last executing test programs: 44.826010602s ago: executing program 2 (id=1021): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000d0400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44080) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="42100200900000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4024810}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x20000800, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mlockall(0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r5, 0x0, 0x4000) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073113b00000000008510000007000000b7000000000000009510c2000000000095000012000000004bb3000460cf220d5bce73510b1018fb72b05abae08abc00c2bc49ca670993f74b0876799c8d4df425a5c0479074dd1bf37481a91d26452f0fe1d4f257645a36813dc95d1dd559737a95320041277486e93dc643f25531f56cb5c4bc77de7b968a01ce1b4f973ac437a9"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_clone(0x800, 0x0, 0xfffffffffffffe04, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000400)=0x7, 0x100000000, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x48, 0x33, 0x57, 0xffffffff}, {0x6, 0x6, 0x0, 0x5}]}, 0x35) sendto$unix(r6, &(0x7f00000001c0)='QW', 0x2, 0x4000000, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) 44.605319323s ago: executing program 2 (id=1024): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) poll(&(0x7f0000000100)=[{r2, 0x6086}, {r2, 0x1a0}], 0x2, 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f00000000c0)) r3 = syz_open_pts(r1, 0x141401) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_pts(r4, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) fcntl$setstatus(r3, 0x4, 0x2000) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 43.907782921s ago: executing program 2 (id=1026): r0 = socket(0x200000000000011, 0x2, 0xd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) fsopen(&(0x7f00000005c0)='aufs\x00', 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1c000000, 0x0, 0x5, 0x2, 0xfffffe0000000001, 0xd, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6) pipe2$watch_queue(0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1, 0x100040, 0x4, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x4cf40) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) userfaultfd(0x801) 43.017813378s ago: executing program 2 (id=1027): r0 = socket(0x40000000015, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb4c, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010c50f80b00000000000010902242b6f00003001090400000903000200092109000301222c00090581030800100400"], 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) userfaultfd(0x801) pipe2$watch_queue(&(0x7f0000000040), 0x80) 41.795208264s ago: executing program 2 (id=1029): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) unshare(0x400) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) r7 = eventfd2(0xbfff35a9, 0x80000) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000180)={0x0, r7}) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000001084c052f040000000000010902"], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000380), 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r8, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x111, 0xa}}, 0x20) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 41.641641162s ago: executing program 2 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 30.648014186s ago: executing program 4 (id=1062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 30.579086627s ago: executing program 4 (id=1063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x24) write$vhost_msg_v2(r2, 0x0, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3") syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fanotify_init(0x20, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000000)=0x157) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) 15.939042592s ago: executing program 4 (id=1085): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x47, 0x2133, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x8) sendmsg$key(r2, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "eb"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x58}, 0x1, 0x7}, 0x0) readv(r1, 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r7, &(0x7f0000000140), &(0x7f00000001c0)=0x10, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x9c}}, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 13.981317307s ago: executing program 0 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, 0x42, 0x1, 0x70bd25, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x43, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000003c0000001d2bffc126"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x64}}, 0x0) 13.625916968s ago: executing program 0 (id=1092): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f5", 0x29}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.265108618s ago: executing program 0 (id=1095): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 12.133122507s ago: executing program 1 (id=1096): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020}, 0x2020) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, 0x0) 10.980811631s ago: executing program 0 (id=1097): r0 = socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3e68, @loopback, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32, @ANYBLOB="019800000000000020"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4008000) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/15, 0xf) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 6.960467122s ago: executing program 4 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) 5.667539965s ago: executing program 0 (id=1099): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856ca", 0x1d, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.660506314s ago: executing program 1 (id=1100): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.645317349s ago: executing program 4 (id=1101): r0 = socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3e68, @loopback, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4008000) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/15, 0xf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) sendmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) 5.470641033s ago: executing program 1 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0', 0x1) close(r3) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000f00), 0x0) close(0xffffffffffffffff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001600)='usbip-vudc.0', 0xc) 5.169232172s ago: executing program 1 (id=1103): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 5.017068149s ago: executing program 1 (id=1104): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f5", 0x29}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.280000956s ago: executing program 0 (id=1106): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r0, 0x1, 0x60bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40890}, 0x40000) syz_io_uring_setup(0x1638, &(0x7f00000002c0)={0x0, 0x3f7, 0x400, 0x4, 0x160}, &(0x7f00000001c0), &(0x7f0000001880), &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000000)={0x28, 0x14, 0x940e2689cab82739, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2412447060aefae0261a000"}]}, 0x28}}, 0xc8c0) recvfrom(r2, 0x0, 0x0, 0x8100, 0x0, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0080, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000000200)={0x3, 0x7, 0x2, 0x59, 0x0, [0x3e2, 0xfe, 0xffff3ad0, 0x81]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r8 = syz_open_dev$cec(&(0x7f0000000040), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000000)=0x20) keyctl$read(0xb, r7, 0x0, 0x0) 3.860378529s ago: executing program 3 (id=1107): open(&(0x7f0000000440)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getown(r0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) 3.787665534s ago: executing program 1 (id=1108): r0 = socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3e68, @loopback, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32, @ANYBLOB="019800000000000020"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4008000) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/15, 0xf) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 3.581535506s ago: executing program 3 (id=1109): socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) mkdir(&(0x7f0000000180)='dir0\x00', 0xc2) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='dir0/per_cpu/cpu0/trace\x00', 0x103201, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) 686.231085ms ago: executing program 4 (id=1110): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010341a020800000000000109022400010000000309040000090300030009210a0003012229000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'fo\x00', 0x30, 0x80001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa012102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd, 0x4}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x6, 0x100000, 0x2000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_usb_connect$midi(0x2, 0xaa, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2b73, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x1, 0x1, 0x7, 0x10, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1f, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x5, 0x3}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x2, 0x6, [{0x3, 0x4}, {0xe, 0x5}, {0x7, 0xf8}, {0x0, 0x9}, {0x80, 0x1}, {0xf8, 0x26}], 0xc}, @ms_header={0x7, 0x24, 0x1, 0x81, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xce, 0x43}, @ms_header={0x7, 0x24, 0x1, 0xd20, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xff54, 0x7}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x3, 0xd, 0x4, {0xc, 0x25, 0x1, 0x8, "d0a20875e65fac32"}}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x2, 0x3, 0x4, {0xd, 0x25, 0x1, 0x9, "46e1806a558a5bd93c"}}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x9, 0xe1, 0x8, {0x9, 0x25, 0x1, 0x5, "5ba19ba001"}}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x5, 0x6, 0x6, {0x6, 0x25, 0x1, 0x2, '(0'}}}]}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x2f633e786d048e17, 0x9, 0x4, 0x6, 0x8, 0x90}, 0xde, &(0x7f0000000480)={0x5, 0xf, 0xde, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x40, 0x5}, @generic={0xcf, 0x10, 0x0, "82a69045a44765e680ab1c9af212d063042125c63202d5c797ad1a2f9ca3b3a27432c6d7a59621c08fd7ee79d886d899815c0bc9ac26a9bb159602577a5ac88b891c1f76f8faa8a15cde146dddcc47d8266c97063bd4a9cbfb1fbdeaf33e442b1d3b861aebf17c79bb7e478d747a89c0d3cd2c4cf08b6a290e82cd926e97d0cf49e8070c98249fd177b977fd677ad8d8f84505ea351f3f7b5b02a30ccd3123e8c9bcd5e061b9fc8b0d4b9abf09967851193492e0fa9d263387366220dacb60828af3cfe496d2cb45d1f890f8"}]}, 0x8, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1465}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1009}}, {0xba, &(0x7f0000000680)=@string={0xba, 0x3, "4f1870a576097891bb101c9f9cb8a856e1d6c4ee8c61f159e16766f14b03594153e7ea858c02c1054fb24373de29758139797770abfd85ea52fa247bbd651392002983a573690f49671b4d6f7fed0020c1881205a19b00d0dccfd3608f609b9785e899720d79cf1e219cc8e6edcd42c73c11b60f116e7cbf85336b2f4b755e24f9690273ebfc59d26afff4fc0f5825a8f548831f60ca69a46f34c1d7eb165cd874b30198c082dcc6c5d3c7be55d403611d4a5700cca00949"}}, {0x10, &(0x7f0000000740)=@string={0x10, 0x3, "20fcc5582e68a66eb2facf0a9893"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41b}}, {0xd9, &(0x7f00000007c0)=@string={0xd9, 0x3, "8414181b20f782241be530fa620ccafe6d8af3b172f93a65a6e1339d6518adab3b4d298ba0623ca46ec87d6d88133b734a59d80cf7729eb6346116731141170bfbe539938f98e7cce0fa5b33b5a9c00291a9e7ad0691563f2cd910ecc4adbcb711a10c4b17ecdfd8e05bdd950f7c590433675f62af097be43e92cd21622ac3d0521b52886bb8f759495482be237bc20df37ddd2ecc12d7f021a6b18899388f1f6063c5e42ecc6e795e612f238672158fa186b83640f7e2227853960cb6155f2e20a9109516bd9e2f1422cecf5cb8e227756d1c5a6b9301"}}, {0x87, &(0x7f00000008c0)=@string={0x87, 0x3, "4c6dadd18bee80eaf5890ff75b2df8198ecb0eaa4c3b69d004a4864a0604f2ad54c7cb3155b206792317514371f4dda348ae753d11f2b1268249cb1cbd3f487a96af9171dcf8492aba92088380ea50f46bacec625a4c9edce0d6bac21f1d2f01d427933834b3d27540ba784b634ed025db9f518b22df8aae8b50f0d7951e0bcc8c5fbd9bcd"}}, {0x0, 0x0}]}) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={0x0}) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f0584", 0x27}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40073d0000003d21cd8714600000bc5ebc54bad553eefc04"], 0x0, 0x0, 0x0, 0x0}, 0x0) 684.782455ms ago: executing program 3 (id=1111): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 583.838999ms ago: executing program 3 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0', 0x1) close(r3) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000f00), 0x0) close(0xffffffffffffffff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001600)='usbip-vudc.0', 0xc) 413.526507ms ago: executing program 3 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4, 0x3}]}], {0x14}}, 0x6c}}, 0x0) 0s ago: executing program 3 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x26514}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004081) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) readv(r2, &(0x7f0000000240)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000000)=0xb4d5f59234a458bf, 0x4) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) openat$audio(0xffffff9c, 0x0, 0x6473bbe971804104, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x78, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0xc010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 86.996123][ T10] cfg80211: failed to load regulatory.db [ 88.233967][ T5573] cgroup: Unknown subsys name 'net' [ 88.495796][ T5573] cgroup: Unknown subsys name 'cpuset' [ 88.549504][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.500398][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.790681][ T4900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.795938][ T4900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.798776][ T4900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.821874][ T4900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.823946][ T4900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.025192][ T4900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.037593][ T4900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.044354][ T4900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.059116][ T4900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.059941][ T4900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.210644][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.238287][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.243179][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.255060][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.260559][ T5587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.264205][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.265125][ T5587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.266152][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.266457][ T5587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.278530][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.286291][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.298234][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.303776][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.329370][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.346496][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.900467][ T5587] Bluetooth: hci0: command tx timeout [ 95.139604][ T5587] Bluetooth: hci1: command tx timeout [ 95.388959][ T5587] Bluetooth: hci4: command tx timeout [ 95.458980][ T5587] Bluetooth: hci3: command tx timeout [ 95.458998][ T5598] Bluetooth: hci2: command tx timeout [ 95.546652][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.547872][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.548078][ T5586] bridge_slave_0: entered allmulticast mode [ 95.575183][ T5586] bridge_slave_0: entered promiscuous mode [ 95.631954][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.632133][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.632339][ T5586] bridge_slave_1: entered allmulticast mode [ 95.635978][ T5586] bridge_slave_1: entered promiscuous mode [ 95.788322][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.839819][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.856991][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.857114][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.857274][ T5590] bridge_slave_0: entered allmulticast mode [ 95.862963][ T5590] bridge_slave_0: entered promiscuous mode [ 95.920264][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.920341][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.920466][ T5590] bridge_slave_1: entered allmulticast mode [ 95.922180][ T5590] bridge_slave_1: entered promiscuous mode [ 96.049054][ T5586] team0: Port device team_slave_0 added [ 96.096085][ T5586] team0: Port device team_slave_1 added [ 96.119471][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.178346][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.197190][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.197336][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.197440][ T5593] bridge_slave_0: entered allmulticast mode [ 96.209786][ T5593] bridge_slave_0: entered promiscuous mode [ 96.232469][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.232604][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.232772][ T5595] bridge_slave_0: entered allmulticast mode [ 96.234652][ T5595] bridge_slave_0: entered promiscuous mode [ 96.275923][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.276029][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.276153][ T5593] bridge_slave_1: entered allmulticast mode [ 96.277710][ T5593] bridge_slave_1: entered promiscuous mode [ 96.285055][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.285072][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.285098][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.288017][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.288146][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.288680][ T5595] bridge_slave_1: entered allmulticast mode [ 96.292243][ T5595] bridge_slave_1: entered promiscuous mode [ 96.315279][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.315410][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.320545][ T5594] bridge_slave_0: entered allmulticast mode [ 96.323290][ T5594] bridge_slave_0: entered promiscuous mode [ 96.395874][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.395892][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.395915][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.422637][ T5590] team0: Port device team_slave_0 added [ 96.423140][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.423262][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.423420][ T5594] bridge_slave_1: entered allmulticast mode [ 96.428082][ T5594] bridge_slave_1: entered promiscuous mode [ 96.492818][ T5590] team0: Port device team_slave_1 added [ 96.510785][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.520500][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.556641][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.561033][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.585012][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.629144][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.629161][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.629196][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.632286][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.698149][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.698182][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.698208][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.728086][ T5593] team0: Port device team_slave_0 added [ 96.745115][ T5586] hsr_slave_0: entered promiscuous mode [ 96.746565][ T5586] hsr_slave_1: entered promiscuous mode [ 96.752068][ T5595] team0: Port device team_slave_0 added [ 96.781783][ T5593] team0: Port device team_slave_1 added [ 96.784406][ T5595] team0: Port device team_slave_1 added [ 96.787620][ T5594] team0: Port device team_slave_0 added [ 96.826768][ T5594] team0: Port device team_slave_1 added [ 96.892946][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.892961][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.892976][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.908343][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.908361][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.908384][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.954828][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.954845][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.954868][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.978923][ T5598] Bluetooth: hci0: command tx timeout [ 96.986633][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.986650][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.986682][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.002490][ T5590] hsr_slave_0: entered promiscuous mode [ 97.004211][ T5590] hsr_slave_1: entered promiscuous mode [ 97.005881][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 97.005986][ T5590] Cannot create hsr debugfs directory [ 97.007824][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.007837][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.007860][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.060499][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.060519][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.060543][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.219174][ T5598] Bluetooth: hci1: command tx timeout [ 97.460127][ T5598] Bluetooth: hci4: command tx timeout [ 97.539076][ T5587] Bluetooth: hci2: command tx timeout [ 97.539069][ T5598] Bluetooth: hci3: command tx timeout [ 97.724509][ T5593] hsr_slave_0: entered promiscuous mode [ 97.725374][ T5593] hsr_slave_1: entered promiscuous mode [ 97.726003][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 97.726022][ T5593] Cannot create hsr debugfs directory [ 97.747275][ T5595] hsr_slave_0: entered promiscuous mode [ 97.748642][ T5595] hsr_slave_1: entered promiscuous mode [ 97.749996][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 97.750019][ T5595] Cannot create hsr debugfs directory [ 97.809429][ T5594] hsr_slave_0: entered promiscuous mode [ 97.810387][ T5594] hsr_slave_1: entered promiscuous mode [ 97.811062][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 97.811078][ T5594] Cannot create hsr debugfs directory [ 98.558123][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.590615][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.609458][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.646289][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.656529][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.686008][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.706820][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.745093][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.858281][ T5590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.883603][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.887477][ T5590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.933318][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.958577][ T5590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.994880][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.018683][ T5590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.051910][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.060979][ T5598] Bluetooth: hci0: command tx timeout [ 99.169601][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.203997][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.213542][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.254194][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.262819][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.287490][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.309764][ T5598] Bluetooth: hci1: command tx timeout [ 99.310159][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.351881][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.519853][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.539348][ T5598] Bluetooth: hci4: command tx timeout [ 99.560878][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.576551][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.603005][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.618567][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.620017][ T5598] Bluetooth: hci2: command tx timeout [ 99.629019][ T5598] Bluetooth: hci3: command tx timeout [ 99.685809][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.716878][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.743260][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.858894][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.900342][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.943437][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.956411][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.985579][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.992460][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.012906][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.018762][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.052906][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.088297][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.155059][ T3349] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.156010][ T3349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.173760][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.232802][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.232908][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.304707][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.331543][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.352764][ T3349] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.352901][ T3349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.397509][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.397611][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.476139][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.524791][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.541530][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.541729][ T3260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.592373][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.592615][ T3260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.746758][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.818470][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.818783][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.920679][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.945863][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.946070][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.108220][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.150043][ T5598] Bluetooth: hci0: command tx timeout [ 101.214620][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.214913][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.326072][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.326200][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.379050][ T5598] Bluetooth: hci1: command tx timeout [ 101.620552][ T5598] Bluetooth: hci4: command tx timeout [ 101.699082][ T5598] Bluetooth: hci3: command tx timeout [ 101.709734][ T5587] Bluetooth: hci2: command tx timeout [ 101.896651][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.301412][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.437900][ T5586] veth0_vlan: entered promiscuous mode [ 102.536238][ T5586] veth1_vlan: entered promiscuous mode [ 102.724773][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.788116][ T5590] veth0_vlan: entered promiscuous mode [ 102.857566][ T5586] veth0_macvtap: entered promiscuous mode [ 102.877301][ T5590] veth1_vlan: entered promiscuous mode [ 102.996115][ T5586] veth1_macvtap: entered promiscuous mode [ 103.143654][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.195279][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.197601][ T5593] veth0_vlan: entered promiscuous mode [ 103.216480][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.267640][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.286291][ T5590] veth0_macvtap: entered promiscuous mode [ 103.323709][ T5593] veth1_vlan: entered promiscuous mode [ 103.337915][ T5590] veth1_macvtap: entered promiscuous mode [ 103.587471][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.732669][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.811694][ T5594] veth0_vlan: entered promiscuous mode [ 103.822812][ T5593] veth0_macvtap: entered promiscuous mode [ 103.876068][ T5593] veth1_macvtap: entered promiscuous mode [ 103.897552][ T3306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.897574][ T3306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.952371][ T5594] veth1_vlan: entered promiscuous mode [ 104.101012][ T3349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.101038][ T3349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.226387][ T5595] veth0_vlan: entered promiscuous mode [ 104.346943][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.418265][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.447776][ T3306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.447800][ T3306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.454239][ T5595] veth1_vlan: entered promiscuous mode [ 104.576144][ T5594] veth0_macvtap: entered promiscuous mode [ 104.678481][ T5594] veth1_macvtap: entered promiscuous mode [ 104.688763][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.688788][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.107944][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.176817][ T5595] veth0_macvtap: entered promiscuous mode [ 105.196585][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.406278][ T5595] veth1_macvtap: entered promiscuous mode [ 105.422100][ T3423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.422140][ T3423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.474687][ T5777] usb usb7: usbfs: process 5777 (syz.0.6) did not claim interface 0 before use [ 105.915960][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.962363][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.962388][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.074307][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.153656][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.712702][ T3260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.712742][ T3260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.337280][ T5798] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 112.350699][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.353939][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.353961][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.749133][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.817260][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.715251][ T3260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.715266][ T3260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.315029][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.315047][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.380159][ T3260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.401171][ T3260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.403152][ T3289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.636179][ T5848] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 115.870837][ T3289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.872714][ T3289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.013539][ T3289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.013699][ T3289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.014025][ T3289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.014159][ T3289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.014269][ T3289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.014376][ T3289] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.014608][ T3289] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.290682][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.073599][ T3423] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.074235][ T3423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.075133][ T3423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.427364][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.179854][ T5873] PKCS7: Unknown OID: [4] 0.0 [ 120.179901][ T5873] PKCS7: Only support pkcs7_signedData type [ 121.684007][ T5694] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.913710][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 121.916250][ T5694] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 121.935407][ T5694] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 121.935478][ T5694] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 121.935502][ T5694] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.935527][ T5694] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 121.992899][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.992931][ T5694] usb 3-1: Product: syz [ 121.992947][ T5694] usb 3-1: Manufacturer: syz [ 121.992962][ T5694] usb 3-1: SerialNumber: syz [ 122.857485][ T5694] usb 3-1: can't set config #155, error -71 [ 122.962444][ T5887] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.129526][ T5694] usb 3-1: USB disconnect, device number 2 [ 129.398848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.438852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.069132][ T5701] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.238960][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 130.239874][ T5701] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 130.242406][ T5701] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 130.242457][ T5701] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 130.242484][ T5701] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.242509][ T5701] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 130.245184][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.245207][ T5701] usb 5-1: Product: syz [ 130.245221][ T5701] usb 5-1: Manufacturer: syz [ 130.245235][ T5701] usb 5-1: SerialNumber: syz [ 131.327051][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 131.383058][ T5701] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input5 [ 131.448958][ T5701] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 131.448981][ T5701] (id 0x00) [ 131.660063][ T5701] rc_core: IR keymap rc-imon-pad not found [ 131.660085][ T5701] Registered IR keymap rc-empty [ 131.660166][ T5701] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 131.660185][ T5701] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.717825][ T5701] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 131.766099][ T5701] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input6 [ 131.831339][ T5701] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:2> initialized [ 133.084497][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.084597][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.437247][ T10] usb 5-1: USB disconnect, device number 2 [ 138.638957][ T5714] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 138.985509][ T5714] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 139.010157][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.010196][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.010220][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.010267][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.149795][ T5714] usb 4-1: config 0 descriptor?? [ 140.491525][ T5687] IPVS: starting estimator thread 0... [ 140.589102][ T6107] IPVS: using max 7 ests per chain, 16800 per kthread [ 141.166910][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.207094][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.549201][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x6 [ 141.549248][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 141.549275][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 141.549302][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 141.549327][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 141.549353][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 141.549379][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 141.549404][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 141.549430][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 141.549456][ T5714] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 141.549561][ T5714] acrux 0003:1A34:0802.0001: item fetching failed at offset 37/41 [ 141.557262][ T5714] acrux 0003:1A34:0802.0001: parse failed [ 141.557341][ T5714] acrux 0003:1A34:0802.0001: probe with driver acrux failed with error -22 [ 141.714219][ T5714] usb 4-1: USB disconnect, device number 2 [ 141.863698][ T6127] Zero length message leads to an empty skb [ 146.035541][ T6142] syz.4.91 (6142) used greatest stack depth: 19256 bytes left [ 148.405052][ T5701] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.578989][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 148.580569][ T5701] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.581506][ T5701] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 148.581542][ T5701] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 148.581558][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.581573][ T5701] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 148.581586][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 148.581599][ T5701] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.581624][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.711290][ T5701] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 151.000733][ T5714] usb 5-1: USB disconnect, device number 3 [ 157.521425][ T6303] loop0: detected capacity change from 0 to 3904 [ 158.036170][ T6308] loop0: [ 159.801873][ T5687] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 159.961960][ T5687] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 159.965869][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.965903][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.965925][ T5687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.965970][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.047125][ T5687] usb 4-1: config 0 descriptor?? [ 161.368653][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.170'. [ 161.762505][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.763206][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.068353][ T5687] hid_parser_main: 8 callbacks suppressed [ 162.068378][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x6 [ 162.068414][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 162.068438][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 162.068463][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 162.068487][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 162.068511][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 162.068535][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 162.068561][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 162.068586][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 162.068611][ T5687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 162.068721][ T5687] acrux 0003:1A34:0802.0002: item fetching failed at offset 37/41 [ 162.155951][ T5687] acrux 0003:1A34:0802.0002: parse failed [ 162.156040][ T5687] acrux 0003:1A34:0802.0002: probe with driver acrux failed with error -22 [ 162.463863][ T6381] netlink: 164 bytes leftover after parsing attributes in process `syz.4.174'. [ 164.966603][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'. [ 167.238823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 168.138469][ T6446] 9pnet_fd: p9_fd_create_tcp (6446): problem connecting socket to 127.0.0.1 [ 169.588976][ T36] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 169.773466][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 169.785797][ T36] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 169.787891][ T36] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 169.787928][ T36] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 169.787954][ T36] usb 1-1: config 0 interface 0 has no altsetting 0 [ 169.787988][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.879297][ T36] usb 1-1: config 0 descriptor?? [ 170.566883][ T36] usbhid 1-1:0.0: can't add hid device: -71 [ 170.567010][ T36] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 170.594969][ T36] usb 1-1: USB disconnect, device number 3 [ 170.948963][ T5687] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 171.130532][ T5687] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.135033][ T5687] usb 5-1: not running at top speed; connect to a high speed hub [ 171.135077][ T5687] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 171.182237][ T5687] usb 5-1: config 5 has an invalid interface number: 246 but max is 0 [ 171.182269][ T5687] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 171.182288][ T5687] usb 5-1: config 5 has no interface number 0 [ 171.182339][ T5687] usb 5-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 171.182368][ T5687] usb 5-1: config 5 interface 246 has no altsetting 0 [ 171.185198][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.185225][ T5687] usb 5-1: Product: syz [ 171.185240][ T5687] usb 5-1: Manufacturer: syz [ 171.185255][ T5687] usb 5-1: SerialNumber: syz [ 171.547337][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 171.743394][ T5687] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 171.769724][ T5687] usb 5-1: USB disconnect, device number 4 [ 171.801395][ T56] usb 5-1: Failed to submit usb control message: -71 [ 171.801440][ T56] usb 5-1: unable to send the bmi data to the device: -71 [ 171.801459][ T56] usb 5-1: unable to get target info from device [ 171.801475][ T56] usb 5-1: could not get target info (-71) [ 171.801720][ T56] usb 5-1: could not probe fw (-71) [ 173.522370][ T6548] 9pnet_fd: p9_fd_create_tcp (6548): problem connecting socket to 127.0.0.1 [ 174.520764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 174.672036][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 174.958834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.533535][ T6600] 9pnet_fd: p9_fd_create_tcp (6600): problem connecting socket to 127.0.0.1 [ 180.581736][ T6625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 182.102507][ T6642] Need at least one configuration in g_uac2. [ 182.125753][ T6642] udc usbip-vudc.0: failed to start g_uac2: -22 [ 182.125786][ T6642] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 182.367642][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.282'. [ 182.379277][ T6642] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 184.230625][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.280821][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.433873][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.452724][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.667151][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.307'. [ 186.567695][ T6750] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 186.590233][ T6750] syz_tun: entered promiscuous mode [ 186.721306][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.319'. [ 186.995295][ T6750] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 191.392797][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.333'. [ 191.812228][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.812803][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.000047][ T6810] loop5: detected capacity change from 0 to 4095 [ 192.060557][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.066991][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.177634][ T6786] Buffer I/O error on dev loop5, logical block 511, async page read [ 193.141290][ T6844] binder: 6842:6844 ioctl c0306201 200000000040 returned -22 [ 194.709703][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.710067][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.618261][ T6861] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 195.655304][ T6861] syz_tun: entered promiscuous mode [ 195.706345][ T6861] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 195.880516][ T6866] netlink: 164 bytes leftover after parsing attributes in process `syz.0.352'. [ 196.069011][ T5715] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 196.199016][ T5715] usb 2-1: device descriptor read/64, error -71 [ 196.729171][ T5715] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 196.869073][ T5715] usb 2-1: device descriptor read/64, error -71 [ 196.980961][ T5715] usb usb2-port1: attempt power cycle [ 197.369072][ T5715] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 197.580242][ T5715] usb 2-1: device descriptor read/8, error -71 [ 198.398808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 198.570491][ T5715] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 198.598390][ T5715] usb 2-1: device descriptor read/8, error -71 [ 198.690919][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.371'. [ 198.699400][ T5715] usb usb2-port1: unable to enumerate USB device [ 200.489922][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 201.708823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 201.744924][ T31] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 201.747617][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.747673][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.261116][ T31] as10x_usb: device has been detected [ 202.262609][ T31] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 202.296560][ T31] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 202.440926][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'. [ 203.002391][ T31] as10x_usb: error during firmware upload part1 [ 203.003232][ T31] Registered device Abilis Systems DVB-Titan [ 203.208972][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 203.217836][ T5587] Bluetooth: hci3: adv larger than maximum supported [ 203.257938][ T31] usb 2-1: USB disconnect, device number 6 [ 203.338937][ T10] usb 1-1: device descriptor read/64, error -71 [ 203.375810][ T31] Unregistered device Abilis Systems DVB-Titan [ 203.385721][ T31] as10x_usb: device has been disconnected [ 203.608960][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 203.929089][ T10] usb 1-1: device descriptor read/64, error -71 [ 204.335395][ T10] usb usb1-port1: attempt power cycle [ 204.944726][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 204.969829][ T10] usb 1-1: device descriptor read/8, error -71 [ 205.089970][ T6986] PKCS7: Unknown OID: [4] 0.0 [ 205.090012][ T6986] PKCS7: Only support pkcs7_signedData type [ 205.976394][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 206.029391][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 206.073632][ T6994] loop0: detected capacity change from 0 to 3904 [ 206.178905][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 206.179774][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.182084][ T31] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 206.182115][ T31] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 206.182169][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 206.182197][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 206.182222][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.182268][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.185231][ T6997] ALSA: mixer_oss: invalid OSS volume '' [ 206.186158][ T6997] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 206.198870][ T10] usb 1-1: device not accepting address 7, error -71 [ 206.199289][ T10] usb usb1-port1: unable to enumerate USB device [ 206.343241][ T31] usbtmc 5-1:16.0: bulk endpoints not found [ 208.180722][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.181385][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.320841][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.321542][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.109171][ T7044] ALSA: mixer_oss: invalid OSS volume '' [ 209.110070][ T7044] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 209.336215][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.336900][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.421745][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.435049][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.461777][ T10] usb 5-1: USB disconnect, device number 5 [ 209.979108][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 210.109036][ T10] usb 5-1: device descriptor read/64, error -71 [ 210.235431][ T7081] ALSA: mixer_oss: invalid OSS volume '' [ 210.236363][ T7081] ALSA: mixer_oss: invalid OSS volume '6q.X%!:ZZ(/=ѝ>f' [ 210.368932][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 210.581938][ T10] usb 5-1: device descriptor read/64, error -71 [ 210.702910][ T10] usb usb5-port1: attempt power cycle [ 210.710785][ T5715] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 210.867685][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.868328][ T5715] usb 2-1: not running at top speed; connect to a high speed hub [ 210.868376][ T5715] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 210.884002][ T5715] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 210.884032][ T5715] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 210.884049][ T5715] usb 2-1: config 5 has no interface number 0 [ 210.884094][ T5715] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 210.884119][ T5715] usb 2-1: config 5 interface 246 has no altsetting 0 [ 210.913413][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.913441][ T5715] usb 2-1: Product: syz [ 210.913455][ T5715] usb 2-1: Manufacturer: syz [ 210.913469][ T5715] usb 2-1: SerialNumber: syz [ 211.104500][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 211.130044][ T10] usb 5-1: device descriptor read/8, error -71 [ 211.386006][ T5715] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 211.395825][ T5715] usb 2-1: USB disconnect, device number 7 [ 211.420361][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 211.436940][ T3435] usb 2-1: Failed to submit usb control message: -19 [ 211.436980][ T3435] usb 2-1: unable to send the bmi data to the device: -19 [ 211.436999][ T3435] usb 2-1: unable to get target info from device [ 211.437014][ T3435] usb 2-1: could not get target info (-19) [ 211.451274][ T10] usb 5-1: device descriptor read/8, error -71 [ 211.480982][ T3435] usb 2-1: could not probe fw (-19) [ 211.572493][ T10] usb usb5-port1: unable to enumerate USB device [ 214.967939][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 215.118940][ T5715] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 215.281130][ T5715] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 215.288428][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.288470][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.288483][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.288509][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.369708][ T5715] usb 1-1: config 0 descriptor?? [ 215.431039][ T7158] netlink: 'syz.3.460': attribute type 10 has an invalid length. [ 215.577727][ T7158] syz_tun: entered promiscuous mode [ 216.149659][ T10] IPVS: starting estimator thread 0... [ 216.249007][ T7166] IPVS: using max 13 ests per chain, 31200 per kthread [ 216.257785][ T7158] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 216.516968][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.585640][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.689472][ T5715] hid_parser_main: 8 callbacks suppressed [ 216.689499][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x6 [ 216.689531][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 216.689556][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 216.689583][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 216.689608][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 216.689633][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 216.689659][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 216.689684][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 216.689709][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 216.689734][ T5715] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 216.689837][ T5715] acrux 0003:1A34:0802.0003: item fetching failed at offset 37/41 [ 216.690905][ T5715] acrux 0003:1A34:0802.0003: parse failed [ 216.690983][ T5715] acrux 0003:1A34:0802.0003: probe with driver acrux failed with error -22 [ 216.860460][ T5715] usb 1-1: USB disconnect, device number 8 [ 217.080004][ T7154] Bluetooth: hci0: command 0x0406 tx timeout [ 217.080049][ T7154] Bluetooth: hci4: command 0x0406 tx timeout [ 217.080069][ T7154] Bluetooth: hci2: command 0x0406 tx timeout [ 217.148200][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 217.148211][ T7154] Bluetooth: hci1: command 0x0406 tx timeout [ 217.389002][ T36] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 217.538994][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 217.540011][ T36] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.542407][ T36] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 217.542470][ T36] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 217.542498][ T36] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 217.542524][ T36] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 217.542547][ T36] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 217.542572][ T36] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.542617][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.577480][ T36] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 217.857039][ T7188] Need at least one configuration in g_uac2. [ 217.857192][ T7188] udc usbip-vudc.0: failed to start g_uac2: -22 [ 217.857215][ T7188] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 217.890085][ T7188] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 218.569757][ T5605] Bluetooth: hci3: adv larger than maximum supported [ 219.207274][ T7218] Need at least one configuration in g_uac2. [ 219.276728][ T7218] udc usbip-vudc.0: failed to start g_uac2: -22 [ 219.276752][ T7218] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 219.277569][ T7218] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 220.129378][ T36] usb 2-1: USB disconnect, device number 8 [ 220.960122][ T7259] Need at least one configuration in g_uac2. [ 221.018019][ T7259] udc usbip-vudc.0: failed to start g_uac2: -22 [ 221.018043][ T7259] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 221.096570][ T7259] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 221.443467][ T7267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.504'. [ 222.227174][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.236316][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.377729][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.415816][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.486585][ T7307] binder: 7305:7307 ioctl c0306201 200000000040 returned -22 [ 223.490382][ T7307] binder: 7305:7307 ioctl c0306201 200000000640 returned -22 [ 223.492635][ T7307] binder: 7305:7307 ioctl c0306201 2000000001c0 returned -11 [ 224.688688][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 225.351388][ T7335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.351408][ T7335] IPv6: NLM_F_CREATE should be set when creating new route [ 225.659996][ T7339] Need at least one configuration in g_uac2. [ 225.660154][ T7339] udc usbip-vudc.0: failed to start g_uac2: -22 [ 225.660719][ T7339] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 226.048338][ T7339] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 228.673608][ T7400] Need at least one configuration in g_uac2. [ 228.673712][ T7400] udc usbip-vudc.0: failed to start g_uac2: -22 [ 228.673728][ T7400] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 228.681569][ T7400] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 231.241766][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 232.058904][ T5599] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 232.222957][ T5599] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.224629][ T5599] usb 5-1: not running at top speed; connect to a high speed hub [ 232.224669][ T5599] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 232.227068][ T5599] usb 5-1: config 5 has an invalid interface number: 246 but max is 0 [ 232.227092][ T5599] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 232.227112][ T5599] usb 5-1: config 5 has no interface number 0 [ 232.227163][ T5599] usb 5-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 232.227191][ T5599] usb 5-1: config 5 interface 246 has no altsetting 0 [ 232.272821][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.272840][ T5599] usb 5-1: Product: syz [ 232.272849][ T5599] usb 5-1: Manufacturer: syz [ 232.272857][ T5599] usb 5-1: SerialNumber: syz [ 232.636181][ T5599] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 232.683791][ T5599] usb 5-1: USB disconnect, device number 10 [ 232.781213][ T13] usb 5-1: Failed to submit usb control message: -71 [ 232.781240][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 232.781250][ T13] usb 5-1: unable to get target info from device [ 232.781260][ T13] usb 5-1: could not get target info (-71) [ 232.807084][ T13] usb 5-1: could not probe fw (-71) [ 234.914496][ T7488] Need at least one configuration in g_uac2. [ 234.914658][ T7488] udc usbip-vudc.0: failed to start g_uac2: -22 [ 234.914685][ T7488] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 234.979095][ T7488] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 235.297297][ T7501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.588'. [ 236.956477][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.957121][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.188470][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'. [ 239.294734][ T7566] loop5: detected capacity change from 0 to 4095 [ 240.350936][ T7587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.622'. [ 240.737368][ T7593] Need at least one configuration in g_uac2. [ 240.737526][ T7593] udc usbip-vudc.0: failed to start g_uac2: -22 [ 240.737560][ T7593] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 240.794056][ T7593] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 242.597601][ T7623] Need at least one configuration in g_uac2. [ 242.597899][ T7623] udc usbip-vudc.0: failed to start g_uac2: -22 [ 242.597926][ T7623] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 242.622795][ T7623] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 243.035657][ T7637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'. [ 243.469981][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 244.570693][ T7657] Need at least one configuration in g_uac2. [ 244.570851][ T7657] udc usbip-vudc.0: failed to start g_uac2: -22 [ 244.570877][ T7657] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 244.573672][ T7657] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 245.280502][ T5714] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 245.440272][ T5714] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 245.444108][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.444147][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.444170][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.444216][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.517801][ T5714] usb 1-1: config 0 descriptor?? [ 245.678988][ T5687] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 245.891586][ T5687] usb 5-1: Using ep0 maxpacket: 32 [ 245.894719][ T5687] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 245.897929][ T5687] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 245.897989][ T5687] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 245.898017][ T5687] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.898044][ T5687] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 245.955601][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.955629][ T5687] usb 5-1: Product: syz [ 245.955643][ T5687] usb 5-1: Manufacturer: syz [ 245.955657][ T5687] usb 5-1: SerialNumber: syz [ 246.006956][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 246.036774][ T5687] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input7 [ 246.143590][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.200330][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.359834][ T5687] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 246.359857][ T5687] (id 0x00) [ 246.397087][ T5714] hid_parser_main: 8 callbacks suppressed [ 246.397113][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x6 [ 246.397143][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 246.397168][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 246.397194][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 246.397219][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 246.397244][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 246.397268][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 246.397293][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 246.397319][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 246.397344][ T5714] acrux 0003:1A34:0802.0004: unknown main item tag 0x0 [ 246.397445][ T5714] acrux 0003:1A34:0802.0004: item fetching failed at offset 37/41 [ 246.398597][ T5714] acrux 0003:1A34:0802.0004: parse failed [ 246.398673][ T5714] acrux 0003:1A34:0802.0004: probe with driver acrux failed with error -22 [ 246.598941][ T5687] rc_core: IR keymap rc-imon-pad not found [ 246.598966][ T5687] Registered IR keymap rc-empty [ 246.599058][ T5687] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 246.599078][ T5687] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 246.901995][ T31] usb 1-1: USB disconnect, device number 9 [ 246.919518][ T5687] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 246.935782][ T5687] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input8 [ 247.164956][ T5687] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:11> initialized [ 248.986290][ T5687] usb 5-1: USB disconnect, device number 11 [ 249.533235][ T7785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.533255][ T7785] IPv6: NLM_F_CREATE should be set when creating new route [ 250.065338][ T7792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.705'. [ 255.893673][ T7821] Need at least one configuration in g_uac2. [ 255.893766][ T7821] udc usbip-vudc.0: failed to start g_uac2: -22 [ 255.893782][ T7821] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 255.920848][ T7821] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 255.982602][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982692][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.948347][ T7846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.036156][ T7868] PKCS7: Unknown OID: [4] 0.0 [ 259.036205][ T7868] PKCS7: Only support pkcs7_signedData type [ 260.634732][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 260.848773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 260.868785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 260.878753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 263.658280][ T7925] PKCS7: Unknown OID: [4] 0.0 [ 263.658325][ T7925] PKCS7: Only support pkcs7_signedData type [ 264.992343][ T7940] binder: 7939:7940 ioctl c0306201 200000000040 returned -22 [ 264.994335][ T7940] binder: 7939:7940 ioctl c0306201 200000000640 returned -22 [ 264.994723][ T7940] binder: 7939:7940 ioctl c0306201 2000000001c0 returned -11 [ 268.451157][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.451867][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.243605][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 269.534931][ T8014] loop5: detected capacity change from 0 to 4095 [ 269.794807][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.783'. [ 269.809298][ T6942] Buffer I/O error on dev loop5, logical block 511, async page read [ 272.214196][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 272.519845][ T8049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.519866][ T8049] IPv6: NLM_F_CREATE should be set when creating new route [ 278.087724][ T8100] loop5: detected capacity change from 0 to 4095 [ 278.223130][ T6942] Buffer I/O error on dev loop5, logical block 511, async page read [ 278.525714][ T8106] loop5: detected capacity change from 0 to 4095 [ 279.458598][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.820'. [ 284.738612][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.833'. [ 284.744000][ T8163] netlink: 52 bytes leftover after parsing attributes in process `syz.0.833'. [ 285.340660][ T8171] loop5: detected capacity change from 0 to 4095 [ 285.605901][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.842'. [ 286.659612][ T8205] 9pnet_fd: p9_fd_create_tcp (8205): problem connecting socket to 127.0.0.1 [ 288.296649][ T198] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 288.508916][ T198] usb 2-1: Using ep0 maxpacket: 32 [ 288.509861][ T198] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 288.511356][ T198] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 288.511411][ T198] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 288.511440][ T198] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.511468][ T198] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 288.517332][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.517363][ T198] usb 2-1: Product: syz [ 288.517378][ T198] usb 2-1: Manufacturer: syz [ 288.517394][ T198] usb 2-1: SerialNumber: syz [ 288.917020][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 289.101624][ T198] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input9 [ 289.248020][ T8223] loop5: detected capacity change from 0 to 4095 [ 289.308899][ T198] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 289.308918][ T198] (id 0x00) [ 289.508992][ T198] rc_core: IR keymap rc-imon-pad not found [ 289.509008][ T198] Registered IR keymap rc-empty [ 289.509060][ T198] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 289.509072][ T198] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 289.577532][ T198] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 289.616404][ T198] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input10 [ 289.904942][ T198] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:9> initialized [ 291.502495][ T5714] usb 2-1: USB disconnect, device number 9 [ 291.719297][ T6358] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 292.060822][ T6358] usb 5-1: Using ep0 maxpacket: 32 [ 292.077936][ T6358] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 292.969874][ T6358] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 292.969899][ T6358] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 292.969915][ T6358] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.969936][ T6358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.124259][ T6358] usb 5-1: config 0 descriptor?? [ 293.693783][ T6358] steelseries 0003:1038:1410.0005: item fetching failed at offset 2/6 [ 293.694621][ T6358] steelseries 0003:1038:1410.0005: parse failed [ 293.694743][ T6358] steelseries 0003:1038:1410.0005: probe with driver steelseries failed with error -22 [ 293.829200][ T6358] usb 5-1: USB disconnect, device number 12 [ 294.728368][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.882'. [ 296.479383][ T5701] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 296.631695][ T5701] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 296.633779][ T5701] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 296.633814][ T5701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 296.672677][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.672708][ T5701] usb 2-1: Product: syz [ 296.672723][ T5701] usb 2-1: Manufacturer: syz [ 296.672739][ T5701] usb 2-1: SerialNumber: syz [ 297.204263][ T5701] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.204329][ T5701] usb 2-1: MIDIStreaming interface descriptor not found [ 300.134082][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.896'. [ 300.149002][ T8340] netlink: 52 bytes leftover after parsing attributes in process `syz.0.896'. [ 300.308898][ T5701] usb 2-1: USB disconnect, device number 10 [ 300.431213][ T8345] capability: warning: `syz.1.901' uses 32-bit capabilities (legacy support in use) [ 303.073040][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 303.767541][ T6806] udevd[6806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.000568][ T8369] device-mapper: ioctl: Invalid ioctl structure: name , dev 400020008 [ 304.243481][ T8376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 304.265713][ T8376] netlink: 52 bytes leftover after parsing attributes in process `syz.0.912'. [ 305.189459][ T37] audit: type=1326 audit(1787082971.933:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5fe03ceec9 code=0x7ffc0000 [ 305.189595][ T37] audit: type=1326 audit(1787082971.933:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe03ce0d9 code=0x7ffc0000 [ 305.189705][ T37] audit: type=1326 audit(1787082971.993:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5fe038ae3b code=0x7ffc0000 [ 305.189828][ T37] audit: type=1326 audit(1787082972.073:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe03ce0d9 code=0x7ffc0000 [ 305.189957][ T37] audit: type=1326 audit(1787082972.093:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5fe038a52c code=0x7ffc0000 [ 305.190237][ T37] audit: type=1326 audit(1787082972.093:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5fe038a58e code=0x7ffc0000 [ 305.190378][ T37] audit: type=1326 audit(1787082972.093:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fe03cdd6b code=0x7ffc0000 [ 305.190455][ T37] audit: type=1326 audit(1787082972.103:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f5fe03ce0d9 code=0x7ffc0000 [ 305.190552][ T37] audit: type=1326 audit(1787082972.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe03ce0d9 code=0x7ffc0000 [ 305.191385][ T37] audit: type=1326 audit(1787082972.113:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8388 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe03ce0d9 code=0x7ffc0000 [ 305.912075][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.912833][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.681575][ T8412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.924'. [ 308.367336][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.368121][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.520857][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.521562][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.880739][ T8437] netlink: 'syz.0.931': attribute type 10 has an invalid length. [ 309.507559][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.936'. [ 309.560631][ T8448] netlink: 52 bytes leftover after parsing attributes in process `syz.3.936'. [ 310.045700][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.048662][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.070453][ T8460] netlink: 'syz.1.941': attribute type 10 has an invalid length. [ 310.137254][ T8460] syz_tun: entered promiscuous mode [ 310.790075][ T8460] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 311.700251][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.700833][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.720203][ T8489] binder: 8487:8489 ioctl c0306201 200000000040 returned -22 [ 312.721222][ T8489] binder: 8487:8489 ioctl c0306201 200000000640 returned -22 [ 312.723088][ T8489] binder: 8487:8489 ioctl c0306201 2000000001c0 returned -11 [ 313.162886][ T8498] PKCS7: Unknown OID: [4] 0.0 [ 313.162900][ T8498] PKCS7: Only support pkcs7_signedData type [ 316.535014][ T8554] PKCS7: Unknown OID: [4] 0.0 [ 316.535026][ T8554] PKCS7: Only support pkcs7_signedData type [ 317.383557][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.383608][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.687478][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 317.687498][ T37] audit: type=1326 audit(1787082983.583:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 317.688174][ T37] audit: type=1326 audit(1787082983.603:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 317.688431][ T37] audit: type=1326 audit(1787082983.603:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 317.688609][ T37] audit: type=1326 audit(1787082983.603:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 317.720620][ T37] audit: type=1326 audit(1787082983.603:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 317.734800][ T37] audit: type=1326 audit(1787082983.643:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 317.737645][ T37] audit: type=1326 audit(1787082983.653:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 317.883089][ T37] audit: type=1326 audit(1787082983.793:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 317.883147][ T37] audit: type=1326 audit(1787082983.803:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 317.883295][ T37] audit: type=1326 audit(1787082983.803:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.4.980" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011b0fe0d9 code=0x7ffc0000 [ 318.168981][ T198] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 318.334331][ T198] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 318.369074][ T198] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 318.369099][ T198] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 318.431467][ T198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.431487][ T198] usb 5-1: Product: syz [ 318.431496][ T198] usb 5-1: Manufacturer: syz [ 318.431505][ T198] usb 5-1: SerialNumber: syz [ 318.802978][ T198] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 318.803043][ T198] usb 5-1: MIDIStreaming interface descriptor not found [ 318.815848][ T8588] binder: 8587:8588 ioctl c0306201 200000000040 returned -22 [ 318.821847][ T8588] binder: 8587:8588 ioctl c0306201 200000000640 returned -22 [ 318.822179][ T8588] binder: 8587:8588 ioctl c0306201 2000000001c0 returned -11 [ 319.514348][ T198] usb 5-1: USB disconnect, device number 13 [ 319.688873][ T5701] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 320.412528][ T5701] usb 1-1: Using ep0 maxpacket: 8 [ 320.516669][ T5701] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.736846][ T5701] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 320.736919][ T5701] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 320.736947][ T5701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 320.736973][ T5701] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 320.737000][ T5701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 320.737024][ T5701] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.737071][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.568775][ T5701] usb 1-1: GET_CAPABILITIES returned 0 [ 321.568828][ T5701] usbtmc 1-1:16.0: can't read capabilities [ 321.715561][ T8367] udevd[8367]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.981357][ T5715] usb 1-1: USB disconnect, device number 10 [ 323.079288][ T198] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 323.511654][ T198] usb 1-1: Using ep0 maxpacket: 32 [ 323.868884][ T198] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 323.877619][ T198] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 323.877657][ T198] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 323.877686][ T198] usb 1-1: config 0 interface 0 has no altsetting 0 [ 323.877721][ T198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.915295][ T198] usb 1-1: config 0 descriptor?? [ 324.538283][ T198] usbhid 1-1:0.0: can't add hid device: -71 [ 324.538419][ T198] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 324.570585][ T198] usb 1-1: USB disconnect, device number 11 [ 325.392505][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 328.678834][ T6358] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 328.732517][ T8723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1033'. [ 328.842114][ T6358] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 328.843711][ T6358] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 328.843746][ T6358] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 328.843772][ T6358] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 328.847777][ T6358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.847822][ T6358] usb 1-1: Product: syz [ 328.847838][ T6358] usb 1-1: Manufacturer: syz [ 328.847853][ T6358] usb 1-1: SerialNumber: syz [ 328.953505][ T8712] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 328.953640][ T8712] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 328.958561][ T6358] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 329.141969][ T6358] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 329.470992][ T8733] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 330.031186][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.096261][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.153153][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.163407][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.239866][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.334888][ T8733] cramfs: wrong magic [ 330.546218][ T198] usb 1-1: USB disconnect, device number 12 [ 332.255828][ T198] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 332.436964][ T5605] Bluetooth: hci5: command tx timeout [ 333.028035][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 333.028057][ T37] audit: type=1326 audit(1787082998.943:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.028144][ T198] cyberjack 1-1:1.0: device disconnected [ 333.087756][ T37] audit: type=1326 audit(1787082999.003:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.087814][ T37] audit: type=1326 audit(1787082999.003:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.094814][ T37] audit: type=1326 audit(1787082999.003:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.094870][ T37] audit: type=1326 audit(1787082999.003:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.094913][ T37] audit: type=1326 audit(1787082999.013:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.094953][ T37] audit: type=1326 audit(1787082999.013:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.097459][ T37] audit: type=1326 audit(1787082999.013:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.218322][ T37] audit: type=1326 audit(1787082999.113:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.218378][ T37] audit: type=1326 audit(1787082999.133:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8753 comm="syz.1.1040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6e04a9e0d9 code=0x7ffc0000 [ 333.511198][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.511769][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.678858][ T5701] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 333.840926][ T5701] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 333.847348][ T5701] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 333.847401][ T5701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 333.873533][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.873559][ T5701] usb 2-1: Product: syz [ 333.873574][ T5701] usb 2-1: Manufacturer: syz [ 333.873588][ T5701] usb 2-1: SerialNumber: syz [ 334.171963][ T5701] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.172020][ T5701] usb 2-1: MIDIStreaming interface descriptor not found [ 334.498920][ T5605] Bluetooth: hci5: command tx timeout [ 334.544013][ T8773] loop5: detected capacity change from 0 to 4095 [ 335.125805][ T8777] loop5: detected capacity change from 0 to 4095 [ 335.352239][ T6786] Buffer I/O error on dev loop5, logical block 511, async page read [ 335.498984][ T5701] usb 2-1: USB disconnect, device number 11 [ 335.892895][ T8793] PKCS7: Unknown OID: [4] 0.0 [ 335.892939][ T8793] PKCS7: Only support pkcs7_signedData type [ 336.581420][ T5605] Bluetooth: hci5: command tx timeout [ 337.826104][ T8804] 9pnet_fd: p9_fd_create_tcp (8804): problem connecting socket to 127.0.0.1 [ 337.950014][ T6951] udevd[6951]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.186236][ T5825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.280679][ T8809] loop5: detected capacity change from 0 to 4095 [ 338.659153][ T5605] Bluetooth: hci5: command tx timeout [ 338.737549][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1059'. [ 339.107739][ T5825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.238237][ T8847] trusted_key: encrypted_key: insufficient parameters specified [ 340.357143][ T5825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.609261][ T8856] tmpfs: Unknown parameter 'grpquota_block_har' [ 342.724128][ T5825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.818953][ T8858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1067'. [ 342.874029][ T8859] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1067'. [ 343.412039][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1069'. [ 343.479491][ T8869] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1069'. [ 345.502600][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.512229][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.301476][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.301784][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.302314][ T8734] bridge_slave_0: entered allmulticast mode [ 346.307567][ T8734] bridge_slave_0: entered promiscuous mode [ 346.424260][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.424701][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.431389][ T8734] bridge_slave_1: entered allmulticast mode [ 346.466546][ T8734] bridge_slave_1: entered promiscuous mode [ 346.569752][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 346.869342][ T5825] bridge_slave_1: left allmulticast mode [ 346.877992][ T5825] bridge_slave_1: left promiscuous mode [ 346.914381][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.182645][ T5825] bridge_slave_0: left allmulticast mode [ 347.182684][ T5825] bridge_slave_0: left promiscuous mode [ 347.217157][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.792811][ T8914] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 351.052647][ T5687] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 352.368781][ T5687] usb 2-1: Using ep0 maxpacket: 8 [ 352.385877][ T5687] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 352.403104][ T5687] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 352.403171][ T5687] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 352.403225][ T5687] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 352.403251][ T5687] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 352.403277][ T5687] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 352.403301][ T5687] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.403346][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.658080][ T5687] usb 2-1: usb_control_msg returned -32 [ 352.658113][ T5687] usbtmc 2-1:16.0: can't read capabilities [ 352.759534][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.800014][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.820954][ T5825] bond0 (unregistering): Released all slaves [ 353.091404][ T1663] usb 2-1: USB disconnect, device number 12 [ 353.230671][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.294839][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.377663][ T8734] team0: Port device team_slave_0 added [ 353.403667][ T8734] team0: Port device team_slave_1 added [ 353.488069][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.488089][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.488117][ T8734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.598973][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.598990][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.599014][ T8734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.444868][ T8971] loop5: detected capacity change from 0 to 4095 [ 357.888523][ T8977] loop5: detected capacity change from 0 to 4095 [ 358.269593][ T6942] Buffer I/O error on dev loop5, logical block 511, async page read [ 359.688595][ T8997] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 363.092940][ T8734] hsr_slave_0: entered promiscuous mode [ 363.127002][ T8734] hsr_slave_1: entered promiscuous mode [ 363.128186][ T8734] debugfs: 'hsr0' already exists in 'hsr' [ 363.128214][ T8734] Cannot create hsr debugfs directory [ 363.174973][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 364.744499][ T9015] netlink: 'syz.4.1101': attribute type 10 has an invalid length. [ 364.818914][ T9018] Need at least one configuration in g_uac2. [ 364.819092][ T9018] udc usbip-vudc.0: failed to start g_uac2: -22 [ 364.819119][ T9018] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 364.820274][ T9018] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 366.201851][ T5825] hsr_slave_0: left promiscuous mode [ 366.248940][ T5825] hsr_slave_1: left promiscuous mode [ 366.295758][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.295993][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.368775][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.368804][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.458791][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 366.618803][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 366.619670][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.621187][ T10] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 366.621247][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 366.621274][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 366.621300][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 366.621327][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 366.621352][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.621396][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.636952][ T9052] netlink: 'syz.1.1108': attribute type 10 has an invalid length. [ 368.244770][ T5825] veth1_macvtap: left promiscuous mode [ 368.245107][ T5825] veth0_macvtap: left promiscuous mode [ 368.245468][ T5825] veth1_vlan: left promiscuous mode [ 368.245880][ T5825] veth0_vlan: left promiscuous mode [ 369.097387][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 369.097442][ T10] usbtmc 1-1:16.0: can't read capabilities [ 369.637231][ T9069] Need at least one configuration in g_uac2. [ 369.637321][ T9069] udc usbip-vudc.0: failed to start g_uac2: -22 [ 369.637337][ T9069] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 369.638057][ T9069] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 369.748855][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 369.873407][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 369.919451][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 370.100285][ T10] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 370.101654][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 370.101685][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.101709][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 370.101753][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.112358][ T10] usb 5-1: config 0 descriptor?? [ 370.310942][ T1663] ================================================================== [ 370.311018][ T1663] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb[ 370.311018][ T1663] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 370.311164][ T1663] Read of size 8 at addr ffffc9000e1a9008 by task kworker/1:2/1663 [ 370.311182][ T1663] [ 370.311205][ T1663] CPU: 1 UID: 0 PID: 1663 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 370.311251][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.311264][ T1663] Workqueue: usb_hub_wq hub_event [ 370.311359][ T1663] Call Trace: [ 370.311376][ T1663] [ 370.311411][ T1663] dump_stack_lvl+0xe8/0x150 [ 370.311587][ T1663] print_address_description+0x55/0x1e0 [ 370.311627][ T1663] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 370.311661][ T1663] print_report+0x58/0x70 [ 370.311675][ T1663] kasan_report+0x117/0x150 [ 370.311756][ T1663] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 370.311784][ T1663] __list_del_entry_valid_or_report+0xb5/0x190 [ 370.311810][ T1663] kcov_remote_start+0x295/0x6f0 [ 370.311897][ T1663] hub_event+0x15d/0x4cf0 [ 370.311928][ T1663] ? __lock_acquire+0x683/0x2ce0 [ 370.311993][ T1663] ? register_lock_class+0x31/0x2e0 [ 370.312005][ T1663] ? __lock_acquire+0x683/0x2ce0 [ 370.312015][ T1663] ? rcu_is_watching+0x15/0xb0 [ 370.312064][ T1663] ? trace_hrtimer_start+0x82/0x200 [ 370.312123][ T1663] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.312151][ T1663] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.312172][ T1663] ? __pfx_hub_event+0x10/0x10 [ 370.312187][ T1663] ? process_scheduled_works+0xa20/0x14e0 [ 370.312263][ T1663] ? rcu_is_watching+0x15/0xb0 [ 370.312286][ T1663] ? process_scheduled_works+0xa20/0x14e0 [ 370.312307][ T1663] process_scheduled_works+0xa8e/0x14e0 [ 370.312338][ T1663] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.312353][ T1663] ? assign_work+0x3cf/0x5d0 [ 370.312366][ T1663] worker_thread+0xa47/0xfb0 [ 370.312384][ T1663] ? __kthread_parkme+0x71/0x1f0 [ 370.312434][ T1663] kthread+0x388/0x470 [ 370.312461][ T1663] ? __pfx_worker_thread+0x10/0x10 [ 370.312481][ T1663] ? __pfx_kthread+0x10/0x10 [ 370.312505][ T1663] ret_from_fork+0x514/0xb70 [ 370.312576][ T1663] ? __pfx_ret_from_fork+0x10/0x10 [ 370.312605][ T1663] ? __switch_to+0xc89/0x1420 [ 370.312649][ T1663] ? __pfx_kthread+0x10/0x10 [ 370.312675][ T1663] ret_from_fork_asm+0x1a/0x30 [ 370.312697][ T1663] [ 370.312721][ T1663] [ 370.312726][ T1663] The buggy address belongs to a vmalloc virtual mapping [ 370.312764][ T1663] Memory state around the buggy address: [ 370.312775][ T1663] ffffc9000e1a8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 370.312789][ T1663] ffffc9000e1a8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 370.312802][ T1663] >ffffc9000e1a9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 370.312811][ T1663] ^ [ 370.312822][ T1663] ffffc9000e1a9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 370.312834][ T1663] ffffc9000e1a9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 370.312844][ T1663] ================================================================== [ 370.340787][ T1663] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 370.340810][ T1663] CPU: 1 UID: 0 PID: 1663 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 370.340835][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.340849][ T1663] Workqueue: usb_hub_wq hub_event [ 370.340884][ T1663] Call Trace: [ 370.340892][ T1663] [ 370.340900][ T1663] vpanic+0x56c/0xa60 [ 370.340933][ T1663] ? rcu_is_watching+0x15/0xb0 [ 370.340958][ T1663] ? __pfx_vpanic+0x10/0x10 [ 370.340990][ T1663] panic+0xc5/0xd0 [ 370.341016][ T1663] ? __pfx_panic+0x10/0x10 [ 370.341053][ T1663] ? preempt_schedule_thunk+0x16/0x40 [ 370.341139][ T1663] ? preempt_schedule_thunk+0x16/0x40 [ 370.341162][ T1663] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 370.341189][ T1663] check_panic_on_warn+0x89/0xb0 [ 370.341262][ T1663] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 370.341288][ T1663] end_report+0x73/0x170 [ 370.341307][ T1663] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 370.341331][ T1663] kasan_report+0x128/0x150 [ 370.341354][ T1663] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 370.341383][ T1663] __list_del_entry_valid_or_report+0xb5/0x190 [ 370.341411][ T1663] kcov_remote_start+0x295/0x6f0 [ 370.341443][ T1663] hub_event+0x15d/0x4cf0 [ 370.341474][ T1663] ? __lock_acquire+0x683/0x2ce0 [ 370.341496][ T1663] ? register_lock_class+0x31/0x2e0 [ 370.341516][ T1663] ? __lock_acquire+0x683/0x2ce0 [ 370.341533][ T1663] ? rcu_is_watching+0x15/0xb0 [ 370.341554][ T1663] ? trace_hrtimer_start+0x82/0x200 [ 370.341585][ T1663] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.341615][ T1663] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.341643][ T1663] ? __pfx_hub_event+0x10/0x10 [ 370.341668][ T1663] ? process_scheduled_works+0xa20/0x14e0 [ 370.341691][ T1663] ? rcu_is_watching+0x15/0xb0 [ 370.341715][ T1663] ? process_scheduled_works+0xa20/0x14e0 [ 370.341737][ T1663] process_scheduled_works+0xa8e/0x14e0 [ 370.341772][ T1663] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.341797][ T1663] ? assign_work+0x3cf/0x5d0 [ 370.341821][ T1663] worker_thread+0xa47/0xfb0 [ 370.341851][ T1663] ? __kthread_parkme+0x71/0x1f0 [ 370.341880][ T1663] kthread+0x388/0x470 [ 370.341908][ T1663] ? __pfx_worker_thread+0x10/0x10 [ 370.341930][ T1663] ? __pfx_kthread+0x10/0x10 [ 370.341959][ T1663] ret_from_fork+0x514/0xb70 [ 370.341991][ T1663] ? __pfx_ret_from_fork+0x10/0x10 [ 370.342028][ T1663] ? __switch_to+0xc89/0x1420 [ 370.342055][ T1663] ? __pfx_kthread+0x10/0x10 [ 370.342084][ T1663] ret_from_fork_asm+0x1a/0x30 [ 370.342122][ T1663] [ 370.342283][ T1663] Kernel Offset: disabled