10543] usb 5-1: USB disconnect, device number 48 [ 1054.274744][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.524374][T16851] tipc: Enabled bearer , priority 0 [ 1055.531857][T16851] syzkaller0: entered promiscuous mode [ 1055.531879][T16851] syzkaller0: entered allmulticast mode [ 1055.888897][T16853] tipc: Resetting bearer [ 1056.031385][T16850] tipc: Resetting bearer [ 1056.798834][T16850] tipc: Disabling bearer [ 1060.159303][T16903] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1060.159430][T16903] bond_slave_0: entered promiscuous mode [ 1060.159478][T16903] bond_slave_1: entered promiscuous mode [ 1061.914986][ T5802] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1063.285844][T16944] netlink: 830 bytes leftover after parsing attributes in process `syz.9.3516'. [ 1064.258083][T10543] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1064.587945][T10543] usb 6-1: Using ep0 maxpacket: 8 [ 1064.592741][T10543] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1064.592769][T10543] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1064.592789][T10543] usb 6-1: Product: syz [ 1064.592802][T10543] usb 6-1: Manufacturer: syz [ 1064.592816][T10543] usb 6-1: SerialNumber: syz [ 1065.366713][T10543] usb 6-1: config 0 descriptor?? [ 1065.383593][T10543] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1065.847941][T10543] gspca_zc3xx: reg_w_i err -71 [ 1065.848039][T10543] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1066.328013][T10543] usb 6-1: USB disconnect, device number 5 [ 1066.807874][T10543] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1066.958028][T10543] usb 1-1: Using ep0 maxpacket: 8 [ 1066.960343][T10543] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.960391][T10543] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1066.960416][T10543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1066.960438][T10543] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1066.964453][T10543] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1066.964479][T10543] usb 1-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1066.964500][T10543] usb 1-1: Product: syz [ 1066.964514][T10543] usb 1-1: Manufacturer: syz [ 1066.964527][T10543] usb 1-1: SerialNumber: syz [ 1067.067308][T10543] usb 1-1: config 0 descriptor?? [ 1067.114088][T10543] smsusb:smsusb_probe: board id=2, interface number 0 [ 1067.130703][T10543] smsusb:smsusb_probe: Device initialized with return code -19 [ 1067.355358][T10543] usb 1-1: USB disconnect, device number 47 [ 1069.474410][ T5872] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1069.651795][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3545'. [ 1069.994161][ T5872] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.357122][ T5872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.357152][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1070.357171][ T5872] usb 2-1: Product: syz [ 1070.357183][ T5872] usb 2-1: SerialNumber: syz [ 1070.826372][T17023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1071.492961][ T5872] cdc_ncm 2-1:1.0: failed to get mac address [ 1071.493440][ T5872] cdc_ncm 2-1:1.0: bind() failure [ 1071.606516][ T5872] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1071.629598][ T5872] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1071.647318][ T5872] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1071.682258][ T5872] usb 2-1: USB disconnect, device number 28 [ 1072.356900][T16265] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1072.529671][T16265] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1072.529689][T16265] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.532592][T16265] usb 10-1: config 0 descriptor?? [ 1072.546473][T16265] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1073.357279][T16265] gspca_sunplus: reg_w_riv err -71 [ 1073.357412][T16265] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1073.371103][T16265] usb 10-1: USB disconnect, device number 51 [ 1075.975491][T17094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.998196][T17105] syz.0.3575 uses old SIOCAX25GETINFO [ 1078.787871][ T5882] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1078.949499][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 1079.338892][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.338950][ T5882] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1079.338973][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.396516][ T5882] usb 1-1: config 0 descriptor?? [ 1079.600955][T17121] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1079.625665][ T5882] usb 1-1: string descriptor 0 read error: -71 [ 1079.640810][ T5882] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1079.647210][ T5882] usb 1-1: USB disconnect, device number 48 [ 1079.730577][T17137] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3587'. [ 1079.730650][T17137] bond_slave_0: entered promiscuous mode [ 1079.730693][T17137] bond_slave_1: entered promiscuous mode [ 1080.994004][T17163] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1082.028023][T17178] binder: 17174:17178 ioctl c0306201 2000000003c0 returned -14 [ 1083.046206][T17196] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3611'. [ 1083.046281][T17196] bond_slave_0: entered promiscuous mode [ 1083.046322][T17196] bond_slave_1: entered promiscuous mode [ 1087.500842][T16063] Bluetooth: hci5: command 0x1003 tx timeout [ 1087.755153][T17226] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1087.852082][ T5802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1088.654527][T17247] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3629'. [ 1089.223298][T17254] fuse: Bad value for 'rootmode' [ 1089.227956][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 1090.097908][T16265] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1090.150561][T17268] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1090.172039][T17268] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1090.249870][T16265] usb 1-1: Using ep0 maxpacket: 8 [ 1090.295399][T17268] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1090.315998][T16265] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1090.316015][T16265] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1090.316025][T16265] usb 1-1: Product: syz [ 1090.316033][T16265] usb 1-1: Manufacturer: syz [ 1090.316040][T16265] usb 1-1: SerialNumber: syz [ 1090.411688][T16265] usb 1-1: config 0 descriptor?? [ 1090.459071][T17268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1090.460234][T17268] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1090.479231][T16265] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1090.585775][T17268] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1090.661753][T17268] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1090.677590][T17268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1090.848470][T17268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1090.853571][T16265] gspca_zc3xx: reg_r err -71 [ 1090.853705][T16265] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1090.866872][T16265] usb 1-1: USB disconnect, device number 49 [ 1092.785954][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 1092.785995][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 1092.786153][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 1093.075399][T17291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3642'. [ 1093.968559][T17311] fuse: Unknown parameter 'use00000000000000000000' [ 1094.371649][T17322] binder: 17321:17322 ioctl c0306201 2000000003c0 returned -14 [ 1094.374137][T17322] binder_alloc: 17321: binder_alloc_buf, no vma [ 1094.828905][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 1094.829016][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 1094.867180][T16063] Bluetooth: hci3: command 0x0c1a tx timeout [ 1096.193725][T17356] fuse: Unknown parameter 'use00000000000000000000' [ 1096.804057][T17365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1096.979118][T17329] Bluetooth: hci4: command 0x0406 tx timeout [ 1096.979240][T17329] Bluetooth: hci2: command 0x0406 tx timeout [ 1096.979342][T17329] Bluetooth: hci3: command 0x0c1a tx timeout [ 1097.943429][T17392] fuse: Unknown parameter 'use00000000000000000000' [ 1098.168060][ T5965] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1098.298152][ T5965] usb 5-1: device descriptor read/64, error -71 [ 1098.537927][ T5965] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1098.629731][T17405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1098.689678][ T5965] usb 5-1: device descriptor read/64, error -71 [ 1098.857210][ T5965] usb usb5-port1: attempt power cycle [ 1099.307950][ T5965] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1099.330623][ T5965] usb 5-1: device descriptor read/8, error -71 [ 1099.567889][ T5965] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1099.588702][ T5965] usb 5-1: device descriptor read/8, error -71 [ 1099.698316][ T5965] usb usb5-port1: unable to enumerate USB device [ 1100.357982][ T5882] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1100.510194][ T5882] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1100.510223][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.515358][ T5882] usb 2-1: config 0 descriptor?? [ 1100.543793][ T5882] cp210x 2-1:0.0: cp210x converter detected [ 1100.884294][T17445] binder: 17443:17445 ioctl c0306201 2000000003c0 returned -14 [ 1100.995201][ T5882] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1101.165940][ T5882] usb 2-1: USB disconnect, device number 29 [ 1101.214418][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1101.318001][ T5965] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1101.339365][ T5882] cp210x 2-1:0.0: device disconnected [ 1101.448037][ T5965] usb 5-1: device descriptor read/64, error -71 [ 1101.700480][ T5965] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1101.847948][ T5965] usb 5-1: device descriptor read/64, error -71 [ 1101.964024][ T5965] usb usb5-port1: attempt power cycle [ 1102.297883][ T5965] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1102.318666][ T5965] usb 5-1: device descriptor read/8, error -71 [ 1102.557916][ T5965] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1102.578646][ T5965] usb 5-1: device descriptor read/8, error -71 [ 1102.688430][ T5965] usb usb5-port1: unable to enumerate USB device [ 1102.978667][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3717'. [ 1102.978684][T17484] net_ratelimit: 30 callbacks suppressed [ 1102.978691][T17484] openvswitch: netlink: Message has 2 unknown bytes. [ 1103.918010][ T5965] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 1104.995452][ T5965] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1105.008505][ T5965] usb 2-1: config 1 has an invalid interface number: 118 but max is 0 [ 1105.008531][ T5965] usb 2-1: config 1 has no interface number 0 [ 1105.008592][ T5965] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1105.008618][ T5965] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 1105.008647][ T5965] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 1105.008664][ T5965] usb 2-1: config 1 interface 118 has no altsetting 0 [ 1105.077284][ T5965] usb 2-1: string descriptor 0 read error: -22 [ 1105.078685][ T5965] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 1105.078711][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.139516][T17491] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1105.139674][T17491] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1105.166088][ T5965] kobil_sct 2-1:1.118: KOBIL USB smart card terminal converter detected [ 1105.208492][ T5965] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1105.395296][ T5965] usb 2-1: USB disconnect, device number 30 [ 1106.062783][ T5965] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1106.206453][ T5965] kobil_sct 2-1:1.118: device disconnected [ 1106.466386][T17515] binder: 17514:17515 ioctl c0306201 2000000003c0 returned -14 [ 1106.599224][ T31] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1106.799899][ T31] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1106.799928][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.804997][ T31] usb 1-1: config 0 descriptor?? [ 1106.841430][ T31] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1107.631994][ T31] gspca_sunplus: reg_w_riv err -110 [ 1107.633879][ T31] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 1108.445301][T17552] binder: 17549:17552 ioctl c0306201 2000000003c0 returned -14 [ 1111.248549][ T31] usb 1-1: USB disconnect, device number 50 [ 1113.274154][T17587] binder: 17586:17587 ioctl c0306201 2000000003c0 returned -14 [ 1113.517920][T16265] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1114.126856][T16265] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1114.126908][T16265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.169878][T16265] usb 5-1: config 0 descriptor?? [ 1114.176426][T16265] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1115.403528][T16265] gspca_sunplus: reg_w_riv err -110 [ 1115.403605][T16265] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1115.712803][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.304969][T15745] usb 5-1: USB disconnect, device number 57 [ 1117.627899][T15745] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1117.757918][T15745] usb 6-1: device descriptor read/64, error -71 [ 1118.017918][T15745] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1118.150254][T15745] usb 6-1: device descriptor read/64, error -71 [ 1118.312334][ T5965] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 1118.585144][ T5965] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1119.003517][T15745] usb usb6-port1: attempt power cycle [ 1119.004457][ T5965] usb 5-1: config 1 has an invalid interface number: 118 but max is 0 [ 1119.004481][ T5965] usb 5-1: config 1 has no interface number 0 [ 1119.004521][ T5965] usb 5-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1119.004546][ T5965] usb 5-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 1119.004572][ T5965] usb 5-1: config 1 interface 118 altsetting 3 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 1119.004595][ T5965] usb 5-1: config 1 interface 118 has no altsetting 0 [ 1119.092833][ T5965] usb 5-1: string descriptor 0 read error: -22 [ 1119.092975][ T5965] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 1119.092997][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.135195][T17667] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1119.135281][T17667] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1119.190647][ T5965] kobil_sct 5-1:1.118: KOBIL USB smart card terminal converter detected [ 1119.375012][ T5965] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1119.377879][T15745] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1119.399192][T15745] usb 6-1: device descriptor read/8, error -71 [ 1119.950615][T15745] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1120.113638][T15745] usb 6-1: device descriptor read/8, error -71 [ 1120.218718][T15745] usb usb6-port1: unable to enumerate USB device [ 1120.266532][ T5965] usb 5-1: USB disconnect, device number 58 [ 1120.296182][ T5965] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1120.297035][ T5965] kobil_sct 5-1:1.118: device disconnected [ 1121.837486][T17710] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1123.387945][T12287] Bluetooth: hci4: command 0x0406 tx timeout [ 1124.918158][ T5965] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1125.060676][ T5965] usb 1-1: device descriptor read/64, error -71 [ 1125.061929][T17756] binder: 17755:17756 ioctl c0306201 2000000003c0 returned -14 [ 1125.062235][T17756] binder_alloc: 17755: binder_alloc_buf, no vma [ 1125.597884][ T5965] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1125.727943][ T5965] usb 1-1: device descriptor read/64, error -71 [ 1125.838170][ T5965] usb usb1-port1: attempt power cycle [ 1126.197877][ T5965] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1126.218711][ T5965] usb 1-1: device descriptor read/8, error -71 [ 1126.498001][ T5965] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1126.518565][ T5965] usb 1-1: device descriptor read/8, error -71 [ 1126.645745][ T5965] usb usb1-port1: unable to enumerate USB device [ 1127.014952][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3824'. [ 1127.189508][T17816] fuse: Bad value for 'fd' [ 1127.527595][T17825] binder: 17824:17825 ioctl c0306201 2000000003c0 returned -14 [ 1127.543818][T17825] binder_alloc: 17824: binder_alloc_buf, no vma [ 1129.019844][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3837'. [ 1130.661812][T17862] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1131.730722][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3851'. [ 1132.035920][T17872] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1132.036211][T17872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1132.055205][T17872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1132.055387][T17872] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1132.722218][T17895] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1133.387940][T17329] Bluetooth: hci4: command 0x0406 tx timeout [ 1134.117855][T16265] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1134.118672][T12287] Bluetooth: hci2: command 0x0406 tx timeout [ 1134.118730][T17329] Bluetooth: hci3: command 0x0c1a tx timeout [ 1134.267856][T16265] usb 1-1: Using ep0 maxpacket: 32 [ 1134.274736][T16265] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.274764][T16265] usb 1-1: config 0 has no interfaces? [ 1134.274793][T16265] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1134.274814][T16265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.322914][T16265] usb 1-1: config 0 descriptor?? [ 1134.447517][T17927] netlink: 'syz.9.3863': attribute type 21 has an invalid length. [ 1134.447629][T17927] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3863'. [ 1134.726299][T17949] binder: 17948:17949 ioctl c0306201 2000000003c0 returned -14 [ 1135.613040][T17329] Bluetooth: hci4: command 0x0406 tx timeout [ 1135.653672][T17951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1135.653864][T17951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1135.654059][T17951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1136.934394][T16265] usb 1-1: USB disconnect, device number 55 [ 1137.059617][T17975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3881'. [ 1137.571151][T16265] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1137.709207][T17329] Bluetooth: hci3: command 0x0c1a tx timeout [ 1137.711980][T17329] Bluetooth: hci4: command 0x0406 tx timeout [ 1137.715447][T17329] Bluetooth: hci2: command 0x0406 tx timeout [ 1138.459628][T16265] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.459653][T16265] usb 5-1: config 0 has no interfaces? [ 1138.459682][T16265] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1138.459702][T16265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.463531][T16265] usb 5-1: config 0 descriptor?? [ 1140.326028][T15745] usb 5-1: USB disconnect, device number 59 [ 1140.839758][T15745] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1140.898855][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1141.869262][T15745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.869289][T15745] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1141.909571][T15745] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1141.909600][T15745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1141.909620][T15745] usb 5-1: Product: syz [ 1141.909633][T15745] usb 5-1: Manufacturer: syz [ 1141.909647][T15745] usb 5-1: SerialNumber: syz [ 1141.939570][T15745] usb 5-1: config 0 descriptor?? [ 1141.957993][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 1141.997378][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.997403][ T31] usb 2-1: config 0 has no interfaces? [ 1141.997432][ T31] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1141.997453][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.051587][ T31] usb 2-1: config 0 descriptor?? [ 1142.187451][T15745] usb 5-1: USB disconnect, device number 60 [ 1143.858067][T15745] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1144.014936][T15745] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1144.014965][T15745] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1144.014983][T15745] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1144.015029][T15745] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1144.024659][T15745] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1144.024688][T15745] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1144.024707][T15745] usb 5-1: Product: syz [ 1144.024720][T15745] usb 5-1: Manufacturer: syz [ 1144.053879][T15745] cdc_wdm 5-1:1.0: skipping garbage [ 1144.053920][T15745] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1144.471264][ T31] usb 2-1: USB disconnect, device number 31 [ 1146.098002][ T31] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1146.247927][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1146.303263][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.303289][ T31] usb 1-1: config 0 has no interfaces? [ 1146.303316][ T31] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1146.303337][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.354547][ T31] usb 1-1: config 0 descriptor?? [ 1146.620301][T16265] usb 5-1: USB disconnect, device number 61 [ 1146.969732][T18098] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1147.933057][T18116] fuse: Unknown parameter 'fd0x0000000000000003' [ 1148.028784][T15745] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1148.179744][T15745] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1148.180049][T15745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.213066][T15745] usb 6-1: config 0 descriptor?? [ 1148.246655][T15745] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1148.347898][T12287] Bluetooth: hci4: command 0x0406 tx timeout [ 1148.839545][T15745] gspca_sunplus: reg_w_riv err -71 [ 1148.839635][T15745] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1148.869480][T15745] usb 6-1: USB disconnect, device number 10 [ 1148.929579][ T5880] usb 1-1: USB disconnect, device number 56 [ 1149.357892][ T808] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1149.437942][ T5880] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1149.512956][ T808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.512972][ T808] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1149.519478][ T808] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1149.519505][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1149.519524][ T808] usb 2-1: Product: syz [ 1149.519536][ T808] usb 2-1: Manufacturer: syz [ 1149.519549][ T808] usb 2-1: SerialNumber: syz [ 1149.531729][ T808] usb 2-1: config 0 descriptor?? [ 1149.590101][ T5880] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1149.590127][ T5880] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1149.590146][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1149.590190][ T5880] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1149.593018][ T5880] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1149.593044][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1149.593063][ T5880] usb 1-1: Product: syz [ 1149.593076][ T5880] usb 1-1: Manufacturer: syz [ 1149.614204][T18142] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1149.840190][ T5880] cdc_wdm 1-1:1.0: skipping garbage [ 1149.840230][ T5880] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1149.876186][ T808] usb 2-1: USB disconnect, device number 32 [ 1150.692818][T18179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.066660][ T808] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1151.148337][T12287] Bluetooth: hci4: command 0x0406 tx timeout [ 1151.228041][ T808] usb 10-1: Using ep0 maxpacket: 32 [ 1151.229483][ T808] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.229497][ T808] usb 10-1: config 0 has no interfaces? [ 1151.229513][ T808] usb 10-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1151.229525][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.307576][ T808] usb 10-1: config 0 descriptor?? [ 1152.788061][ T808] usb 1-1: USB disconnect, device number 57 [ 1153.568757][ T808] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1153.639053][T18232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1153.839646][ T5872] usb 10-1: USB disconnect, device number 52 [ 1154.171405][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.171432][ T808] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1154.187208][ T808] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1154.187226][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1154.187237][ T808] usb 1-1: Product: syz [ 1154.187244][ T808] usb 1-1: Manufacturer: syz [ 1154.187251][ T808] usb 1-1: SerialNumber: syz [ 1154.317412][ T808] usb 1-1: config 0 descriptor?? [ 1154.542916][T15745] usb 1-1: USB disconnect, device number 58 [ 1154.610580][T18238] binder: 18237:18238 ioctl c0306201 2000000003c0 returned -14 [ 1154.860042][T18245] fuse: Unknown parameter 'fd0x0000000000000003' [ 1155.597406][T18259] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3970'. [ 1155.621033][T18261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1156.057915][T15745] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 1156.167989][T18264] binder: 18263:18264 ioctl c0306201 2000000003c0 returned -14 [ 1156.234669][T15745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1156.241328][T15745] usb 1-1: config 1 has an invalid interface number: 118 but max is 0 [ 1156.241360][T15745] usb 1-1: config 1 has no interface number 0 [ 1156.241401][T15745] usb 1-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1156.241426][T15745] usb 1-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 1156.241452][T15745] usb 1-1: config 1 interface 118 altsetting 3 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 1156.241476][T15745] usb 1-1: config 1 interface 118 has no altsetting 0 [ 1156.249960][T15745] usb 1-1: string descriptor 0 read error: -22 [ 1156.250091][T15745] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 1156.250113][T15745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.528274][T18255] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1156.528427][T18255] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1156.553887][T15745] kobil_sct 1-1:1.118: KOBIL USB smart card terminal converter detected [ 1157.306501][T15745] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1157.440165][T15745] usb 1-1: USB disconnect, device number 59 [ 1157.520490][T15745] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1157.521014][T15745] kobil_sct 1-1:1.118: device disconnected [ 1157.701725][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1157.701816][ T37] audit: type=1800 audit(1773723075.651:102): pid=18286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.3978" name="bus" dev="tmpfs" ino=1284 res=0 errno=0 [ 1158.387897][T15745] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1158.527696][T18299] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3984'. [ 1158.554745][T15745] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1158.556915][T15745] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1158.556930][T15745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1158.556940][T15745] usb 2-1: Product: syz [ 1158.556948][T15745] usb 2-1: Manufacturer: syz [ 1158.556955][T15745] usb 2-1: SerialNumber: syz [ 1158.605003][T15745] usb 2-1: config 0 descriptor?? [ 1158.811850][T10135] usb 2-1: USB disconnect, device number 33 [ 1159.183758][T18309] program syz.4.3988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1160.208171][T18338] fuse: Bad value for 'fd' [ 1160.828032][T12287] Bluetooth: hci4: command 0x0406 tx timeout [ 1160.828111][T18301] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1161.643422][T18301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1161.645906][T18301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1161.921158][ T5872] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1162.303693][ T5872] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1162.336966][ T5872] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1162.336994][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1162.337012][ T5872] usb 2-1: Product: syz [ 1162.337024][ T5872] usb 2-1: Manufacturer: syz [ 1162.337037][ T5872] usb 2-1: SerialNumber: syz [ 1162.374931][ T5872] usb 2-1: config 0 descriptor?? [ 1162.593022][ T5872] usb 2-1: USB disconnect, device number 34 [ 1162.907899][T12287] Bluetooth: hci2: command 0x0406 tx timeout [ 1162.982515][T15745] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1163.137932][T15745] usb 1-1: Using ep0 maxpacket: 8 [ 1163.138993][T15745] usb 1-1: no configurations [ 1163.139009][T15745] usb 1-1: can't read configurations, error -22 [ 1163.286695][T15745] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1163.439357][T15745] usb 1-1: Using ep0 maxpacket: 8 [ 1163.445946][T15745] usb 1-1: no configurations [ 1163.445965][T15745] usb 1-1: can't read configurations, error -22 [ 1163.447035][T15745] usb usb1-port1: attempt power cycle [ 1163.727892][T12287] Bluetooth: hci3: command 0x0c1a tx timeout [ 1164.078084][T15745] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1164.108931][T15745] usb 1-1: Using ep0 maxpacket: 8 [ 1164.109574][T15745] usb 1-1: no configurations [ 1164.109588][T15745] usb 1-1: can't read configurations, error -22 [ 1164.348026][T15745] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1164.368681][T15745] usb 1-1: Using ep0 maxpacket: 8 [ 1164.369297][T15745] usb 1-1: no configurations [ 1164.369313][T15745] usb 1-1: can't read configurations, error -22 [ 1164.369868][T15745] usb usb1-port1: unable to enumerate USB device [ 1164.452496][T18401] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1165.951443][T12287] Bluetooth: hci4: command 0x0406 tx timeout [ 1166.397236][T10135] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1166.527955][T10135] usb 10-1: device descriptor read/64, error -71 [ 1166.797901][T10135] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1167.087897][T10135] usb 10-1: device descriptor read/64, error -71 [ 1167.200607][T10135] usb usb10-port1: attempt power cycle [ 1167.548237][T10135] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1167.581640][T10135] usb 10-1: device descriptor read/8, error -71 [ 1167.657882][T16265] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1167.807840][T16265] usb 1-1: Using ep0 maxpacket: 32 [ 1167.810168][T16265] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.810193][T16265] usb 1-1: config 0 has no interfaces? [ 1167.810220][T16265] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1167.810242][T16265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.832729][T16265] usb 1-1: config 0 descriptor?? [ 1167.837793][T10135] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1167.879675][T10135] usb 10-1: device descriptor read/8, error -71 [ 1167.988137][T10135] usb usb10-port1: unable to enumerate USB device [ 1168.171963][T16265] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1168.297931][T16265] usb 6-1: device descriptor read/64, error -71 [ 1169.230566][T16265] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1169.367830][T16265] usb 6-1: device descriptor read/64, error -71 [ 1169.759181][T16265] usb usb6-port1: attempt power cycle [ 1170.108039][T16265] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1170.129874][T16265] usb 6-1: device descriptor read/8, error -71 [ 1170.137846][T10135] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1170.308131][T10135] usb 5-1: Using ep0 maxpacket: 8 [ 1170.308943][T10135] usb 5-1: no configurations [ 1170.308957][T10135] usb 5-1: can't read configurations, error -22 [ 1170.367863][T16265] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1170.388672][T16265] usb 6-1: device descriptor read/8, error -71 [ 1170.466635][ T5872] usb 1-1: USB disconnect, device number 64 [ 1170.499965][T16265] usb usb6-port1: unable to enumerate USB device [ 1170.529579][T10135] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1170.684141][T10135] usb 5-1: Using ep0 maxpacket: 8 [ 1170.685090][T10135] usb 5-1: no configurations [ 1170.685104][T10135] usb 5-1: can't read configurations, error -22 [ 1170.685452][T10135] usb usb5-port1: attempt power cycle [ 1171.777950][T10135] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1171.798891][T10135] usb 5-1: Using ep0 maxpacket: 8 [ 1171.799523][T10135] usb 5-1: no configurations [ 1171.799537][T10135] usb 5-1: can't read configurations, error -22 [ 1171.938105][T10135] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1171.960128][T10135] usb 5-1: Using ep0 maxpacket: 8 [ 1171.960673][T10135] usb 5-1: no configurations [ 1171.960682][T10135] usb 5-1: can't read configurations, error -22 [ 1171.961014][T10135] usb usb5-port1: unable to enumerate USB device [ 1173.387851][T10135] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1173.539737][T10135] usb 5-1: Using ep0 maxpacket: 32 [ 1173.544270][T10135] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.544293][T10135] usb 5-1: config 0 has no interfaces? [ 1173.544321][T10135] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1173.544345][T10135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.604564][T10135] usb 5-1: config 0 descriptor?? [ 1175.468195][T12287] Bluetooth: hci4: command 0x0406 tx timeout [ 1175.799457][T18516] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1176.255475][T18516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1176.256054][T18516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1176.517868][T10135] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1176.617880][ T5880] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1176.669409][T10135] usb 1-1: Using ep0 maxpacket: 8 [ 1176.672025][T10135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.672055][T10135] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1176.675399][T10135] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1176.675424][T10135] usb 1-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1176.675444][T10135] usb 1-1: Product: syz [ 1176.675456][T10135] usb 1-1: Manufacturer: syz [ 1176.675470][T10135] usb 1-1: SerialNumber: syz [ 1176.699770][T10135] usb 1-1: config 0 descriptor?? [ 1176.735592][T10135] smsusb:smsusb_probe: board id=2, interface number 0 [ 1176.735669][T10135] smsusb:smsusb_probe: Device initialized with return code -19 [ 1176.767969][ T5880] usb 10-1: Using ep0 maxpacket: 8 [ 1176.769455][ T5880] usb 10-1: no configurations [ 1176.769470][ T5880] usb 10-1: can't read configurations, error -22 [ 1176.878127][ T5872] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1176.885923][ T808] usb 5-1: USB disconnect, device number 66 [ 1176.937851][ T5880] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1177.049739][ T5872] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1177.049782][ T5872] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1177.049806][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.079267][ T5872] usb 6-1: config 0 descriptor?? [ 1177.088015][ T5880] usb 10-1: Using ep0 maxpacket: 8 [ 1177.089289][ T5880] usb 10-1: no configurations [ 1177.089302][ T5880] usb 10-1: can't read configurations, error -22 [ 1177.095169][ T5880] usb usb10-port1: attempt power cycle [ 1177.127652][T10135] usb 1-1: USB disconnect, device number 65 [ 1177.158989][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.459923][ T5880] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1177.483555][ T5880] usb 10-1: Using ep0 maxpacket: 8 [ 1177.484204][ T5880] usb 10-1: no configurations [ 1177.484217][ T5880] usb 10-1: can't read configurations, error -22 [ 1177.508093][T18562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4065'. [ 1177.607864][ T5880] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1177.628581][ T5880] usb 10-1: Using ep0 maxpacket: 8 [ 1177.629354][ T5880] usb 10-1: no configurations [ 1177.629366][ T5880] usb 10-1: can't read configurations, error -22 [ 1177.629653][ T5880] usb usb10-port1: unable to enumerate USB device [ 1177.837846][ T5880] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1177.868412][T12287] Bluetooth: hci2: command 0x0406 tx timeout [ 1177.914033][ T37] audit: type=1326 audit(1773723095.881:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18570 comm="syz.0.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 1177.914069][ T37] audit: type=1326 audit(1773723095.881:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18570 comm="syz.0.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 1177.915675][ T37] audit: type=1326 audit(1773723095.881:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18570 comm="syz.0.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 1177.917162][ T37] audit: type=1326 audit(1773723095.881:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18570 comm="syz.0.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 1177.917189][ T37] audit: type=1326 audit(1773723095.881:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18570 comm="syz.0.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 1177.917210][ T37] audit: type=1326 audit(1773723095.881:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18570 comm="syz.0.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 1177.917472][ T37] audit: type=1326 audit(1773723095.881:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18570 comm="syz.0.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 1177.927783][ T37] audit: type=1326 audit(1773723095.891:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18570 comm="syz.0.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 1177.927824][ T37] audit: type=1326 audit(1773723095.891:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18570 comm="syz.0.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f41c67bc799 code=0x7ffc0000 [ 1177.987854][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 1178.032873][ T5880] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1178.032903][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1178.032922][ T5880] usb 5-1: Product: syz [ 1178.032934][ T5880] usb 5-1: Manufacturer: syz [ 1178.032947][ T5880] usb 5-1: SerialNumber: syz [ 1178.058495][ T5880] usb 5-1: config 0 descriptor?? [ 1178.268482][T12287] Bluetooth: hci3: command 0x0c1a tx timeout [ 1178.395697][ T5880] usb 5-1: USB disconnect, device number 67 [ 1178.507856][T15745] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1178.667995][T15745] usb 1-1: Using ep0 maxpacket: 32 [ 1178.670557][T15745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.670571][T15745] usb 1-1: config 0 has no interfaces? [ 1178.670588][T15745] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1178.670599][T15745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.674045][T15745] usb 1-1: config 0 descriptor?? [ 1178.777095][T18588] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 1180.047232][T15745] usb 6-1: USB disconnect, device number 15 [ 1180.232431][T18595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4077'. [ 1181.338174][T18557] usb 1-1: USB disconnect, device number 66 [ 1181.928048][T15745] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1181.998453][ T808] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1182.067874][T10135] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1182.093556][T15745] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1182.093584][T15745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.121896][T15745] usb 1-1: config 0 descriptor?? [ 1182.125285][T15745] cp210x 1-1:0.0: cp210x converter detected [ 1182.167808][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 1182.186028][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.186052][ T808] usb 5-1: config 0 has no interfaces? [ 1182.189946][ T808] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1182.189972][ T808] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1182.190050][ T808] usb 5-1: Product: syz [ 1182.190063][ T808] usb 5-1: Manufacturer: syz [ 1182.190076][ T808] usb 5-1: SerialNumber: syz [ 1182.217934][T10135] usb 2-1: Using ep0 maxpacket: 32 [ 1182.219841][T10135] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.219887][T10135] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1182.219912][T10135] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1182.219936][T10135] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1182.222260][T10135] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1182.222283][T10135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.222301][T10135] usb 2-1: Product: syz [ 1182.222314][T10135] usb 2-1: Manufacturer: syz [ 1182.222328][T10135] usb 2-1: SerialNumber: syz [ 1182.276313][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1182.347993][T15745] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1182.348020][T15745] cp210x 1-1:0.0: querying part number failed [ 1182.431092][ T808] usb 5-1: config 0 descriptor?? [ 1182.483734][T15745] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1182.501312][T15745] usb 1-1: USB disconnect, device number 67 [ 1182.515848][T17329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1182.535825][T17329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1182.547051][T17329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1182.556276][T15745] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1182.569059][T17329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1182.574183][T10135] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input9 [ 1182.574285][T17329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1182.576961][T15745] cp210x 1-1:0.0: device disconnected [ 1182.677903][ T808] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1182.737837][T10135] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1182.737857][T10135] (id 0x00) [ 1182.817883][T10135] rc_core: IR keymap rc-imon-pad not found [ 1182.817903][T10135] Registered IR keymap rc-empty [ 1182.818110][T10135] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1182.818127][T10135] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1182.841544][T10135] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1182.845810][T10135] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input10 [ 1182.848097][ T808] usb 10-1: Using ep0 maxpacket: 32 [ 1182.852987][T10135] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:35> initialized [ 1182.895570][ T808] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.895595][ T808] usb 10-1: config 0 has no interfaces? [ 1182.895624][ T808] usb 10-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1182.895646][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.979833][ T808] usb 10-1: config 0 descriptor?? [ 1183.108271][T18623] imon:send_packet: packet tx failed (-71) [ 1183.119714][T10135] usb 2-1: USB disconnect, device number 35 [ 1183.128015][T18623] imon:vfd_write: send packet #0 failed [ 1183.343227][ T5880] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1183.429781][T18631] chnl_net:caif_netlink_parms(): no params data found [ 1183.497891][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 1183.503560][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.503609][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1183.543417][ T5880] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1183.543444][ T5880] usb 1-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1183.543469][ T5880] usb 1-1: Product: syz [ 1183.543483][ T5880] usb 1-1: Manufacturer: syz [ 1183.543495][ T5880] usb 1-1: SerialNumber: syz [ 1183.546671][ T5880] usb 1-1: config 0 descriptor?? [ 1183.569595][ T5880] smsusb:smsusb_probe: board id=2, interface number 0 [ 1183.569680][ T5880] smsusb:smsusb_probe: Device initialized with return code -19 [ 1183.750045][T18631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.750153][T18631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.750390][T18631] bridge_slave_0: entered allmulticast mode [ 1183.753438][T18631] bridge_slave_0: entered promiscuous mode [ 1183.756702][T18631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.758237][T18631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.758365][T18631] bridge_slave_1: entered allmulticast mode [ 1183.811056][ T5880] usb 1-1: USB disconnect, device number 68 [ 1183.813622][T18631] bridge_slave_1: entered promiscuous mode [ 1183.924520][T18631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.944807][T18631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.037243][T18631] team0: Port device team_slave_0 added [ 1184.044944][T18631] team0: Port device team_slave_1 added [ 1184.090412][T18631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.090423][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.090436][T18631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.091792][T18631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.091801][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.091815][T18631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.175773][T18631] hsr_slave_0: entered promiscuous mode [ 1184.177383][T18631] hsr_slave_1: entered promiscuous mode [ 1184.181975][T18631] debugfs: 'hsr0' already exists in 'hsr' [ 1184.182007][T18631] Cannot create hsr debugfs directory [ 1184.748271][T17329] Bluetooth: hci2: command tx timeout [ 1184.752936][T10135] usb 5-1: USB disconnect, device number 68 [ 1185.303085][T18631] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.416567][ T5880] usb 10-1: USB disconnect, device number 61 [ 1186.830076][T17329] Bluetooth: hci2: command tx timeout [ 1187.048986][T18631] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.113292][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4109'. [ 1187.483446][T18631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.148602][T18631] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1188.153795][T18631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.643519][T18690] batadv_slave_1: entered promiscuous mode [ 1188.644326][T18690] batadv_slave_1: left promiscuous mode [ 1188.917946][T17329] Bluetooth: hci2: command tx timeout [ 1189.394414][T18631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1189.437507][T18631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1189.487587][T18631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1189.557271][T18631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1190.257263][T18631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.318771][T18631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.368770][T15364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.377432][T15364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.451251][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.451323][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.988237][T17329] Bluetooth: hci2: command tx timeout [ 1191.556831][T18631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.770537][T18631] veth0_vlan: entered promiscuous mode [ 1191.796456][T18631] veth1_vlan: entered promiscuous mode [ 1191.921054][T18631] veth0_macvtap: entered promiscuous mode [ 1191.925864][T18631] veth1_macvtap: entered promiscuous mode [ 1192.031177][T18631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.062450][T18631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.136507][T17558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.155411][T17558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.155863][T17558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.157343][T17558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.349044][T16265] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1192.496035][T16265] usb 2-1: device descriptor read/64, error -71 [ 1192.755262][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.755282][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.767884][T16265] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1192.897942][T16265] usb 2-1: device descriptor read/64, error -71 [ 1192.969434][ T1430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.969453][ T1430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.014645][T16265] usb usb2-port1: attempt power cycle [ 1193.347986][T16265] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1193.368444][T16265] usb 2-1: device descriptor read/8, error -71 [ 1193.617850][T16265] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1193.639925][T16265] usb 2-1: device descriptor read/8, error -71 [ 1193.748179][T16265] usb usb2-port1: unable to enumerate USB device [ 1195.933655][T18798] loop8: detected capacity change from 0 to 8 [ 1195.973160][T18798] Dev loop8: unable to read RDB block 8 [ 1195.973216][T18798] loop8: unable to read partition table [ 1195.975335][T18798] loop8: partition table beyond EOD, truncated [ 1195.975356][T18798] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1197.186367][T18806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1198.632603][T16265] usb 10-1: new low-speed USB device number 62 using dummy_hcd [ 1198.795673][T16265] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1198.801180][T16265] usb 10-1: config 1 has an invalid interface number: 118 but max is 0 [ 1198.801206][T16265] usb 10-1: config 1 has no interface number 0 [ 1198.801248][T16265] usb 10-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1198.801271][T16265] usb 10-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 1198.801295][T16265] usb 10-1: config 1 interface 118 altsetting 3 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 1198.801321][T16265] usb 10-1: config 1 interface 118 has no altsetting 0 [ 1198.831552][T16265] usb 10-1: string descriptor 0 read error: -22 [ 1198.831680][T16265] usb 10-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 1198.831702][T16265] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.858009][T10135] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1198.910616][T18804] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1198.910728][T18804] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1198.944461][T16265] kobil_sct 10-1:1.118: KOBIL USB smart card terminal converter detected [ 1198.968415][T16265] usb 10-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1199.037909][T10135] usb 1-1: device descriptor read/64, error -71 [ 1199.127938][T18557] usb 10-1: USB disconnect, device number 62 [ 1199.153468][T18557] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1199.168505][T18557] kobil_sct 10-1:1.118: device disconnected [ 1199.298014][T10135] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1199.428126][T10135] usb 1-1: device descriptor read/64, error -71 [ 1199.538341][T10135] usb usb1-port1: attempt power cycle [ 1199.981572][T10135] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1200.003156][T10135] usb 1-1: device descriptor read/8, error -71 [ 1200.429014][T10135] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1200.462506][T10135] usb 1-1: device descriptor read/8, error -71 [ 1200.913827][T10135] usb usb1-port1: unable to enumerate USB device [ 1202.856296][T18848] binder: 18847:18848 ioctl c0306201 2000000003c0 returned -14 [ 1205.387947][T15745] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1205.543313][T15745] usb 1-1: no configurations [ 1205.543326][T15745] usb 1-1: can't read configurations, error -22 [ 1206.387807][T15745] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1206.539105][T15745] usb 1-1: no configurations [ 1206.539792][T15745] usb 1-1: can't read configurations, error -22 [ 1206.542210][T15745] usb usb1-port1: attempt power cycle [ 1206.877809][T15745] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1206.899711][T15745] usb 1-1: no configurations [ 1206.899729][T15745] usb 1-1: can't read configurations, error -22 [ 1207.027870][T15745] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1207.050336][T15745] usb 1-1: no configurations [ 1207.050347][T15745] usb 1-1: can't read configurations, error -22 [ 1207.050647][T15745] usb usb1-port1: unable to enumerate USB device [ 1208.945350][T18886] netlink: 'syz.4.4180': attribute type 21 has an invalid length. [ 1208.945437][T18886] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4180'. [ 1210.617842][T10543] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1210.767838][T10543] usb 2-1: Using ep0 maxpacket: 8 [ 1210.769888][T10543] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1210.769905][T10543] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1210.769917][T10543] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1210.769929][T10543] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1210.769951][T10543] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1210.769963][T10543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.097317][T10543] usb 2-1: GET_CAPABILITIES returned 0 [ 1211.097384][T10543] usbtmc 2-1:16.0: can't read capabilities [ 1211.352708][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1211.513509][ T5872] usb 2-1: USB disconnect, device number 40 [ 1212.317876][ T5872] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1212.457884][ T5917] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1212.489191][ T5872] usb 10-1: Using ep0 maxpacket: 8 [ 1212.501340][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.501365][ T5872] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1212.507332][ T5872] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1212.507358][ T5872] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1212.507377][ T5872] usb 10-1: Product: syz [ 1212.507389][ T5872] usb 10-1: Manufacturer: syz [ 1212.507411][ T5872] usb 10-1: SerialNumber: syz [ 1212.631179][ T5917] usb 2-1: no configurations [ 1212.631199][ T5917] usb 2-1: can't read configurations, error -22 [ 1212.648486][ T5872] usb 10-1: config 0 descriptor?? [ 1212.757800][ T5917] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1213.788956][ T5917] usb 2-1: no configurations [ 1213.788976][ T5917] usb 2-1: can't read configurations, error -22 [ 1213.790817][ T5917] usb usb2-port1: attempt power cycle [ 1214.137858][ T5917] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1214.159794][ T5917] usb 2-1: no configurations [ 1214.159812][ T5917] usb 2-1: can't read configurations, error -22 [ 1214.197969][T18975] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1214.213991][T18975] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1214.217160][T18975] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1214.285051][T18975] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1214.285098][T18975] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1214.300034][ T5917] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1214.322500][ T5917] usb 2-1: no configurations [ 1214.322511][ T5917] usb 2-1: can't read configurations, error -22 [ 1214.322717][ T5917] usb usb2-port1: unable to enumerate USB device [ 1214.364220][T18975] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1214.730820][T18978] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1215.040967][T10543] usb 10-1: USB disconnect, device number 63 [ 1215.977835][T10543] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1216.148277][T10543] usb 2-1: no configurations [ 1216.148296][T10543] usb 2-1: can't read configurations, error -22 [ 1216.187960][T17329] Bluetooth: hci4: command 0x0406 tx timeout [ 1216.267872][T17329] Bluetooth: hci3: command 0x0c1a tx timeout [ 1216.285725][T10543] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1216.347893][T17329] Bluetooth: hci2: command 0x0c1a tx timeout [ 1216.518446][T10543] usb 2-1: no configurations [ 1216.518465][T10543] usb 2-1: can't read configurations, error -22 [ 1216.518977][T10543] usb usb2-port1: attempt power cycle [ 1216.587819][T18557] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1217.485901][T18557] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1217.487288][T18557] usb 3-1: config 1 has an invalid interface number: 118 but max is 0 [ 1217.487312][T18557] usb 3-1: config 1 has no interface number 0 [ 1217.487353][T18557] usb 3-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1217.487379][T18557] usb 3-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 1217.487403][T18557] usb 3-1: config 1 interface 118 altsetting 3 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 1217.487423][T18557] usb 3-1: config 1 interface 118 has no altsetting 0 [ 1217.562079][T18557] usb 3-1: string descriptor 0 read error: -22 [ 1217.562178][T18557] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 1217.562190][T18557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.592499][T18995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1217.592662][T18995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1217.616380][T18557] kobil_sct 3-1:1.118: KOBIL USB smart card terminal converter detected [ 1217.671692][T18557] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1217.686745][T10543] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1217.703797][T10543] usb 2-1: no configurations [ 1217.703815][T10543] usb 2-1: can't read configurations, error -22 [ 1217.805390][T18557] usb 3-1: USB disconnect, device number 6 [ 1217.828512][T10543] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1217.847448][T18557] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1217.851488][T18557] kobil_sct 3-1:1.118: device disconnected [ 1217.869639][T10543] usb 2-1: no configurations [ 1217.869657][T10543] usb 2-1: can't read configurations, error -22 [ 1217.869972][T10543] usb usb2-port1: unable to enumerate USB device [ 1218.209265][T18557] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1218.269825][T17329] Bluetooth: hci4: command 0x0406 tx timeout [ 1218.347821][T17329] Bluetooth: hci3: command 0x0c1a tx timeout [ 1218.358022][T18557] usb 1-1: Using ep0 maxpacket: 32 [ 1218.371452][T18557] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.371475][T18557] usb 1-1: config 0 has no interfaces? [ 1218.371504][T18557] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1218.371527][T18557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.389846][T18557] usb 1-1: config 0 descriptor?? [ 1218.433643][T17329] Bluetooth: hci2: command 0x0c1a tx timeout [ 1218.689121][ T5880] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1218.807844][T18557] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1218.867962][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 1218.870356][ T5880] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1218.873852][ T5880] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1218.873878][ T5880] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1218.873944][ T5880] usb 3-1: Product: syz [ 1218.873958][ T5880] usb 3-1: Manufacturer: syz [ 1218.873972][ T5880] usb 3-1: SerialNumber: syz [ 1218.901721][ T5880] usb 3-1: config 0 descriptor?? [ 1219.038890][T18557] usb 2-1: no configurations [ 1219.038909][T18557] usb 2-1: can't read configurations, error -22 [ 1219.207837][T18557] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1219.358592][T18557] usb 2-1: no configurations [ 1219.358611][T18557] usb 2-1: can't read configurations, error -22 [ 1219.358908][T18557] usb usb2-port1: attempt power cycle [ 1219.430614][T19024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1219.430777][T19024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1219.433960][T19024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1220.056059][T18557] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1220.118935][T18557] usb 2-1: no configurations [ 1220.118947][T18557] usb 2-1: can't read configurations, error -22 [ 1220.257857][T18557] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1220.283182][T18557] usb 2-1: no configurations [ 1220.283194][T18557] usb 2-1: can't read configurations, error -22 [ 1220.286049][T18557] usb usb2-port1: unable to enumerate USB device [ 1221.049851][T10543] usb 1-1: USB disconnect, device number 77 [ 1221.445114][ T5882] ------------[ cut here ]------------ [ 1221.445127][ T5882] in_task() && kcov_mode_enabled(mode) [ 1221.445143][ T5882] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/1:7/5882 [ 1221.445191][ T5882] Modules linked in: [ 1221.445231][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1221.445260][ T5882] Tainted: [L]=SOFTLOCKUP [ 1221.445268][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.445280][ T5882] Workqueue: usb_hub_wq hub_event [ 1221.445396][ T5882] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1221.445422][ T5882] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 1221.445441][ T5882] RSP: 0018:ffffc90004ebf7c8 EFLAGS: 00010202 [ 1221.445488][ T5882] RAX: 0000000000000002 RBX: ffff88801f7ebd00 RCX: 0000000000000000 [ 1221.445501][ T5882] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 1221.445516][ T5882] RBP: ffffc90004ebfad0 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 1221.445532][ T5882] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff888029c06000 [ 1221.445547][ T5882] R13: dffffc0000000000 R14: 0100000000000003 R15: ffff888029c01000 [ 1221.445563][ T5882] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 1221.445580][ T5882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1221.445594][ T5882] CR2: 00007f41c6a37dac CR3: 00000000765d2000 CR4: 00000000003526f0 [ 1221.445613][ T5882] Call Trace: [ 1221.445621][ T5882] [ 1221.445635][ T5882] hub_event+0x150/0x4f60 [ 1221.445656][ T5882] ? __lock_acquire+0x6b5/0x2cf0 [ 1221.445693][ T5882] ? __lock_acquire+0x6b5/0x2cf0 [ 1221.445719][ T5882] ? look_up_lock_class+0x57/0x110 [ 1221.445754][ T5882] ? register_lock_class+0x31/0x2e0 [ 1221.445783][ T5882] ? update_load_avg+0x1b0/0x1ec0 [ 1221.445806][ T5882] ? __lock_acquire+0x6b5/0x2cf0 [ 1221.445842][ T5882] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1221.445874][ T5882] ? __pfx_hub_event+0x10/0x10 [ 1221.445906][ T5882] ? process_scheduled_works+0xa8d/0x18c0 [ 1221.445933][ T5882] ? process_scheduled_works+0xa8d/0x18c0 [ 1221.445962][ T5882] process_scheduled_works+0xb6e/0x18c0 [ 1221.446029][ T5882] ? __pfx_process_scheduled_works+0x10/0x10 [ 1221.446064][ T5882] ? assign_work+0x3d5/0x5e0 [ 1221.446097][ T5882] worker_thread+0xa53/0xfc0 [ 1221.446153][ T5882] kthread+0x388/0x470 [ 1221.446175][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 1221.446201][ T5882] ? __pfx_kthread+0x10/0x10 [ 1221.446224][ T5882] ret_from_fork+0x51e/0xb90 [ 1221.446256][ T5882] ? __pfx_ret_from_fork+0x10/0x10 [ 1221.446281][ T5882] ? __switch_to+0xc7d/0x1450 [ 1221.446311][ T5882] ? __pfx_kthread+0x10/0x10 [ 1221.446333][ T5882] ret_from_fork_asm+0x1a/0x30 [ 1221.446371][ T5882] [ 1221.446391][ T5882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1221.446409][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1221.446437][ T5882] Tainted: [L]=SOFTLOCKUP [ 1221.446444][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.446458][ T5882] Workqueue: usb_hub_wq hub_event [ 1221.446478][ T5882] Call Trace: [ 1221.446486][ T5882] [ 1221.446493][ T5882] vpanic+0x56c/0xa60 [ 1221.446535][ T5882] ? __pfx__printk+0x10/0x10 [ 1221.446557][ T5882] ? __pfx_vpanic+0x10/0x10 [ 1221.446584][ T5882] ? is_bpf_text_address+0x292/0x2b0 [ 1221.446612][ T5882] ? is_bpf_text_address+0x26/0x2b0 [ 1221.446648][ T5882] panic+0xc5/0xd0 [ 1221.446676][ T5882] ? __pfx_panic+0x10/0x10 [ 1221.446715][ T5882] ? ret_from_fork_asm+0x1a/0x30 [ 1221.446740][ T5882] __warn+0x315/0x4f0 [ 1221.446767][ T5882] ? kcov_remote_start+0x5d8/0x710 [ 1221.446791][ T5882] ? kcov_remote_start+0x5d8/0x710 [ 1221.446815][ T5882] __report_bug+0x29a/0x540 [ 1221.446909][ T5882] ? kcov_remote_start+0x5d8/0x710 [ 1221.446933][ T5882] ? __pfx___report_bug+0x10/0x10 [ 1221.446961][ T5882] ? unwind_next_frame+0xa5/0x23c0 [ 1221.446980][ T5882] ? unwind_next_frame+0x1aaf/0x23c0 [ 1221.447008][ T5882] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1221.447038][ T5882] ? do_raw_spin_lock+0x12b/0x2f0 [ 1221.447074][ T5882] ? kcov_remote_start+0x5d8/0x710 [ 1221.447097][ T5882] report_bug+0x16a/0x220 [ 1221.447125][ T5882] ? kcov_remote_start+0x5d8/0x710 [ 1221.447146][ T5882] ? kcov_remote_start+0x5da/0x710 [ 1221.447169][ T5882] handle_bug+0x9c/0x200 [ 1221.447190][ T5882] exc_invalid_op+0x1a/0x50 [ 1221.447211][ T5882] asm_exc_invalid_op+0x1a/0x20 [ 1221.447250][ T5882] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1221.447274][ T5882] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 1221.447292][ T5882] RSP: 0018:ffffc90004ebf7c8 EFLAGS: 00010202 [ 1221.447309][ T5882] RAX: 0000000000000002 RBX: ffff88801f7ebd00 RCX: 0000000000000000 [ 1221.447323][ T5882] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 1221.447338][ T5882] RBP: ffffc90004ebfad0 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 1221.447352][ T5882] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff888029c06000 [ 1221.447367][ T5882] R13: dffffc0000000000 R14: 0100000000000003 R15: ffff888029c01000 [ 1221.447391][ T5882] ? rt_spin_lock+0x1e0/0x400 [ 1221.447421][ T5882] ? kcov_remote_start+0xe0/0x710 [ 1221.447447][ T5882] hub_event+0x150/0x4f60 [ 1221.447467][ T5882] ? __lock_acquire+0x6b5/0x2cf0 [ 1221.447491][ T5882] ? __lock_acquire+0x6b5/0x2cf0 [ 1221.447516][ T5882] ? look_up_lock_class+0x57/0x110 [ 1221.447545][ T5882] ? register_lock_class+0x31/0x2e0 [ 1221.447574][ T5882] ? update_load_avg+0x1b0/0x1ec0 [ 1221.447598][ T5882] ? __lock_acquire+0x6b5/0x2cf0 [ 1221.447633][ T5882] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1221.447665][ T5882] ? __pfx_hub_event+0x10/0x10 [ 1221.447697][ T5882] ? process_scheduled_works+0xa8d/0x18c0 [ 1221.447723][ T5882] ? process_scheduled_works+0xa8d/0x18c0 [ 1221.447751][ T5882] process_scheduled_works+0xb6e/0x18c0 [ 1221.447812][ T5882] ? __pfx_process_scheduled_works+0x10/0x10 [ 1221.447847][ T5882] ? assign_work+0x3d5/0x5e0 [ 1221.447880][ T5882] worker_thread+0xa53/0xfc0 [ 1221.447936][ T5882] kthread+0x388/0x470 [ 1221.447958][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 1221.447985][ T5882] ? __pfx_kthread+0x10/0x10 [ 1221.448014][ T5882] ret_from_fork+0x51e/0xb90 [ 1221.448045][ T5882] ? __pfx_ret_from_fork+0x10/0x10 [ 1221.448071][ T5882] ? __switch_to+0xc7d/0x1450 [ 1221.448100][ T5882] ? __pfx_kthread+0x10/0x10 [ 1221.448123][ T5882] ret_from_fork_asm+0x1a/0x30 [ 1221.448160][ T5882] [ 1221.448405][ T5882] Kernel Offset: disabled