last executing test programs: 6m44.53453359s ago: executing program 1 (id=639): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f00000001c0)={0x0}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x2, 0x13, 0x2, 0x1, 0x4000, 0x3, 0x0}) r1 = socket$kcm(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba74fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d4820784cebcb9a4f187f7a4e98f09cdc2649f32725badbd5a624e", 0x67}], 0x1}, 0x24008013) 6m42.789788923s ago: executing program 1 (id=647): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0x0) keyctl$update(0x2, r3, &(0x7f0000000300)="0dd881db848a2c26388200159ad64facbe6f9ab12bce9da8ccda02a7712ae7235d8d8e5216c192b74f8be30f22d3bfbbaa434503bbdda16bf1ec5efab19351ce1604e1992cd0fd012053898661a434fa312241ff39ac2de3fcd61f1cf6028da0adce91bf464542b06ebf35c0ffce96a6f26c30cfa1af0cda59a4fcc024be659dda06c4a2d697674d669a3659e35beb69f8e28a1bf30c6b166a77b0bbf5821280e893236d5dadd2a13c1ea07d36d73f352e177e776f4d62e4026fd748490d4d961d5e6699fb7d19aea87dc6ed7524afae1cb0e2ff6f4853cab437d6975dcbed31196a73101356e1", 0xe7) 6m28.647065114s ago: executing program 1 (id=689): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x12d8, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @win={{0x81, 0x4, 0x5, 0x7ff}, 0x4, 0x6, &(0x7f0000000340)={{0x4, 0x80000001, 0x4, 0x8001}}, 0x80000001, 0x0, 0x4}}) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m27.724377319s ago: executing program 1 (id=693): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 6m27.467303416s ago: executing program 2 (id=696): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x8004745a, 0x0) 6m27.127661725s ago: executing program 2 (id=698): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f00000001c0)={0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x2, 0x13, 0x2, 0x1, 0x4000, 0x3, 0x0}) r2 = socket$kcm(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba74fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d4820784cebcb9a4f187f7a4e98f09cdc2649f32725badbd5a624e", 0x67}], 0x1}, 0x24008013) 6m26.966211881s ago: executing program 1 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000280)=0x7f, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) mkdirat(r3, &(0x7f0000000180)='./file1\x00', 0x1c5) 6m24.674705929s ago: executing program 2 (id=705): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 6m24.440210291s ago: executing program 2 (id=706): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m24.274916903s ago: executing program 2 (id=707): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x3210, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @win={{0x81, 0x4, 0x5, 0x7ff}, 0x4, 0x6, 0x0, 0x80000001, 0x0, 0x4}}) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m23.624833837s ago: executing program 1 (id=711): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 6m23.499724223s ago: executing program 2 (id=713): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0x0) keyctl$update(0x2, r3, &(0x7f0000000300)="0dd881db848a2c26388200159ad64facbe6f9ab12bce9da8ccda02a7712ae7235d8d8e5216c192b74f8be30f22d3bfbbaa434503bbdda16bf1ec5efab19351ce1604e1992cd0fd012053898661a434fa312241ff39ac2de3fcd61f1cf6028da0adce91bf464542b06ebf35c0ffce96a6f26c30cfa1af0cda59a4fcc024be659dda06c4a2d697674d669a3659e35beb69f8e28a1bf30c6b166a77b0bbf5821280e893236d5dadd2a13c1ea07d36d73f352e177e776f4d62e4026fd748490d4d961d5e6699fb7d19aea87dc6ed7524afae1cb0e2ff6f4853cab437d6975dcbed31196a73101356e1", 0xe7) 6m8.259277616s ago: executing program 32 (id=711): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 6m7.815743825s ago: executing program 33 (id=713): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0x0) keyctl$update(0x2, r3, &(0x7f0000000300)="0dd881db848a2c26388200159ad64facbe6f9ab12bce9da8ccda02a7712ae7235d8d8e5216c192b74f8be30f22d3bfbbaa434503bbdda16bf1ec5efab19351ce1604e1992cd0fd012053898661a434fa312241ff39ac2de3fcd61f1cf6028da0adce91bf464542b06ebf35c0ffce96a6f26c30cfa1af0cda59a4fcc024be659dda06c4a2d697674d669a3659e35beb69f8e28a1bf30c6b166a77b0bbf5821280e893236d5dadd2a13c1ea07d36d73f352e177e776f4d62e4026fd748490d4d961d5e6699fb7d19aea87dc6ed7524afae1cb0e2ff6f4853cab437d6975dcbed31196a73101356e1", 0xe7) 1m52.398734514s ago: executing program 6 (id=1223): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000040)=""/36, 0x26, 0x24, 0x1, 0x8000}, 0x28) timer_create(0x9, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xed, 0x0, 0x4, 0x0, 0x1, 0x6}) 1m47.080407139s ago: executing program 6 (id=1227): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m44.862753795s ago: executing program 4 (id=1232): syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000140)="b48e", 0x2) 1m42.68589035s ago: executing program 6 (id=1235): syz_open_dev$video4linux(0x0, 0x40, 0x2000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 1m41.771100818s ago: executing program 4 (id=1236): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884", 0x2c}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a", 0xab}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m37.942048057s ago: executing program 4 (id=1242): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x80) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000140), 0x0, 0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) writev(r3, &(0x7f0000000000)=[{0x0}], 0x1) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r5, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m37.605162808s ago: executing program 6 (id=1244): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x8004745a, 0x0) 1m36.114580005s ago: executing program 4 (id=1246): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$uac1(0x3, 0xf9, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x48, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x80, 0xebbdd4baa375a1ba, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x35}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x3, 0x4, [0x9, 0x7, 0x4, 0x2], 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x5, 0x3, 0x3}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x1, 0x2, [0x4, 0x3], 0x3}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x1, 0xed, "04"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x7f, 0x6a, 0xbe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5f, 0x8000, 0x0, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xfffb, 0xae, 0xf0}, @as_header={0x7, 0x24, 0x1, 0x81, 0x8, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x79, 0x9, {0x7, 0x25, 0x1, 0xc, 0xc, 0xff01}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0xe1, 0x3, 0x40, "3b8435daa802c05caf"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x80, 0x8d, "c9cddb41d1"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0xf3, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x8, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0xf, 0x8, {0x7, 0x25, 0x1, 0xc, 0xd}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0xfb, 0x1, 0x7, 0xff, 0x3}, 0x1e, &(0x7f0000000380)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0x3, 0x5, 0xd, 0x1d}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x1, 0xc, 0x6, 0x4}]}, 0x6, [{0xbf, &(0x7f0000000400)=@string={0xbf, 0x3, "e1cf25374cd83b83bb7d349fda20230fabf5b3d9c2fef5e44a5dc55c9c0dc623e277d3098b6cc4c79ae54c99df024bfe8f520302e71bb7b976b065b39d12841f4b2b8164014e029cb8c3ea2fe9b539825f37a730b48d6bc228d32cd4148709be2f3a0f770df6ad4f47ab2d49a059699b7e81a8db992408c3ab88d0b54f43543340036bb1dba487833a89b9945f5ded6057aea77dea7e420b0b86846fc45d7701b70fbd2f270875fc71def31846ef4c1deff4778a61abb8a707e01a8eca"}}, {0xda, &(0x7f0000000580)=@string={0xda, 0x3, "a3520bda7ac46a69155766f9c026a1dca4e240fb31ce483e0d993fd124fea48352a70007ff7cddefdb5a9e2057b63fb89f5cb09a9178e3112dfd21a988f470b222549962e654c4a0a956a384bfcd7689f30aca92ca56087277f63dd32d7017970fee1d0179b65bfcade287beb97459e26067db187537bf74302f644215a1c9aac962c565501463e60452bf29cf5c9a53371c35eeb60438d8f8b36e5c85dbed297d3b5837776b06feac09077d1647666d2ec05e24e649d7f331d343093c857bc10280269ce1f96ef6127c317e1c1f9605d7cf98f7457fa929"}}, {0xfb, &(0x7f0000000680)=@string={0xfb, 0x3, "1944d1132d2d1946c68befe86689f1a92084e61afe11b224bc26ff3202c746c3cf04726d09c132a512f0256c21344717392653df9ff03bb2dfd8406cd5ac454a6df8dc73d50440f9873e7e7f660f85e1ce15d36357ee82a10d09166691aee5bf51bcb9c4c0246f9c5bc49d153aee6b70927ca68a4f9fd6742a4a231240d5a0c08c9f03edcb7744fe2cde610da20a02d50e3539e9492d2f5b553c9ef981a48acf154444beb1016702555fd36f863ef82b94f6cd5af8589555a71318f1bc12c1e80c843e69796f680e2a3ac0b50d988e8f7f9586e2dc56fd572d5cb663c308a614433a2ade41384bcbe8ade4bc3fcab345543b14cdc504674254"}}, {0x7c, &(0x7f00000007c0)=@string={0x7c, 0x3, "c51944033c6ac1863cd0e7fae1376d1406694a239ba309ba5ee2a6b189b3c3153b9d78b3dfb3212a751ea8d10b6eaa604b679f2d6a82f315e55a57aed59cad3cd7838b6c6c66564b51cbdf3a6212c9266a0ba237cd508a1a53eebf3c92490403d6d4e359cfcde22087168a16097bf559aaf5d40c6facae3c4a86"}}, {0x73, &(0x7f0000000840)=@string={0x73, 0x3, "7d30c8b878819e324adc5a7a513894b4396aa6cf60e62d7ca8cf0c7275cd751c6fa6e2db26d4b3b98c904a352fd8332c7a5420c5e18655fce31b619bf87b3870016da7e7812004a8f0ae92bb7ca96bb3c248609780b6830e32734302336432ac37ac4b6bbcff972d96d1fa58760d885963"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x4ff}}]}) syz_usb_ep_write(r1, 0x6, 0x35, &(0x7f0000000a40)="2114eca40cc9e61ee5dd308a69b857b88174711beee9a19d8fa2debc2b86ec32ba2f208363ef2511c5214412955a12b8875fcc1db8") syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x6a, 0xe5, 0xd5, 0x20, 0x2c42, 0x16f8, 0x8b70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x33, 0x18, 0x80, 0x5, "", [{{0x9, 0x4, 0xd0, 0x8, 0x0, 0x5b, 0x9b, 0x42, 0x40}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000001200)={0x2c, 0x0, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x5}, 0x0}) syz_usb_connect(0x2, 0x815, &(0x7f0000001b40)={{0x12, 0x1, 0x300, 0x28, 0xd2, 0x43, 0x20, 0x5c6, 0x9047, 0x33cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x803, 0x2, 0xc, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x3, 0x6, 0xc, 0x63, 0x23, 0xd6, 0x10, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, 'PU`K'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x26d, 0x4, 0x7}, {0x6, 0x24, 0x1a, 0x3ff, 0x20}, [@country_functional={0xe, 0x24, 0x7, 0x5, 0x7f, [0x7f, 0xffff, 0x8, 0x1]}, @network_terminal={0x7, 0x24, 0xa, 0xb3, 0x5, 0xfd, 0x6}, @mdlm_detail={0x66, 0x24, 0x13, 0x7, "1d8515de14971cb2213b0881c24994c3d0da1c4e83a7bb71a8c67d18bce9fd73d122dd8d774fe66164ee2dfa88b80541db34e00c596b90d8df12473847558cdb43537b782ef1d571163dcea244334fd867a917da739f5bf61d22a1c0ae94a66e8e3b"}]}], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0xc, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x8}, @generic={0x8d, 0xb, "27d8b6853e69cdcac144c91c8899b769036b5eb2d49ec7a0c2691c29625987bd9f4864cdcea9cc73ba75f67b4f281798b848cfe6679d03d0864c2e64709b6ba4ae5ee8247ad52fe7b16f821795ac31d8a4b4e569e92ee9718e7772e1741b6db09c0b5d5d40a29ebd4cba810302f7c97deb34fb79ba0d5042715c8dad37e7b5703ae5deed24713ec0c0f4b8"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xf, 0x6, 0x5, [@generic={0x1f, 0x30, "2e6ca85a30030f78ffd71636f86a9ce42b1cad6b8e6767d4f76832423d"}, @generic={0xc2, 0xd, "f5a70ded3762e4ec0fe5616c994a3095ef4f0991d3f9130ef37fc4bbd18477b0831d479659d575066c073000ca7e0ba3ad9d50a9529e30985524dbc995ee422acbcb22a1e86c19905103272ed8bc8c33bb70c0e67ffc97beb18433d0961a41d026d31b6cd3eaa62ecb0cd36cf6f7299190b7f085a43175ad0f880e9b4323f45997e7f9c93e7e9df66fd539c40cfcf805a08820a2fed2d6683205304f12ece6dc7ca61b37983166c4e411285f4e25ed6bb1110bbda819b29e0bece9a1a72a2403"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x3, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x8}, @generic={0xc8, 0x10, "59bc62ef8cfda90e761df8fe957280bcca142dee637a12a53767881452420a616d6492943de1ab61bc25cef36416c7a2995143cbdc3dc863b095324903468b2c2aef4871b15800c87bbce86d21f7bd88b6385211c3fc5042bd61945bdf7e260bc46021171f53006c8237704dc6f63f411a86ac12853a9eabeaf8e8946c2460fa95ef438c8e4d45f4deca39ea682301c23dbe64b6a296b23812edeb2462dba4b440d586f0bda6ce5823969776ccbab79a44c4a121f1667fe2d647fba7d49027caa2511bfb3aa7"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x1, 0x9, 0x30, [@generic={0x10, 0x2, "27e6c5db155aff231965ad7af2c9"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x3, 0x3, 0x9, [@generic={0xf7, 0xb1aade053c536048, "4cf73b492218f2e11fa11826d24db2f99902fc5f0d70f8a5a8c943a3f274c0ce4d795e65b1b1199491c33fd9e49a3eb420e6ca16feae8a7d5d453f4826e03c52a3c300f42aaebcfa1469b3eb19660e6001fc2b1f4b6df0c537ce436b5aafa418f228e95feb3003a83340edde2c7ddd4a03a5038056662c8d08e1059e0faf428a16151afd1e67d770b0956d6fb93e8d0aa7c9680ce6fb87c018e00df4db0daeade21a689eccbab95a5a41a19f6c1cc6b7b21f88a52703b25e175a0d0b0f10b1e63c0cf0fe958b7bc7e9fd9637a330b398884ce394fdc31a9e7d0b15bf172b9ff96c2782688a9be6a3da5d69917e8023be9c084c3150"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x2, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x94, 0x5}]}}, {{0x9, 0x5, 0x1, 0x4, 0x50, 0x80, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x38}, @generic={0xf8, 0x21, "34be5f394b3b2c2feb185af2f0a4f245def4f89a3371c7fa3ddf1c64df19a501ef516da41e71f498232a2c3791c8b5c06f25c0c47af5905e4c28150e6d2a66489287f8a69677868cfec750a99ee6d0eee561fb91f19d87aba6ea4071c3cefca4bd48239fd2616ecca34acb504edaba3d05fc534a2ffe189e4c9707df3f9efd7c3ff902e6f513fc138f553d37bfd69811aa26aa33aafd0c5b8917fab9825a518f047f121438ba46fffaf8c3a76ec18725b35e162e60df86fb4852eb1bc00b7aed0e909292f8f95f34612f28e352aad9f9c5a18aec41508653c63bc3db1c425f4f2d66c91afd3ab3b12597c46b610b51153d3fdd649c15"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x2, 0x7, 0x4, [@generic={0x52, 0x21, "04acebb6307ed6df1ca91980fd88c6a9c75c7aaa1f61cbe22ca310681f651f46df2441a145b3ce267d85c2c1a615dbcb3ced4ddcb096c1f8369feace80d671bc016f84e98bc4fd6bc2abff36f51dde11"}, @generic={0x5f, 0xb, "00d33ab4ec5e8d347bbb7ce6bb49737b9306fb14970bfe9ad35820c04d93d889eda7e5005db2c8cd49b097796075042e71de5c5332a3345f3b761113906661a0b6664e2029b9db8a75bfaca405f82a5566f79e7a437483be63f16827d5"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x1, 0x8, 0x0, [@generic={0x52, 0x2, "68f96f7390c668bf8413f0124c212c744aa84f0a3adabb1f324c86d451cfead84ab1761f54b6bc1191cd44855524378d9578c28b540e611a84a0ecdba36c076d01c8f0785638fc391f82216708c753d9"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xf8, 0x4, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0xb, 0x4, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xa}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x0, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0xa}]}}]}}, {{0x9, 0x4, 0xeb, 0x58, 0x7, 0x45, 0x30, 0x59, 0xc, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x40, 0x8, 0x7}, [@mdlm_detail={0x8b, 0x24, 0x13, 0x1, "acecc791e80c83ab4a0d68ba7dd697810da85227a9be7d6a1a60b6688537a1955d49d7e6da4409184e15f073c1f628d800fe30523702aecca494b4e1bf64c7f7e6cb569b68920a7691ecae5fb7468cc814186817fb745e6d94cab6bd56179dc256b9c1bc94bc05e7de0b909bdb5c828a42f72525bf0d052494c6d891c63602ab91a7b2b0bf9b7e"}]}, @hid_hid={0x9, 0x21, 0x5, 0xc4, 0x1, {0x22, 0x1c2}}], [{{0x9, 0x5, 0xd, 0x4, 0x0, 0xc2, 0x3, 0x7, [@generic={0x4e, 0x30, "da4247b91d112a39c517b8ef1c96e8ff024d1d89247cfe0a240d1c29d7e1d3abcad0d2bd912da4c5bea9927c9474e6037f9afddbf9320195dcc57e5c3bf0a5f8f34fdefc595d806f3cc73649"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x7, 0xa, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x2, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xeb, 0x40}]}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x4, 0xfe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8dfa}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x80, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2dd}]}}, {{0x9, 0x5, 0x874dbbb984948e14, 0x2, 0x400, 0x9, 0x9, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x10, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}]}}]}}]}}, &(0x7f0000002600)={0xa, &(0x7f0000002380)={0xa, 0x6, 0x250, 0xfb, 0x5, 0x2, 0x40, 0xd}, 0x42, &(0x7f00000023c0)={0x5, 0xf, 0x42, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x2, 0x7f}, @generic={0x14, 0x10, 0x4, "089b120caaae84a38875cf8c475236899d"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0xd819, 0x7, 0x8, [0xff00, 0xc0, 0xff0000, 0x3f00]}]}, 0x5, [{0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x2409}}, {0x19, &(0x7f0000002480)=@string={0x19, 0x3, "b02ddec011b0e8bf8bf802d79cea7694ce2a35b01312a5"}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x83, &(0x7f0000002500)=@string={0x83, 0x3, "0c1d0a196589fbc7565195f391020a2debd2f2a0571a4a5a7429a9ab1850f437f01ca115da6e869627f50486a31e0de47421122841ea982d980dbfbf1bf87ddd2f72331b2122607c344cc5de13da8e76be14c6c1769c604c6ab7335c71c73a3c2b1c24d0a52aef3fae2cdc1f597e54e8fadaae2aee9176a942faff5f10cf541ff4"}}, {0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b20bbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m35.077578961s ago: executing program 6 (id=1248): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e26, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xf}, 0x1c) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1m27.712632423s ago: executing program 4 (id=1252): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 1m27.712237645s ago: executing program 6 (id=1254): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x3210, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @win={{0x81, 0x4, 0x5, 0x7ff}, 0x4, 0x6, &(0x7f0000000340)={{0x4, 0x80000001, 0x4, 0x8001}}, 0x80000001, 0x0, 0x4}}) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m27.69985808s ago: executing program 3 (id=1255): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x2000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) read(r0, 0x0, 0x21) read(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102400, 0x19000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000026000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc89f, 0xf000, 0x3, 0x1d4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) io_uring_enter(r5, 0x4095, 0x7721, 0x16, 0x0, 0x0) 1m25.625938954s ago: executing program 4 (id=1258): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000080)=ANY=[]) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/108]}, 0xe4) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0xfffffffe, @empty, 0x8}, 0xffffffffffffffbd) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000480)="0b3137313acc1fdc97e4ba2e6cfb144ccf654bd5f96c771fbf4be5aa981db1b147b202ae3919a06d21c128963e20413dfc9549cccec1171aec62e95a76e75951d51d68ab506f3667731376854306573fad6264e7781c6001740d273d53cd1718e1e358cf4ef2da42bcda08fd3dfed6f2651ebdc28dda6ffc540c3c24fd127008c1ef7a6d666862e39db7d0d29d88c963ce4c9197274c88ea44a410c369d3867aff7e5e25dd4b4a1612", 0xa9, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r5}) keyctl$search(0xa, r5, 0x0, &(0x7f00000002c0)={'syz', 0x0}, r5) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xfffffffd) listen(r4, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1m24.09444376s ago: executing program 3 (id=1259): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 1m20.741476631s ago: executing program 3 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) 1m18.651084235s ago: executing program 3 (id=1265): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$uac1(0x3, 0xf9, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x48, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x80, 0xebbdd4baa375a1ba, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x35}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x3, 0x4, [0x9, 0x7, 0x4, 0x2], 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x5, 0x3, 0x3}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x1, 0x2, [0x4, 0x3], 0x3}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x1, 0xed, "04"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x7f, 0x6a, 0xbe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5f, 0x8000, 0x0, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xfffb, 0xae, 0xf0}, @as_header={0x7, 0x24, 0x1, 0x81, 0x8, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x79, 0x9, {0x7, 0x25, 0x1, 0xc, 0xc, 0xff01}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0xe1, 0x3, 0x40, "3b8435daa802c05caf"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x80, 0x8d, "c9cddb41d1"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0xf3, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x8, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0xf, 0x8, {0x7, 0x25, 0x1, 0xc, 0xd}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0xfb, 0x1, 0x7, 0xff, 0x3}, 0x1e, &(0x7f0000000380)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0x3, 0x5, 0xd, 0x1d}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x1, 0xc, 0x6, 0x4}]}, 0x6, [{0xbf, &(0x7f0000000400)=@string={0xbf, 0x3, "e1cf25374cd83b83bb7d349fda20230fabf5b3d9c2fef5e44a5dc55c9c0dc623e277d3098b6cc4c79ae54c99df024bfe8f520302e71bb7b976b065b39d12841f4b2b8164014e029cb8c3ea2fe9b539825f37a730b48d6bc228d32cd4148709be2f3a0f770df6ad4f47ab2d49a059699b7e81a8db992408c3ab88d0b54f43543340036bb1dba487833a89b9945f5ded6057aea77dea7e420b0b86846fc45d7701b70fbd2f270875fc71def31846ef4c1deff4778a61abb8a707e01a8eca"}}, {0xda, &(0x7f0000000580)=@string={0xda, 0x3, "a3520bda7ac46a69155766f9c026a1dca4e240fb31ce483e0d993fd124fea48352a70007ff7cddefdb5a9e2057b63fb89f5cb09a9178e3112dfd21a988f470b222549962e654c4a0a956a384bfcd7689f30aca92ca56087277f63dd32d7017970fee1d0179b65bfcade287beb97459e26067db187537bf74302f644215a1c9aac962c565501463e60452bf29cf5c9a53371c35eeb60438d8f8b36e5c85dbed297d3b5837776b06feac09077d1647666d2ec05e24e649d7f331d343093c857bc10280269ce1f96ef6127c317e1c1f9605d7cf98f7457fa929"}}, {0xfb, &(0x7f0000000680)=@string={0xfb, 0x3, "1944d1132d2d1946c68befe86689f1a92084e61afe11b224bc26ff3202c746c3cf04726d09c132a512f0256c21344717392653df9ff03bb2dfd8406cd5ac454a6df8dc73d50440f9873e7e7f660f85e1ce15d36357ee82a10d09166691aee5bf51bcb9c4c0246f9c5bc49d153aee6b70927ca68a4f9fd6742a4a231240d5a0c08c9f03edcb7744fe2cde610da20a02d50e3539e9492d2f5b553c9ef981a48acf154444beb1016702555fd36f863ef82b94f6cd5af8589555a71318f1bc12c1e80c843e69796f680e2a3ac0b50d988e8f7f9586e2dc56fd572d5cb663c308a614433a2ade41384bcbe8ade4bc3fcab345543b14cdc504674254"}}, {0x7c, &(0x7f00000007c0)=@string={0x7c, 0x3, "c51944033c6ac1863cd0e7fae1376d1406694a239ba309ba5ee2a6b189b3c3153b9d78b3dfb3212a751ea8d10b6eaa604b679f2d6a82f315e55a57aed59cad3cd7838b6c6c66564b51cbdf3a6212c9266a0ba237cd508a1a53eebf3c92490403d6d4e359cfcde22087168a16097bf559aaf5d40c6facae3c4a86"}}, {0x73, &(0x7f0000000840)=@string={0x73, 0x3, "7d30c8b878819e324adc5a7a513894b4396aa6cf60e62d7ca8cf0c7275cd751c6fa6e2db26d4b3b98c904a352fd8332c7a5420c5e18655fce31b619bf87b3870016da7e7812004a8f0ae92bb7ca96bb3c248609780b6830e32734302336432ac37ac4b6bbcff972d96d1fa58760d885963"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x4ff}}]}) syz_usb_ep_write(r1, 0x6, 0x35, &(0x7f0000000a40)="2114eca40cc9e61ee5dd308a69b857b88174711beee9a19d8fa2debc2b86ec32ba2f208363ef2511c5214412955a12b8875fcc1db8") syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x6a, 0xe5, 0xd5, 0x20, 0x2c42, 0x16f8, 0x8b70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x33, 0x18, 0x80, 0x5, "", [{{0x9, 0x4, 0xd0, 0x8, 0x0, 0x5b, 0x9b, 0x42, 0x40}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000001200)={0x2c, 0x0, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x5}, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000027c0)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x6a, {0x6a, 0x4, "ee2f7c8dd6144bc5991ff648bfedafce827e3defc9624576f7f436d2114bd05c8d80ab72a15e2b8c3f57bd5d1dd409b5b7d8ff762da3b07d5e942e05f01ce4fbdec85231e2ad42091fb2386ab68d14208bfeb661f432f0a0533dba7a2c5562d3a75dae3ee89f3409"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f00000029c0)={0x34, &(0x7f0000002800)={0x40, 0x15, 0x4e, "e4bf4d8f6ffa7eb1f30900cee5e47f5cb6bbed57262a889859e17c0704bc7f947809624f3f99a94bcedfa75793bdd86d55581204521c4a5bb1bdac8dc3f855690e8b2ff1a5714df6ba587dce5172"}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0x45}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000002900)={0xc0, 0xa1, 0x4, 0x7f}, &(0x7f0000002940)={0x40, 0xa0, 0x4, 0x100}, &(0x7f0000002980)={0xc0, 0xa2, 0x2f, "5e5c2c1ff199b5991481c8f79808f0b6402aa3e63314b1fa638fdbc899d5aba0de45984323657982af2859b138a664"}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b20bbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m14.95172421s ago: executing program 3 (id=1270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x840) 1m13.815937529s ago: executing program 3 (id=1271): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0xffffff63) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea66", 0x29, 0x840, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d3427", 0x10}, {0x0}], 0x4, &(0x7f00000014c0)}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m13.165860161s ago: executing program 34 (id=1254): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x3210, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @win={{0x81, 0x4, 0x5, 0x7ff}, 0x4, 0x6, &(0x7f0000000340)={{0x4, 0x80000001, 0x4, 0x8001}}, 0x80000001, 0x0, 0x4}}) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m9.490725318s ago: executing program 35 (id=1258): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000080)=ANY=[]) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/108]}, 0xe4) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0xfffffffe, @empty, 0x8}, 0xffffffffffffffbd) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000480)="0b3137313acc1fdc97e4ba2e6cfb144ccf654bd5f96c771fbf4be5aa981db1b147b202ae3919a06d21c128963e20413dfc9549cccec1171aec62e95a76e75951d51d68ab506f3667731376854306573fad6264e7781c6001740d273d53cd1718e1e358cf4ef2da42bcda08fd3dfed6f2651ebdc28dda6ffc540c3c24fd127008c1ef7a6d666862e39db7d0d29d88c963ce4c9197274c88ea44a410c369d3867aff7e5e25dd4b4a1612", 0xa9, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r5}) keyctl$search(0xa, r5, 0x0, &(0x7f00000002c0)={'syz', 0x0}, r5) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xfffffffd) listen(r4, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 58.482496205s ago: executing program 36 (id=1271): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0xffffff63) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea66", 0x29, 0x840, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d3427", 0x10}, {0x0}], 0x4, &(0x7f00000014c0)}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 46.054692847s ago: executing program 0 (id=1296): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000080)=0x10, 0x80000) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(0x0, 0x10, 0x202a80) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000003c0), 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) 42.927771918s ago: executing program 0 (id=1297): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 42.46961317s ago: executing program 0 (id=1298): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x2, 0x0, &(0x7f0000000040)=[{0x7ff, 0x1}, {0x2, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) 42.156109852s ago: executing program 0 (id=1299): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xefc8, 0x1f480, 0x0, 0x332}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 41.487566077s ago: executing program 0 (id=1301): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r1, r0, 0x0, 0x5) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb00f21800006fcc723dab2001ac000c000085cb4cc6ff65a16000070000000600000000000013020000"], 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r7) rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 38.160986626s ago: executing program 0 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) unshare(0x6a040000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 26.132497133s ago: executing program 5 (id=1308): close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0xb90, 0x3}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x43, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 24.591179711s ago: executing program 5 (id=1309): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.610089741s ago: executing program 37 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) unshare(0x6a040000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 20.603325743s ago: executing program 5 (id=1311): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x837, 0x7, 0x0, 0x81, 0x200, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 19.288329204s ago: executing program 5 (id=1312): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb", 0x5c}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16.611672301s ago: executing program 5 (id=1313): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8", 0x19a, 0x12, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) creat(0x0, 0x18) 15.304623884s ago: executing program 5 (id=1314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2008880) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 38 (id=1314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2008880) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): hich could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.985351][ T8719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.088173][ T8726] team0: Port device team_slave_1 added [ 415.210867][ T9014] fuse: Unknown parameter 'group_id00000000000000000000' [ 415.274670][ T9012] could not allocate digest TFM handle md5 [ 416.039664][ T9020] netlink: 'syz.0.966': attribute type 2 has an invalid length. [ 416.039689][ T9020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.966'. [ 416.184337][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.184356][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.184388][ T8726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.561296][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.561315][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.561345][ T8726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.431656][ T9025] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 417.516715][ T8719] hsr_slave_0: entered promiscuous mode [ 417.527409][ T8719] hsr_slave_1: entered promiscuous mode [ 417.537563][ T8719] debugfs: 'hsr0' already exists in 'hsr' [ 417.537594][ T8719] Cannot create hsr debugfs directory [ 418.376525][ T5871] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 419.539606][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 419.590307][ T8726] hsr_slave_0: entered promiscuous mode [ 419.591766][ T8726] hsr_slave_1: entered promiscuous mode [ 419.595166][ T8726] debugfs: 'hsr0' already exists in 'hsr' [ 419.595195][ T8726] Cannot create hsr debugfs directory [ 419.632437][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.632475][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.632501][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.632555][ T5871] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.632580][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.701288][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.701325][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 419.701356][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 419.701387][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.701432][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.701458][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.800935][ T31] usb 1-1: config 0 descriptor?? [ 419.802464][ T5871] usb 4-1: config 0 descriptor?? [ 419.822043][ T9040] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 420.959968][ T31] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 421.152297][ T9046] netlink: 'syz.4.979': attribute type 2 has an invalid length. [ 421.152321][ T9046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.979'. [ 421.178579][ T5871] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 421.214170][ T5871] usb 4-1: USB disconnect, device number 27 [ 421.216507][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.219533][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.244718][ T31] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 421.295872][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.296520][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.554051][ T5563] usb 1-1: USB disconnect, device number 20 [ 421.705415][ T9048] fido_id[9048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 422.699520][ T9063] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 423.325061][ T9076] netlink: 'syz.0.988': attribute type 2 has an invalid length. [ 423.325087][ T9076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.988'. [ 425.741559][ T820] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 425.891754][ T820] usb 1-1: Using ep0 maxpacket: 32 [ 425.916113][ T820] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 425.916147][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.916170][ T820] usb 1-1: Product: syz [ 425.916187][ T820] usb 1-1: Manufacturer: syz [ 425.916204][ T820] usb 1-1: SerialNumber: syz [ 426.327642][ T820] usb 1-1: config 0 descriptor?? [ 426.810878][ T820] airspy 1-1:0.0: Board ID: 00 [ 426.810902][ T820] airspy 1-1:0.0: Firmware version: [ 427.199872][ T819] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 427.352227][ T819] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.352265][ T819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 427.352296][ T819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 427.352325][ T819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.352371][ T819] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.352398][ T819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.393320][ T819] usb 4-1: config 0 descriptor?? [ 427.397920][ T9104] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 427.647217][ T820] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f [ 427.747755][ T820] airspy 1-1:0.0: Registered as swradio24 [ 427.747780][ T820] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 427.771989][ T820] usb 1-1: USB disconnect, device number 21 [ 428.011118][ T819] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 428.123292][ T819] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 428.221331][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.222015][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.227660][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.235270][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.293322][ T5474] 8021q: adding VLAN 0 to HW filter on device eth5 [ 428.688246][ T820] usb 4-1: USB disconnect, device number 28 [ 429.833893][ T9110] fido_id[9110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 430.233655][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 430.383923][ T31] usb 1-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 430.383984][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 430.384015][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 430.384044][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.384088][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 430.384114][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.468596][ T31] usb 1-1: config 0 descriptor?? [ 430.691497][ T67] bridge_slave_1: left allmulticast mode [ 430.691527][ T67] bridge_slave_1: left promiscuous mode [ 430.691745][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.707180][ T5954] usb 1-1: USB disconnect, device number 22 [ 431.274843][ T67] bridge_slave_0: left allmulticast mode [ 431.274876][ T67] bridge_slave_0: left promiscuous mode [ 431.309860][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.466611][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.524465][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.525805][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.527014][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.528504][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.854348][ T67] bridge_slave_1: left allmulticast mode [ 431.854380][ T67] bridge_slave_1: left promiscuous mode [ 431.854694][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.027448][ T67] bridge_slave_0: left allmulticast mode [ 432.027476][ T67] bridge_slave_0: left promiscuous mode [ 432.051586][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.095683][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 432.108740][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 432.142369][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 432.186282][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 432.210840][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 434.290295][ T5824] Bluetooth: hci6: command tx timeout [ 434.294868][ T5832] Bluetooth: hci5: command tx timeout [ 435.549436][ T9156] netlink: 'syz.0.1010': attribute type 2 has an invalid length. [ 435.549460][ T9156] netlink: 61979 bytes leftover after parsing attributes in process `syz.0.1010'. [ 435.881471][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.986573][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.048384][ T67] bond0 (unregistering): Released all slaves [ 436.059922][ T819] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 436.239867][ T819] usb 1-1: Using ep0 maxpacket: 32 [ 436.241916][ T819] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.241946][ T819] usb 1-1: config 0 has no interface number 0 [ 436.241992][ T819] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 436.242017][ T819] usb 1-1: config 0 interface 1 has no altsetting 0 [ 436.244521][ T819] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 436.244556][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.244572][ T819] usb 1-1: Product: syz [ 436.244582][ T819] usb 1-1: Manufacturer: syz [ 436.244593][ T819] usb 1-1: SerialNumber: syz [ 436.370114][ T5832] Bluetooth: hci5: command tx timeout [ 436.370212][ T5824] Bluetooth: hci6: command tx timeout [ 436.449057][ T819] usb 1-1: config 0 descriptor?? [ 436.729410][ T819] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 436.730124][ T819] cx231xx 1-1:0.1: Failed to read PCB config [ 436.730200][ T819] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 436.822668][ T819] usb 1-1: USB disconnect, device number 23 [ 437.016257][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.122241][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.239578][ T67] bond0 (unregistering): Released all slaves [ 437.402166][ T819] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 438.465089][ T5832] Bluetooth: hci5: command tx timeout [ 438.465187][ T5824] Bluetooth: hci6: command tx timeout [ 439.219889][ T819] usb 1-1: device not accepting address 24, error -71 [ 440.502374][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.502451][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.533077][ T5824] Bluetooth: hci6: command tx timeout [ 440.533113][ T5824] Bluetooth: hci5: command tx timeout [ 440.717606][ T9190] netlink: 'syz.3.1019': attribute type 2 has an invalid length. [ 440.717630][ T9190] netlink: 61979 bytes leftover after parsing attributes in process `syz.3.1019'. [ 446.201943][ T5897] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 446.369948][ T5897] usb 1-1: device descriptor read/64, error -71 [ 446.551278][ T5474] 8021q: adding VLAN 0 to HW filter on device eth6 [ 446.793572][ T5897] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 446.904843][ T819] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 447.175781][ T67] hsr_slave_0: left promiscuous mode [ 447.189832][ T5897] usb 1-1: device descriptor read/64, error -71 [ 447.216369][ T67] hsr_slave_1: left promiscuous mode [ 447.218751][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.233815][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.294469][ T819] usb 4-1: Using ep0 maxpacket: 32 [ 447.296483][ T819] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 447.296512][ T819] usb 4-1: config 0 has no interface number 0 [ 447.296563][ T819] usb 4-1: config 0 interface 184 has no altsetting 0 [ 447.298915][ T819] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 447.298945][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.298968][ T819] usb 4-1: Product: syz [ 447.298985][ T819] usb 4-1: Manufacturer: syz [ 447.299002][ T819] usb 4-1: SerialNumber: syz [ 447.308502][ T5897] usb usb1-port1: attempt power cycle [ 447.394984][ T819] usb 4-1: config 0 descriptor?? [ 447.511336][ T67] hsr_slave_0: left promiscuous mode [ 447.529902][ T67] hsr_slave_1: left promiscuous mode [ 447.531072][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.761879][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.839843][ T5897] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 448.031504][ T5897] usb 1-1: device descriptor read/8, error -71 [ 448.176927][ T819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 448.176962][ T819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 448.198076][ T819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 448.198165][ T819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 448.198227][ T819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 448.198282][ T819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 448.199059][ T819] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 449.503713][ T820] usb 4-1: USB disconnect, device number 29 [ 449.534617][ T67] team0 (unregistering): Port device team_slave_1 removed [ 449.629796][ T5897] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 449.774477][ T67] team0 (unregistering): Port device team_slave_0 removed [ 449.779900][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 449.788847][ T5897] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 449.788928][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.788993][ T5897] usb 1-1: config 0 has no interface number 0 [ 449.789083][ T5897] usb 1-1: config 0 interface 52 has no altsetting 0 [ 449.789183][ T5897] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 449.789250][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.914412][ T5897] usb 1-1: config 0 descriptor?? [ 450.486074][ T820] usb 1-1: USB disconnect, device number 30 [ 451.849977][ T820] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 452.009926][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 452.026100][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 452.044350][ T820] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 452.044382][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.044405][ T820] usb 5-1: Product: syz [ 452.044420][ T820] usb 5-1: Manufacturer: syz [ 452.044436][ T820] usb 5-1: SerialNumber: syz [ 452.170068][ T820] usb 5-1: config 0 descriptor?? [ 452.186944][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 452.232668][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.238807][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.329043][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 452.338800][ T31] usb 4-1: no configurations [ 452.338821][ T31] usb 4-1: can't read configurations, error -22 [ 452.647137][ T820] airspy 5-1:0.0: Board ID: 00 [ 452.647162][ T820] airspy 5-1:0.0: Firmware version: [ 453.371934][ T67] team0 (unregistering): Port device team_slave_1 removed [ 453.478970][ T820] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 453.494342][ T67] team0 (unregistering): Port device team_slave_0 removed [ 453.535963][ T820] airspy 5-1:0.0: Registered as swradio24 [ 453.535988][ T820] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 453.606336][ T820] usb 5-1: USB disconnect, device number 25 [ 454.268808][ T5563] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 454.461573][ T5563] usb 4-1: Using ep0 maxpacket: 32 [ 454.734003][ T5563] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 454.734036][ T5563] usb 4-1: config 0 has no interface number 0 [ 454.734089][ T5563] usb 4-1: config 0 interface 184 has no altsetting 0 [ 454.766382][ T5563] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 454.766414][ T5563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.766437][ T5563] usb 4-1: Product: syz [ 454.766453][ T5563] usb 4-1: Manufacturer: syz [ 454.766469][ T5563] usb 4-1: SerialNumber: syz [ 454.829617][ T5563] usb 4-1: config 0 descriptor?? [ 455.519913][ T5563] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 455.519949][ T5563] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 455.574780][ T5563] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 455.574817][ T5563] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 455.574838][ T5563] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 455.574858][ T5563] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 455.575170][ T5563] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 456.339831][ T5897] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 456.489880][ T5871] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 456.596245][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 456.598572][ T5897] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 456.598613][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.598634][ T5897] usb 5-1: config 0 has no interface number 0 [ 456.598668][ T5897] usb 5-1: config 0 interface 52 has no altsetting 0 [ 456.598703][ T5897] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 456.598729][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.649836][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 456.693245][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.711166][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.724336][ T5871] usb 1-1: unable to get BOS descriptor or descriptor too short [ 456.724427][ T5871] usb 1-1: no configurations [ 456.724441][ T5871] usb 1-1: can't read configurations, error -22 [ 456.982727][ T5897] usb 5-1: config 0 descriptor?? [ 457.103058][ T820] usb 4-1: USB disconnect, device number 32 [ 457.484177][ T5897] usb 5-1: USB disconnect, device number 26 [ 457.678528][ T9128] chnl_net:caif_netlink_parms(): no params data found [ 458.599840][ T820] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 458.696002][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 458.755960][ T820] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.755993][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 458.756017][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 458.756040][ T820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.756078][ T820] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.756098][ T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.828456][ T820] usb 5-1: config 0 descriptor?? [ 458.846004][ T9306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 459.296851][ T820] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 459.630794][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.637352][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.680597][ T820] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 459.948585][ T31] usb 5-1: USB disconnect, device number 27 [ 460.343567][ T9128] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.343722][ T9128] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.343974][ T9128] bridge_slave_0: entered allmulticast mode [ 460.347188][ T9128] bridge_slave_0: entered promiscuous mode [ 460.461431][ T9128] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.461840][ T9128] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.462053][ T9128] bridge_slave_1: entered allmulticast mode [ 460.464458][ T9128] bridge_slave_1: entered promiscuous mode [ 460.489908][ T820] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 460.725432][ T5474] 8021q: adding VLAN 0 to HW filter on device eth7 [ 460.749884][ T820] usb 1-1: Using ep0 maxpacket: 32 [ 460.752593][ T820] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 460.752623][ T820] usb 1-1: config 0 has no interface number 0 [ 460.752670][ T820] usb 1-1: config 0 interface 184 has no altsetting 0 [ 460.759984][ T820] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 460.760014][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.760035][ T820] usb 1-1: Product: syz [ 460.760050][ T820] usb 1-1: Manufacturer: syz [ 460.760065][ T820] usb 1-1: SerialNumber: syz [ 460.839878][ T5884] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 460.922783][ T820] usb 1-1: config 0 descriptor?? [ 460.990306][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 461.233754][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.271050][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.922409][ T820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 461.922505][ T820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 461.923895][ T820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 461.923925][ T820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 461.923947][ T820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 461.923967][ T820] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 461.924724][ T820] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 462.199835][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 462.350065][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 462.355252][ T31] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 462.355280][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.355301][ T31] usb 5-1: config 0 has no interface number 0 [ 462.355394][ T31] usb 5-1: config 0 interface 52 has no altsetting 0 [ 462.355429][ T31] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 462.355453][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.447021][ T31] usb 5-1: config 0 descriptor?? [ 462.869198][ T36] usb 5-1: USB disconnect, device number 28 [ 463.295053][ T9128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.301996][ T819] usb 1-1: USB disconnect, device number 33 [ 463.328780][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.329101][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.355621][ T9139] bridge_slave_0: entered allmulticast mode [ 463.366869][ T9139] bridge_slave_0: entered promiscuous mode [ 463.549484][ T5884] usb 4-1: unable to get BOS descriptor or descriptor too short [ 463.549575][ T5884] usb 4-1: no configurations [ 463.549590][ T5884] usb 4-1: can't read configurations, error -22 [ 463.869920][ T6006] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 463.871611][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 464.002854][ T6006] usb 5-1: device descriptor read/64, error -32 [ 464.240168][ T6006] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 464.240450][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 464.406600][ T6006] usb 5-1: device descriptor read/64, error -32 [ 464.512934][ T6006] usb usb5-port1: attempt power cycle [ 464.889891][ T6006] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 464.910712][ T6006] usb 5-1: device descriptor read/8, error -71 [ 465.034607][ T9128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.052753][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.052925][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.053178][ T9139] bridge_slave_1: entered allmulticast mode [ 465.056042][ T9139] bridge_slave_1: entered promiscuous mode [ 465.149926][ T6006] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 465.171562][ T6006] usb 5-1: device descriptor read/8, error -71 [ 465.280456][ T6006] usb usb5-port1: unable to enumerate USB device [ 465.410908][ T9128] team0: Port device team_slave_0 added [ 465.440603][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.449848][ T5897] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 465.491140][ T9128] team0: Port device team_slave_1 added [ 465.511937][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.654192][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.654231][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 465.654251][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 465.654271][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.654302][ T5897] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.654319][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.774603][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.774622][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.774654][ T9128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.796789][ T5897] usb 4-1: config 0 descriptor?? [ 465.842206][ T9360] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 465.953194][ T9139] team0: Port device team_slave_0 added [ 465.955533][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.955551][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.955581][ T9128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.021137][ T9139] team0: Port device team_slave_1 added [ 466.336798][ T5897] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 466.370602][ T5897] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 466.409864][ T36] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 466.553480][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.554408][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.577497][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 466.598041][ T36] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 466.598073][ T36] usb 1-1: config 0 has no interface number 0 [ 466.598122][ T36] usb 1-1: config 0 interface 184 has no altsetting 0 [ 466.625046][ T36] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 466.625080][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.625101][ T36] usb 1-1: Product: syz [ 466.625116][ T36] usb 1-1: Manufacturer: syz [ 466.625132][ T36] usb 1-1: SerialNumber: syz [ 466.669126][ T36] usb 1-1: config 0 descriptor?? [ 466.779238][ T31] usb 4-1: USB disconnect, device number 35 [ 467.075026][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.075045][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.075079][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.209881][ T6006] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 467.294503][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.294524][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.294557][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.319909][ T36] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 467.319944][ T36] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 467.324059][ T36] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 467.324093][ T36] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 467.324113][ T36] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 467.324134][ T36] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 467.324464][ T36] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 467.532640][ T6006] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 467.532677][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.532700][ T6006] usb 5-1: Product: syz [ 467.532716][ T6006] usb 5-1: Manufacturer: syz [ 467.532732][ T6006] usb 5-1: SerialNumber: syz [ 467.539109][ T6006] usb 5-1: config 0 descriptor?? [ 467.666663][ T9128] hsr_slave_0: entered promiscuous mode [ 467.702415][ T9128] hsr_slave_1: entered promiscuous mode [ 467.763678][ T6006] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 468.765520][ T9139] hsr_slave_0: entered promiscuous mode [ 468.799609][ T9139] hsr_slave_1: entered promiscuous mode [ 468.813316][ T9139] debugfs: 'hsr0' already exists in 'hsr' [ 468.813569][ T9139] Cannot create hsr debugfs directory [ 468.850091][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 468.999993][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 469.161605][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 469.206368][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 469.206849][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.207100][ T31] usb 4-1: Product: syz [ 469.207119][ T31] usb 4-1: Manufacturer: syz [ 469.207135][ T31] usb 4-1: SerialNumber: syz [ 469.371648][ T10] usb 1-1: USB disconnect, device number 34 [ 469.923107][ T6006] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 469.940647][ T9375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.975468][ T9375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.003197][ T9375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.003851][ T9375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.084240][ T31] snd-ua101 4-1:1.1: sample format descriptor not found [ 470.084265][ T31] snd-ua101 4-1:1.0: invalid num_altsetting [ 470.117403][ T31] usb 4-1: USB disconnect, device number 36 [ 471.508339][ T6006] usb 5-1: USB disconnect, device number 33 [ 472.003353][ T5474] 8021q: adding VLAN 0 to HW filter on device eth8 [ 472.754983][ T9401] serio: Serial port ptm0 [ 473.151471][ T9404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1077'. [ 474.240016][ T6006] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 474.345957][ T9418] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 474.345976][ T9418] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1080'. [ 474.393424][ T6006] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.393461][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 474.393515][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 474.393609][ T6006] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 474.393700][ T6006] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 474.393726][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.491263][ T6006] usb 5-1: config 0 descriptor?? [ 474.492877][ T9415] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 475.164519][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.186747][ T6006] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 475.187865][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.687301][ T6006] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 475.797934][ T6006] usb 5-1: USB disconnect, device number 34 [ 475.936084][ T9424] fido_id[9424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 476.681958][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 476.949821][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 476.955433][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 476.955463][ T10] usb 4-1: config 0 has no interface number 0 [ 476.955508][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 476.958120][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 476.958156][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.958171][ T10] usb 4-1: Product: syz [ 476.958182][ T10] usb 4-1: Manufacturer: syz [ 476.958193][ T10] usb 4-1: SerialNumber: syz [ 476.967394][ T10] usb 4-1: config 0 descriptor?? [ 477.161819][ T6006] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 477.312443][ T6006] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 477.312472][ T6006] usb 5-1: config 4 has no interface number 0 [ 477.312525][ T6006] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 477.315527][ T6006] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 477.315559][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.315581][ T6006] usb 5-1: Product: syz [ 477.315598][ T6006] usb 5-1: Manufacturer: syz [ 477.315613][ T6006] usb 5-1: SerialNumber: syz [ 477.645418][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.648397][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.671959][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.693669][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.696999][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.698095][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.727222][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.728259][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.754657][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 477.754696][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 477.836240][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 477.836289][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 477.836311][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 477.836332][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 477.836653][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 477.970121][ T6006] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 478.234769][ T6006] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 478.234867][ T6006] dib0700: firmware download failed at 7 with -22 [ 478.270490][ T6006] usb 5-1: USB disconnect, device number 35 [ 479.194689][ T6006] usb 4-1: USB disconnect, device number 37 [ 479.549975][ T5897] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 481.899780][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 481.904715][ T5897] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 481.904767][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.904797][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.904822][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 481.904868][ T5897] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 481.904893][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.069133][ T5897] usb 1-1: config 0 descriptor?? [ 482.970021][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 483.084716][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 483.130311][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 483.146386][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.146415][ T31] usb 5-1: config 0 has no interface number 0 [ 483.146463][ T31] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 483.146493][ T31] usb 5-1: config 0 interface 1 has no altsetting 0 [ 483.184039][ T31] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 483.184073][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.184095][ T31] usb 5-1: Product: syz [ 483.184111][ T31] usb 5-1: Manufacturer: syz [ 483.184127][ T31] usb 5-1: SerialNumber: syz [ 483.251170][ T31] usb 5-1: config 0 descriptor?? [ 483.577431][ T31] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 483.590749][ T31] cx231xx 5-1:0.1: Failed to read PCB config [ 483.591028][ T31] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 483.725669][ T31] usb 5-1: USB disconnect, device number 36 [ 483.902584][ T5897] usb 1-1: can't set config #0, error -71 [ 483.953424][ T5897] usb 1-1: USB disconnect, device number 35 [ 484.043980][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.044018][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 484.044049][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 484.044166][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.044215][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.044242][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.180025][ T31] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 484.193884][ T10] usb 4-1: config 0 descriptor?? [ 484.195251][ T9452] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.329888][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 484.332375][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 484.332403][ T31] usb 5-1: config 0 has no interface number 0 [ 484.332449][ T31] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 484.332474][ T31] usb 5-1: config 0 interface 1 has no altsetting 0 [ 484.398949][ T31] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 484.398983][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.399006][ T31] usb 5-1: Product: syz [ 484.399023][ T31] usb 5-1: Manufacturer: syz [ 484.399039][ T31] usb 5-1: SerialNumber: syz [ 484.442813][ T31] usb 5-1: config 0 descriptor?? [ 484.722277][ T10] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 484.772111][ T31] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 484.773448][ T31] cx231xx 5-1:0.1: Failed to read PCB config [ 484.773524][ T31] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -32 [ 484.936545][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.937249][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.091924][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 485.203459][ T5954] usb 4-1: USB disconnect, device number 38 [ 485.400048][ T9484] fido_id[9484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 485.919839][ T5897] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 486.129878][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 486.132210][ T5897] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 486.132239][ T5897] usb 1-1: config 0 has no interface number 0 [ 486.132289][ T5897] usb 1-1: config 0 interface 184 has no altsetting 0 [ 486.135226][ T5897] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 486.135257][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.135280][ T5897] usb 1-1: Product: syz [ 486.135295][ T5897] usb 1-1: Manufacturer: syz [ 486.135312][ T5897] usb 1-1: SerialNumber: syz [ 486.375932][ T5897] usb 1-1: config 0 descriptor?? [ 487.131674][ T36] usb 5-1: USB disconnect, device number 37 [ 487.153511][ T5897] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 487.153547][ T5897] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 487.171433][ T5897] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 487.171468][ T5897] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 487.171491][ T5897] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 487.171511][ T5897] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 487.171822][ T5897] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 488.088597][ T9518] usb usb8: check_ctrlrecip: process 9518 (syz.4.1100) requesting ep 01 but needs 81 [ 488.418871][ T31] usb 1-1: USB disconnect, device number 36 [ 490.140485][ T36] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 490.269949][ T36] usb 1-1: device descriptor read/64, error -71 [ 490.509899][ T36] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 490.650490][ T36] usb 1-1: device descriptor read/64, error -71 [ 490.673256][ T31] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 490.761022][ T36] usb usb1-port1: attempt power cycle [ 490.849964][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 490.852526][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 490.857103][ T31] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 490.857136][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.857157][ T31] usb 5-1: Product: syz [ 490.857173][ T31] usb 5-1: Manufacturer: syz [ 490.857189][ T31] usb 5-1: SerialNumber: syz [ 491.100009][ T36] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 491.120940][ T36] usb 1-1: device descriptor read/8, error -71 [ 491.241557][ T9546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.339490][ T9546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.449888][ T36] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 491.470695][ T36] usb 1-1: device descriptor read/8, error -71 [ 491.496376][ T31] snd-ua101 5-1:1.1: sample format descriptor not found [ 491.496400][ T31] snd-ua101 5-1:1.0: invalid num_altsetting [ 491.572944][ T31] usb 5-1: USB disconnect, device number 38 [ 491.580228][ T36] usb usb1-port1: unable to enumerate USB device [ 492.401462][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.417593][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.427894][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.429849][ T36] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 492.497682][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.522347][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.618119][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 492.630431][ T36] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 492.630462][ T36] usb 5-1: config 0 has no interface number 0 [ 492.630519][ T36] usb 5-1: config 0 interface 184 has no altsetting 0 [ 492.652788][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.778957][ T36] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 492.778987][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.779006][ T36] usb 5-1: Product: syz [ 492.779020][ T36] usb 5-1: Manufacturer: syz [ 492.779035][ T36] usb 5-1: SerialNumber: syz [ 492.823383][ T9567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.825584][ T36] usb 5-1: config 0 descriptor?? [ 492.827205][ T9567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.833365][ T9567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.840299][ T9567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.948705][ T67] bridge_slave_1: left allmulticast mode [ 492.948735][ T67] bridge_slave_1: left promiscuous mode [ 492.949203][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.370190][ T9569] usb usb8: check_ctrlrecip: process 9569 (syz.3.1110) requesting ep 01 but needs 81 [ 493.468529][ T67] bridge_slave_0: left allmulticast mode [ 493.468559][ T67] bridge_slave_0: left promiscuous mode [ 493.468665][ T36] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 493.468694][ T36] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 493.468820][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.509937][ T36] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 493.509970][ T36] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 493.509992][ T36] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 493.510012][ T36] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 493.510336][ T36] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 494.509874][ T36] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 494.558653][ T67] bridge_slave_1: left allmulticast mode [ 494.558686][ T67] bridge_slave_1: left promiscuous mode [ 494.558942][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.639883][ T36] usb 1-1: device descriptor read/64, error -71 [ 494.685838][ T67] bridge_slave_0: left allmulticast mode [ 494.685871][ T67] bridge_slave_0: left promiscuous mode [ 494.686121][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.860006][ T9567] Bluetooth: hci0: command tx timeout [ 494.890143][ T36] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 495.010148][ T9567] Bluetooth: hci2: command tx timeout [ 495.021621][ T36] usb 1-1: device descriptor read/64, error -71 [ 495.130433][ T36] usb usb1-port1: attempt power cycle [ 495.224900][ T6006] usb 5-1: USB disconnect, device number 39 [ 495.346727][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.460838][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.476485][ T36] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 495.502189][ T36] usb 1-1: device descriptor read/8, error -71 [ 495.553419][ T67] bond0 (unregistering): Released all slaves [ 495.740649][ T36] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 495.761021][ T36] usb 1-1: device descriptor read/8, error -71 [ 495.874831][ T36] usb usb1-port1: unable to enumerate USB device [ 496.446773][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.571208][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.654173][ T67] bond0 (unregistering): Released all slaves [ 496.711643][ T5474] 8021q: adding VLAN 0 to HW filter on device eth9 [ 496.930841][ T9567] Bluetooth: hci0: command tx timeout [ 497.091657][ T9567] Bluetooth: hci2: command tx timeout [ 499.010275][ T9567] Bluetooth: hci0: command tx timeout [ 499.173330][ T9567] Bluetooth: hci2: command tx timeout [ 499.298859][ T9610] usb usb8: check_ctrlrecip: process 9610 (syz.4.1120) requesting ep 01 but needs 81 [ 499.319894][ T6006] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 499.510988][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 499.559094][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.581379][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.610061][ T36] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 500.739973][ T36] usb 5-1: device descriptor read/64, error -71 [ 500.979963][ T36] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 501.090106][ T9567] Bluetooth: hci0: command tx timeout [ 501.190004][ T36] usb 5-1: device descriptor read/64, error -71 [ 501.257427][ T9567] Bluetooth: hci2: command tx timeout [ 501.303651][ T36] usb usb5-port1: attempt power cycle [ 501.639934][ T36] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 501.663254][ T36] usb 5-1: device descriptor read/8, error -71 [ 501.846599][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.846746][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.940213][ T36] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 502.011750][ T36] usb 5-1: device descriptor read/8, error -71 [ 502.123280][ T6006] usb 4-1: unable to get BOS descriptor or descriptor too short [ 502.123372][ T6006] usb 4-1: no configurations [ 502.123387][ T6006] usb 4-1: can't read configurations, error -22 [ 502.158006][ T36] usb usb5-port1: unable to enumerate USB device [ 502.770769][ T6006] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 502.829785][ T67] hsr_slave_0: left promiscuous mode [ 502.861568][ T67] hsr_slave_1: left promiscuous mode [ 502.862657][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.906262][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.920071][ T6006] usb 4-1: Using ep0 maxpacket: 32 [ 502.922515][ T6006] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.922543][ T6006] usb 4-1: config 0 has no interface number 0 [ 502.922602][ T6006] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 502.922626][ T6006] usb 4-1: config 0 interface 1 has no altsetting 0 [ 502.927970][ T6006] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 502.928001][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.928023][ T6006] usb 4-1: Product: syz [ 502.928039][ T6006] usb 4-1: Manufacturer: syz [ 502.928055][ T6006] usb 4-1: SerialNumber: syz [ 503.006186][ T6006] usb 4-1: config 0 descriptor?? [ 503.264429][ T6006] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 503.281695][ T6006] cx231xx 4-1:0.1: Failed to read PCB config [ 503.281765][ T6006] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 503.288765][ T6006] usb 4-1: USB disconnect, device number 40 [ 503.741527][ T6006] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 503.881695][ T67] hsr_slave_0: left promiscuous mode [ 503.901156][ T6006] usb 4-1: Using ep0 maxpacket: 32 [ 503.904226][ T6006] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 503.904257][ T6006] usb 4-1: config 0 has no interface number 0 [ 503.904303][ T6006] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 503.904327][ T6006] usb 4-1: config 0 interface 1 has no altsetting 0 [ 503.908680][ T6006] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 503.908712][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.908735][ T6006] usb 4-1: Product: syz [ 503.908751][ T6006] usb 4-1: Manufacturer: syz [ 503.908766][ T6006] usb 4-1: SerialNumber: syz [ 503.920181][ T67] hsr_slave_1: left promiscuous mode [ 503.996409][ T6006] usb 4-1: config 0 descriptor?? [ 504.034417][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.222735][ T6006] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 504.224400][ T6006] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 504.330147][ T6006] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 504.332972][ T6006] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 504.333808][ T6006] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 504.335967][ T6006] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 504.336411][ T6006] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 504.336433][ T6006] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -32 [ 504.404428][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.432710][ T6006] i2c i2c-2: Added multiplexed i2c bus 4 [ 504.438644][ T6006] i2c i2c-2: Added multiplexed i2c bus 5 [ 504.650458][ T6006] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 504.780930][ T6006] cx231xx 4-1:0.1: cx231xx_send_usb_command: failed with status --110 [ 504.836868][ T6006] cx231xx 4-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 504.837375][ T6006] cx231xx 4-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 504.837863][ T6006] cx231xx 4-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 504.838585][ T6006] cx231xx 4-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 504.839051][ T6006] cx231xx 4-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 504.839505][ T6006] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 504.839529][ T6006] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 504.958683][ T6006] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -32 [ 504.973670][ T6006] usb 4-1: USB disconnect, device number 41 [ 505.909899][ T6006] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 506.059914][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 506.063787][ T6006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 506.063829][ T6006] usb 4-1: can't read configurations, error -61 [ 506.190084][ T6006] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 506.339877][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 506.345898][ T6006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 506.345939][ T6006] usb 4-1: can't read configurations, error -61 [ 506.346523][ T6006] usb usb4-port1: attempt power cycle [ 506.682026][ T6006] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 506.701975][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 506.723907][ T6006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 506.723950][ T6006] usb 4-1: can't read configurations, error -61 [ 506.850146][ T6006] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 506.870660][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 506.873151][ T6006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 506.873191][ T6006] usb 4-1: can't read configurations, error -61 [ 506.879547][ T6006] usb usb4-port1: unable to enumerate USB device [ 506.969050][ T67] team0 (unregistering): Port device team_slave_1 removed [ 507.042064][ T67] team0 (unregistering): Port device team_slave_0 removed [ 507.595171][ T37] audit: type=1326 audit(1776907807.035:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9638 comm="syz.0.1127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893d4cc819 code=0x0 [ 508.351820][ T67] team0 (unregistering): Port device team_slave_1 removed [ 508.502319][ T67] team0 (unregistering): Port device team_slave_0 removed [ 508.733383][ T9644] usb usb8: check_ctrlrecip: process 9644 (syz.0.1129) requesting ep 01 but needs 81 [ 509.309858][ T819] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 509.849838][ T819] usb 4-1: device descriptor read/64, error -71 [ 510.209855][ T819] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 510.389845][ T819] usb 4-1: device descriptor read/64, error -71 [ 510.536741][ T819] usb usb4-port1: attempt power cycle [ 511.189790][ T819] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 511.211839][ T819] usb 4-1: device descriptor read/8, error -71 [ 511.799840][ T819] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 512.139385][ T819] usb 4-1: device descriptor read/8, error -71 [ 512.273547][ T819] usb usb4-port1: unable to enumerate USB device [ 513.057233][ T31] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 513.200231][ T31] usb 4-1: device descriptor read/64, error -71 [ 513.440048][ T31] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 513.609911][ T31] usb 4-1: device descriptor read/64, error -71 [ 513.724831][ T31] usb usb4-port1: attempt power cycle [ 513.744826][ T9564] chnl_net:caif_netlink_parms(): no params data found [ 514.076290][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 514.078921][ T9562] chnl_net:caif_netlink_parms(): no params data found [ 514.097557][ T31] usb 4-1: device descriptor read/8, error -71 [ 514.329922][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 514.350618][ T31] usb 4-1: device descriptor read/8, error -71 [ 514.460414][ T31] usb usb4-port1: unable to enumerate USB device [ 514.968416][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.968545][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.968797][ T9564] bridge_slave_0: entered allmulticast mode [ 515.002408][ T9564] bridge_slave_0: entered promiscuous mode [ 515.110457][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.112989][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.113256][ T9564] bridge_slave_1: entered allmulticast mode [ 515.147137][ T9564] bridge_slave_1: entered promiscuous mode [ 515.244828][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.281710][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.297647][ T9562] bridge_slave_0: entered allmulticast mode [ 515.356588][ T9562] bridge_slave_0: entered promiscuous mode [ 515.413815][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.413961][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.414230][ T9562] bridge_slave_1: entered allmulticast mode [ 515.445947][ T9562] bridge_slave_1: entered promiscuous mode [ 515.485194][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.565998][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.692516][ T9562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.799492][ T9562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.941576][ T9564] team0: Port device team_slave_0 added [ 516.088053][ T9564] team0: Port device team_slave_1 added [ 516.107856][ T9562] team0: Port device team_slave_0 added [ 516.348718][ T9562] team0: Port device team_slave_1 added [ 517.502169][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.502184][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.502207][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.141714][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.141734][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.141766][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.145680][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.145697][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.145729][ T9562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.331608][ T6006] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 519.497431][ T6006] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 519.497464][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.497487][ T6006] usb 5-1: Product: syz [ 519.497503][ T6006] usb 5-1: Manufacturer: syz [ 519.497518][ T6006] usb 5-1: SerialNumber: syz [ 519.547041][ T6006] usb 5-1: config 0 descriptor?? [ 519.789057][ T6006] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 519.813303][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.813324][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.813355][ T9562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.961329][ T9564] hsr_slave_0: entered promiscuous mode [ 520.963837][ T9564] hsr_slave_1: entered promiscuous mode [ 520.965611][ T9564] debugfs: 'hsr0' already exists in 'hsr' [ 520.965639][ T9564] Cannot create hsr debugfs directory [ 521.783025][ T9562] hsr_slave_0: entered promiscuous mode [ 521.828033][ T9562] hsr_slave_1: entered promiscuous mode [ 521.845460][ T9562] debugfs: 'hsr0' already exists in 'hsr' [ 521.845506][ T9562] Cannot create hsr debugfs directory [ 522.122355][ T6006] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 523.533874][ T6006] usb 5-1: USB disconnect, device number 44 [ 524.044707][ T6006] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 524.169912][ T6006] usb 5-1: device descriptor read/64, error -71 [ 524.429818][ T6006] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 524.559863][ T6006] usb 5-1: device descriptor read/64, error -71 [ 524.670287][ T6006] usb usb5-port1: attempt power cycle [ 525.019908][ T6006] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 525.050317][ T6006] usb 5-1: device descriptor read/8, error -71 [ 525.289940][ T6006] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 525.310426][ T6006] usb 5-1: device descriptor read/8, error -71 [ 525.420328][ T6006] usb usb5-port1: unable to enumerate USB device [ 527.085704][ T9564] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 527.242840][ T9564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.261713][ T9564] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 528.658803][ T9564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.695816][ T9564] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 528.834731][ T9564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.859222][ T9564] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 528.924381][ T9564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.032904][ T9562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.214166][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.233208][ T9562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 531.398558][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.427463][ T9562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 531.509143][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.605997][ T9562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 531.815292][ T9836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.959895][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.026181][ T9838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.705926][ T9833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.758129][ T9845] smc: net device veth0_to_bond applied user defined pnetid SYZ2 [ 532.835961][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.619211][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.682634][ T6006] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 533.775037][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.775193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.816611][ T6006] usb 4-1: device descriptor read/64, error -71 [ 533.888365][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.888525][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.099307][ T6006] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 534.265622][ T6006] usb 4-1: device descriptor read/64, error -71 [ 534.351459][ T9562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.371004][ T6006] usb usb4-port1: attempt power cycle [ 534.583443][ T9562] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.686754][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.686992][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.742552][ T6006] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 534.763047][ T6006] usb 4-1: device descriptor read/8, error -71 [ 534.799046][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.799199][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.019912][ T6006] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 535.047733][ T6006] usb 4-1: device descriptor read/8, error -71 [ 535.150215][ T6006] usb usb4-port1: unable to enumerate USB device [ 535.753715][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.845993][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 536.042405][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 536.047875][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 536.055206][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 536.055296][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.055362][ T10] usb 5-1: Product: syz [ 536.055407][ T10] usb 5-1: Manufacturer: syz [ 536.055452][ T10] usb 5-1: SerialNumber: syz [ 536.193530][ T9562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.362370][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.378396][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.448199][ T10] snd-ua101 5-1:1.1: sample format descriptor not found [ 536.448223][ T10] snd-ua101 5-1:1.0: invalid num_altsetting [ 536.960758][ T10] usb 5-1: USB disconnect, device number 49 [ 537.464148][ T9889] smc: net device veth0_to_bond applied user defined pnetid SYZ2 [ 538.984151][ T820] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 539.037868][ T9564] veth0_vlan: entered promiscuous mode [ 539.111022][ T9564] veth1_vlan: entered promiscuous mode [ 539.131257][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 539.140401][ T820] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 539.140432][ T820] usb 5-1: config 0 has no interface number 0 [ 539.140484][ T820] usb 5-1: config 0 interface 184 has no altsetting 0 [ 539.181867][ T820] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 539.181902][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.181924][ T820] usb 5-1: Product: syz [ 539.181940][ T820] usb 5-1: Manufacturer: syz [ 539.181955][ T820] usb 5-1: SerialNumber: syz [ 539.227136][ T820] usb 5-1: config 0 descriptor?? [ 539.413405][ T5897] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 539.613359][ T5897] usb 4-1: device descriptor read/64, error -71 [ 539.781140][ T9562] veth0_vlan: entered promiscuous mode [ 539.910169][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 539.910204][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 539.960713][ T5897] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 539.997635][ T9564] veth0_macvtap: entered promiscuous mode [ 540.036570][ T9564] veth1_macvtap: entered promiscuous mode [ 540.054749][ T9562] veth1_vlan: entered promiscuous mode [ 540.101206][ T5897] usb 4-1: device descriptor read/64, error -71 [ 540.123287][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 540.123320][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 540.123342][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 540.123635][ T820] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 540.212029][ T5897] usb usb4-port1: attempt power cycle [ 540.294726][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.357426][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.472750][ T6614] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.472853][ T6614] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.472910][ T6614] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.472964][ T6614] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.834207][ T9562] veth0_macvtap: entered promiscuous mode [ 540.947086][ T9562] veth1_macvtap: entered promiscuous mode [ 541.145498][ T5897] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 541.177909][ T5897] usb 4-1: device descriptor read/8, error -71 [ 541.792669][ T5897] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 541.813376][ T5897] usb 4-1: device descriptor read/8, error -71 [ 541.864956][ T31] usb 5-1: USB disconnect, device number 50 [ 541.931280][ T5897] usb usb4-port1: unable to enumerate USB device [ 542.029251][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.658745][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.916999][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.917024][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.977369][ T9213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.977582][ T9213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.055531][ T9213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.074499][ T9213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.820758][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.820782][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.042727][ T5884] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 545.646039][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 545.939196][ T5884] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 545.939228][ T5884] usb 4-1: config 0 has no interface number 0 [ 545.939276][ T5884] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 545.939300][ T5884] usb 4-1: config 0 interface 1 has no altsetting 0 [ 546.843067][ T5884] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 546.843101][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.843124][ T5884] usb 4-1: Product: syz [ 546.843140][ T5884] usb 4-1: Manufacturer: syz [ 546.843156][ T5884] usb 4-1: SerialNumber: syz [ 546.951470][ T5884] usb 4-1: config 0 descriptor?? [ 547.122436][ T9213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.122459][ T9213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.354496][ T5884] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 547.393701][ T5884] cx231xx 4-1:0.1: Failed to read PCB config [ 547.393785][ T5884] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 547.449865][ T5884] usb 4-1: USB disconnect, device number 62 [ 547.870049][ T9213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.870072][ T9213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.013036][ T5884] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 548.242482][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 548.333517][ T5884] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 548.333547][ T5884] usb 4-1: config 0 has no interface number 0 [ 548.333595][ T5884] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 548.333617][ T5884] usb 4-1: config 0 interface 1 has no altsetting 0 [ 548.337867][ T5884] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 548.337899][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.337920][ T5884] usb 4-1: Product: syz [ 548.337936][ T5884] usb 4-1: Manufacturer: syz [ 548.337951][ T5884] usb 4-1: SerialNumber: syz [ 548.432789][ T5884] usb 4-1: config 0 descriptor?? [ 548.594308][ T820] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 548.698544][ T5884] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 548.716325][ T5884] cx231xx 4-1:0.1: Failed to read PCB config [ 548.716408][ T5884] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 548.750139][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 548.753062][ T820] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 548.753095][ T820] usb 5-1: config 0 has no interface number 0 [ 548.753145][ T820] usb 5-1: config 0 interface 184 has no altsetting 0 [ 548.797940][ T820] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 548.797976][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.797998][ T820] usb 5-1: Product: syz [ 548.798014][ T820] usb 5-1: Manufacturer: syz [ 548.798030][ T820] usb 5-1: SerialNumber: syz [ 548.906573][ T5884] usb 4-1: USB disconnect, device number 63 [ 548.969182][ T820] usb 5-1: config 0 descriptor?? [ 549.716140][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 549.716175][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 549.768043][ T9956] smc: net device veth0_to_bond applied user defined pnetid SYZ2 [ 549.918010][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 549.918045][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 549.918073][ T820] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 549.918384][ T820] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 551.139872][ T6006] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 551.175703][ T820] usb 5-1: USB disconnect, device number 51 [ 551.296910][ T6006] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 551.296945][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.296967][ T6006] usb 6-1: Product: syz [ 551.296983][ T6006] usb 6-1: Manufacturer: syz [ 551.296999][ T6006] usb 6-1: SerialNumber: syz [ 551.493119][ T6006] usb 6-1: config 0 descriptor?? [ 551.825553][ T6006] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 552.016443][ T37] audit: type=1326 audit(1776907851.455:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9975 comm="syz.4.1188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8e91fc819 code=0x0 [ 552.051250][ T6006] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 553.661152][ T820] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 553.809817][ T820] usb 4-1: Using ep0 maxpacket: 32 [ 553.812202][ T820] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 553.812231][ T820] usb 4-1: config 0 has no interface number 0 [ 553.812279][ T820] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 553.812310][ T820] usb 4-1: config 0 interface 1 has no altsetting 0 [ 553.817041][ T820] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 553.817074][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.817097][ T820] usb 4-1: Product: syz [ 553.817113][ T820] usb 4-1: Manufacturer: syz [ 553.817129][ T820] usb 4-1: SerialNumber: syz [ 553.929555][ T820] usb 4-1: config 0 descriptor?? [ 554.223846][ T820] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 554.225858][ T820] cx231xx 4-1:0.1: Failed to read PCB config [ 554.225936][ T820] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 554.257786][ T5897] usb 6-1: USB disconnect, device number 2 [ 554.550311][ T820] usb 4-1: USB disconnect, device number 64 [ 555.081241][ T820] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 555.141110][ T37] audit: type=1326 audit(1776907854.585:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10004 comm="syz.4.1199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8e91fc819 code=0x0 [ 555.229792][ T5897] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 555.253651][ T820] usb 4-1: Using ep0 maxpacket: 32 [ 555.256629][ T820] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 555.256659][ T820] usb 4-1: config 0 has no interface number 0 [ 555.256705][ T820] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 555.256729][ T820] usb 4-1: config 0 interface 1 has no altsetting 0 [ 555.309394][ T820] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 555.309430][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.309453][ T820] usb 4-1: Product: syz [ 555.309468][ T820] usb 4-1: Manufacturer: syz [ 555.309484][ T820] usb 4-1: SerialNumber: syz [ 555.395055][ T820] usb 4-1: config 0 descriptor?? [ 555.664378][ T820] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 555.755155][ T820] cx231xx 4-1:0.1: Failed to read PCB config [ 555.755239][ T820] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -32 [ 556.019851][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 556.023206][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 556.024778][ T5897] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 556.024806][ T5897] usb 6-1: config 0 has no interface number 0 [ 556.024840][ T5897] usb 6-1: config 0 interface 31 has no altsetting 0 [ 556.030595][ T5897] usb 6-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=cc.d6 [ 556.030628][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.030651][ T5897] usb 6-1: Product: syz [ 556.030667][ T5897] usb 6-1: Manufacturer: syz [ 556.030683][ T5897] usb 6-1: SerialNumber: syz [ 556.571820][ T5897] usb 6-1: config 0 descriptor?? [ 557.061200][ T5897] rndis_host 6-1:0.31: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 557.062597][ T5897] cdc_acm 6-1:0.31: Zero length descriptor references [ 557.062664][ T5897] cdc_acm 6-1:0.31: probe with driver cdc_acm failed with error -22 [ 557.141692][ T5897] usb 6-1: USB disconnect, device number 3 [ 557.610675][ T820] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 557.763086][ T820] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 557.763144][ T820] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 557.763187][ T820] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 557.763218][ T820] usb 5-1: config 168 interface 0 has no altsetting 0 [ 557.764963][ T820] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 557.765007][ T820] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 557.765049][ T820] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 557.765080][ T820] usb 5-1: config 168 interface 0 has no altsetting 0 [ 557.766982][ T820] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 557.767025][ T820] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 557.767206][ T820] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 557.767239][ T820] usb 5-1: config 168 interface 0 has no altsetting 0 [ 557.910785][ T820] usb 5-1: string descriptor 0 read error: -22 [ 557.910940][ T820] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 557.910967][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.967473][ T820] adutux 5-1:168.0: interrupt endpoints not found [ 558.178171][ T820] usb 5-1: USB disconnect, device number 52 [ 558.353011][ T819] usb 4-1: USB disconnect, device number 65 [ 559.059878][ T820] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 559.159817][ T819] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 559.190557][ T820] usb 5-1: device descriptor read/64, error -71 [ 559.387664][ T819] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 559.387698][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.387752][ T819] usb 4-1: Product: syz [ 559.387767][ T819] usb 4-1: Manufacturer: syz [ 559.387781][ T819] usb 4-1: SerialNumber: syz [ 559.435659][ T820] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 559.436736][ T819] usb 4-1: config 0 descriptor?? [ 559.559870][ T820] usb 5-1: device descriptor read/64, error -71 [ 559.670363][ T820] usb usb5-port1: attempt power cycle [ 559.677247][ T819] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 560.010898][ T820] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 560.032223][ T820] usb 5-1: device descriptor read/8, error -71 [ 560.366562][ T820] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 560.387252][ T820] usb 5-1: device descriptor read/8, error -71 [ 560.433750][ T819] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 560.603572][ T820] usb usb5-port1: unable to enumerate USB device [ 561.176189][T10044] serio: Serial port ptm0 [ 561.767593][ T5884] usb 4-1: USB disconnect, device number 66 [ 562.919831][ T6006] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 563.383937][T10063] overlayfs: missing 'lowerdir' [ 563.666459][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.666534][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.874298][ T6006] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 563.874347][ T6006] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 563.874390][ T6006] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 563.874422][ T6006] usb 5-1: config 168 interface 0 has no altsetting 0 [ 563.931882][ T6006] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 563.931930][ T6006] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 563.931980][ T6006] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 563.932012][ T6006] usb 5-1: config 168 interface 0 has no altsetting 0 [ 563.969916][ T6006] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 563.970079][ T6006] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 563.970134][ T6006] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 563.970166][ T6006] usb 5-1: config 168 interface 0 has no altsetting 0 [ 566.225399][ T6006] usb 5-1: string descriptor 0 read error: -71 [ 566.225531][ T6006] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 566.225554][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.339213][ T6006] usb 5-1: can't set config #168, error -71 [ 566.369326][ T6006] usb 5-1: USB disconnect, device number 57 [ 566.799815][ T819] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 567.079022][ T819] usb 4-1: Using ep0 maxpacket: 32 [ 567.082556][ T819] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 567.121141][ T819] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 567.121176][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.121199][ T819] usb 4-1: Product: syz [ 567.121215][ T819] usb 4-1: Manufacturer: syz [ 567.121231][ T819] usb 4-1: SerialNumber: syz [ 569.643723][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.647751][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.201389][ T819] snd-ua101 4-1:1.1: sample format descriptor not found [ 570.201413][ T819] snd-ua101 4-1:1.0: invalid num_altsetting [ 571.226317][ T819] usb 4-1: USB disconnect, device number 67 [ 573.488240][ T5884] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 573.655413][ T31] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 574.267442][ T31] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 574.267534][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.267556][ T31] usb 7-1: Product: syz [ 574.267572][ T31] usb 7-1: Manufacturer: syz [ 574.267587][ T31] usb 7-1: SerialNumber: syz [ 574.291410][ T5884] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 574.291441][ T5884] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 574.294944][ T5884] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 574.294974][ T5884] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 574.354143][ T5884] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 574.354231][ T5884] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 574.408944][ T5884] usb 4-1: string descriptor 0 read error: -22 [ 574.442017][ T5884] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 574.442051][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.574128][ T819] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 574.744437][ T819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.744514][ T819] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.744560][ T819] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 574.744587][ T819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.854168][ T5829] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 574.905298][ T819] usb 6-1: config 0 descriptor?? [ 574.984093][ T819] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 575.102828][ T5829] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 575.102875][ T5829] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 575.103043][ T5829] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 575.103076][ T5829] usb 5-1: config 168 interface 0 has no altsetting 0 [ 575.119098][ T5829] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 575.119145][ T5829] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 575.119234][ T5829] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 575.119265][ T5829] usb 5-1: config 168 interface 0 has no altsetting 0 [ 575.236184][ T5829] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 575.236233][ T5829] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 575.236283][ T5829] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 575.236314][ T5829] usb 5-1: config 168 interface 0 has no altsetting 0 [ 575.397863][ T5829] usb 5-1: string descriptor 0 read error: -22 [ 575.398076][ T5829] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 575.398105][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.422766][ T31] usb 7-1: config 0 descriptor?? [ 575.441916][ T5884] usb 4-1: rejected 3 configurations due to insufficient available bus power [ 575.441944][ T5884] usb 4-1: no configuration chosen from 3 choices [ 575.483716][ T819] usb 6-1: USB disconnect, device number 4 [ 575.757778][ T5829] adutux 5-1:168.0: interrupt endpoints not found [ 575.842274][ T5897] usb 4-1: USB disconnect, device number 68 [ 575.971555][ T5829] usb 5-1: USB disconnect, device number 58 [ 576.268346][ T31] usb 7-1: can't set config #0, error -71 [ 576.386536][ T31] usb 7-1: USB disconnect, device number 2 [ 576.829853][ T819] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 577.316136][T10109] 9pnet_virtio: no channels available for device syz [ 577.476319][T10109] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 577.476400][T10109] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 577.476514][T10109] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 577.555283][T10109] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 577.829404][T10109] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 583.449858][ T819] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 583.619801][ T819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.619860][ T819] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.619908][ T819] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 583.619934][ T819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.850871][ T5829] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 583.992829][ T819] usb 4-1: config 0 descriptor?? [ 584.015929][ T819] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 584.163912][ T5829] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 584.163959][ T5829] usb 5-1: config 4 has no interface number 0 [ 584.164007][ T5829] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 584.168675][ T5829] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 584.168708][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.168739][ T5829] usb 5-1: Product: syz [ 584.168755][ T5829] usb 5-1: Manufacturer: syz [ 584.168771][ T5829] usb 5-1: SerialNumber: syz [ 584.664547][ T5954] usb 4-1: USB disconnect, device number 69 [ 585.002229][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.002905][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.047484][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.095442][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.159514][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.197049][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.241091][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.241714][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.309871][ T5954] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 585.342049][ T5829] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 585.393384][ T5829] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 585.393452][ T5829] dib0700: firmware download failed at 7 with -22 [ 585.447372][ T5829] usb 5-1: USB disconnect, device number 59 [ 585.469762][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 585.477441][ T5954] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 585.477472][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.477495][ T5954] usb 4-1: config 0 has no interface number 0 [ 585.477542][ T5954] usb 4-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.477572][ T5954] usb 4-1: config 0 interface 52 has no altsetting 0 [ 585.477616][ T5954] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 585.477647][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.589461][ T5954] usb 4-1: config 0 descriptor?? [ 585.617416][ T5884] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 585.919260][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 590.200076][ T5884] usb 6-1: unable to read config index 0 descriptor/all [ 590.200129][ T5884] usb 6-1: can't read configurations, error -71 [ 590.287386][ T5954] usb 4-1: Can not set alternate setting to 1, error: -71 [ 590.287523][ T5954] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 590.289172][ T5954] usbhid 4-1:0.52: couldn't find an input interrupt endpoint [ 590.419604][ T5954] usb 4-1: USB disconnect, device number 70 [ 591.152875][T10161] serio: Serial port ptm0 [ 592.607784][T10162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1255'. [ 597.506259][T10199] netlink: 'syz.3.1264': attribute type 12 has an invalid length. [ 597.664079][ T5828] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 597.850093][ T5828] usb 6-1: Using ep0 maxpacket: 32 [ 597.855516][ T5828] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.855546][ T5828] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.895498][ T5828] usb 6-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 597.895535][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.895559][ T5828] usb 6-1: Product: syz [ 597.895574][ T5828] usb 6-1: Manufacturer: syz [ 597.895590][ T5828] usb 6-1: SerialNumber: syz [ 599.951928][T10188] 9pnet_virtio: no channels available for device syz [ 600.460127][ T5954] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 600.833953][ T5828] usb 6-1: 0:1 : does not exist [ 600.834115][ T5828] usb 6-1: unit 8 not found! [ 601.099559][ T5954] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 601.099591][ T5954] usb 4-1: config 4 has no interface number 0 [ 601.114512][ T5954] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 601.283712][ T5954] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 601.283748][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.283771][ T5954] usb 4-1: Product: syz [ 601.283787][ T5954] usb 4-1: Manufacturer: syz [ 601.283802][ T5954] usb 4-1: SerialNumber: syz [ 602.011572][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.070720][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.160184][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.166754][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.175958][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.192213][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.439173][ T5954] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 602.888483][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 602.911993][ T5954] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 602.912097][ T5954] usb 4-1: media controller created [ 603.398159][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.512405][T10215] siw: device registration error -23 [ 605.414406][ T5954] DVB: Unable to find symbol dib7000p_attach() [ 605.414456][ T5954] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 606.870617][ T5954] rc_core: IR keymap rc-dib0700-rc5 not found [ 606.870643][ T5954] Registered IR keymap rc-empty [ 606.871573][ T5954] dvb-usb: could not initialize remote control. [ 606.871587][ T5954] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 607.309241][ T5954] usb 4-1: USB disconnect, device number 71 [ 608.524079][ T5954] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 608.653245][ T5828] usb 6-1: USB disconnect, device number 8 [ 611.018276][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 611.099458][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 611.134460][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 611.142896][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 611.156943][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.380007][ T5832] Bluetooth: hci5: command tx timeout [ 614.617255][ T6756] udevd[6756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.778138][ T9566] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 614.863768][ T9566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 615.093040][ T9566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 615.180071][ T9566] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 615.186476][ T9566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 615.510800][ T5954] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 616.164193][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.164235][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.164253][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 616.164286][ T5954] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.164303][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.258936][ T5954] usb 6-1: config 0 descriptor?? [ 616.452257][ T5832] Bluetooth: hci5: command tx timeout [ 616.540384][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 617.419904][ T5832] Bluetooth: hci6: command tx timeout [ 617.446564][ T5954] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 617.456938][ T5954] usb 6-1: USB disconnect, device number 9 [ 618.529846][ T9567] Bluetooth: hci5: command tx timeout [ 619.078091][T10256] fido_id[10256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 619.489750][ T9567] Bluetooth: hci6: command tx timeout [ 620.612351][ T9567] Bluetooth: hci5: command tx timeout [ 620.952806][T10266] 9pnet_virtio: no channels available for device syz [ 620.969275][T10266] siw: device registration error -23 [ 621.667389][ T9567] Bluetooth: hci6: command tx timeout [ 623.006165][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1284'. [ 623.441696][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 623.489431][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 623.501651][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 623.531956][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 623.532951][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 623.729818][ T9567] Bluetooth: hci6: command tx timeout [ 624.798211][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.798289][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.729800][ T9567] Bluetooth: hci2: command tx timeout [ 626.862884][T10240] chnl_net:caif_netlink_parms(): no params data found [ 627.245014][ T5871] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 627.809791][ T9567] Bluetooth: hci2: command tx timeout [ 628.322183][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.322220][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.322246][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.322292][ T5871] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.322317][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.436254][ T5871] usb 6-1: config 0 descriptor?? [ 629.038299][T10249] chnl_net:caif_netlink_parms(): no params data found [ 629.101426][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.101663][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.101983][T10240] bridge_slave_0: entered allmulticast mode [ 629.105340][T10240] bridge_slave_0: entered promiscuous mode [ 629.160907][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.161070][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.161309][T10240] bridge_slave_1: entered allmulticast mode [ 629.164576][T10240] bridge_slave_1: entered promiscuous mode [ 629.382946][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.415615][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.719879][ T5871] usbhid 6-1:0.0: can't add hid device: -71 [ 629.720012][ T5871] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 629.730389][ T5871] usb 6-1: USB disconnect, device number 10 [ 629.889765][ T9567] Bluetooth: hci2: command tx timeout [ 629.965457][T10249] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.965591][T10249] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.965810][T10249] bridge_slave_0: entered allmulticast mode [ 630.017331][T10249] bridge_slave_0: entered promiscuous mode [ 630.159881][T10240] team0: Port device team_slave_0 added [ 630.160115][T10249] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.160241][T10249] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.160492][T10249] bridge_slave_1: entered allmulticast mode [ 630.167331][T10249] bridge_slave_1: entered promiscuous mode [ 630.299343][T10240] team0: Port device team_slave_1 added [ 631.969799][ T9567] Bluetooth: hci2: command tx timeout [ 632.643068][T10249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.135535][T10305] 9pnet_virtio: no channels available for device syz [ 633.136628][T10305] siw: device registration error -23 [ 633.439901][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.439919][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.439948][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.517691][T10249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.072898][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.072919][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.072951][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.333255][ T66] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.472984][ T66] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.850021][ T66] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.855220][ T66] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.024527][T10249] team0: Port device team_slave_0 added [ 636.347736][T10269] chnl_net:caif_netlink_parms(): no params data found [ 636.517697][T10249] team0: Port device team_slave_1 added [ 637.791605][T10330] 9pnet_virtio: no channels available for device syz [ 637.806899][T10330] siw: device registration error -23 [ 639.212590][T10240] hsr_slave_0: entered promiscuous mode [ 639.216415][T10240] hsr_slave_1: entered promiscuous mode [ 639.222149][T10240] debugfs: 'hsr0' already exists in 'hsr' [ 639.222179][T10240] Cannot create hsr debugfs directory [ 641.360167][T10249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.360187][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.360218][T10249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.814516][T10249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.814535][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.814566][T10249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.341352][T10269] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.341479][T10269] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.341846][T10269] bridge_slave_0: entered allmulticast mode [ 644.380332][T10269] bridge_slave_0: entered promiscuous mode [ 644.773459][T10269] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.773620][T10269] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.773917][T10269] bridge_slave_1: entered allmulticast mode [ 644.813570][T10269] bridge_slave_1: entered promiscuous mode [ 645.091020][T10249] hsr_slave_0: entered promiscuous mode [ 645.143457][T10249] hsr_slave_1: entered promiscuous mode [ 645.329057][T10249] debugfs: 'hsr0' already exists in 'hsr' [ 645.329090][T10249] Cannot create hsr debugfs directory [ 646.554256][T10269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.838446][T10269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.978693][T10269] team0: Port device team_slave_0 added [ 648.177387][T10269] team0: Port device team_slave_1 added [ 649.331608][T10269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.331629][T10269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.331661][T10269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.589509][T10269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.589531][T10269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.589563][T10269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.852557][T10350] 9pnet_virtio: no channels available for device syz [ 649.866160][T10350] siw: device registration error -23 [ 654.949784][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 656.325496][T10269] hsr_slave_0: entered promiscuous mode [ 656.327257][T10269] hsr_slave_1: entered promiscuous mode [ 656.328426][T10269] debugfs: 'hsr0' already exists in 'hsr' [ 656.328454][T10269] Cannot create hsr debugfs directory [ 656.391658][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 656.391692][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.391715][ T9] usb 6-1: Product: syz [ 656.391730][ T9] usb 6-1: Manufacturer: syz [ 656.391746][ T9] usb 6-1: SerialNumber: syz [ 656.489968][ T9] usb 6-1: config 0 descriptor?? [ 657.672925][ T9] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 657.673043][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 657.737993][ T9] usb 6-1: USB disconnect, device number 11 [ 661.454107][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 661.497821][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 661.575838][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 661.577103][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 661.577949][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 661.842302][T10240] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 662.084450][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 662.150114][T10240] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 663.213912][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 663.430870][T10240] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 663.729800][ T9567] Bluetooth: hci7: command tx timeout [ 663.758238][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.223003][T10240] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 664.416266][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.809905][ T9567] Bluetooth: hci7: command tx timeout [ 667.890042][ T9567] Bluetooth: hci7: command tx timeout [ 668.284274][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 668.318470][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 668.340267][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 668.381650][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 668.382458][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 669.356362][T10240] kthread_run failed with err -4 [ 669.969901][ T5832] Bluetooth: hci7: command tx timeout [ 670.533553][ T5832] Bluetooth: hci8: command tx timeout [ 670.887475][ T9567] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 670.915314][ T9567] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 670.949313][ T9567] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 671.003756][ T9567] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 671.018743][ T9567] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 672.610036][ T5832] Bluetooth: hci8: command tx timeout [ 673.253042][ T5832] Bluetooth: hci9: command tx timeout [ 674.700426][ T5832] Bluetooth: hci8: command tx timeout [ 675.331912][ T5832] Bluetooth: hci9: command tx timeout [ 676.817405][ T5832] Bluetooth: hci8: command tx timeout [ 677.409801][ T5832] Bluetooth: hci9: command tx timeout [ 679.490003][ T5832] Bluetooth: hci9: command tx timeout [ 680.326663][ T9567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 680.442756][ T9567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 680.487083][ T9567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 680.502729][ T9567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 680.506637][ T9567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.095683][ T9567] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 682.156662][ T9567] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 682.175087][ T9567] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 682.193192][ T9567] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 682.199293][ T9567] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 683.259857][ T9567] Bluetooth: hci5: command tx timeout [ 684.369791][ T9567] Bluetooth: hci10: command tx timeout [ 685.479772][ T9567] Bluetooth: hci5: command tx timeout [ 686.148566][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.148646][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.451395][ T9567] Bluetooth: hci10: command tx timeout [ 687.492386][ T9567] Bluetooth: hci5: command tx timeout [ 688.530073][ T9567] Bluetooth: hci10: command tx timeout [ 689.589932][ T9567] Bluetooth: hci5: command tx timeout [ 690.620489][ T9567] Bluetooth: hci10: command tx timeout [ 691.842505][T10174] bridge0: port 3(syz_tun) entered disabled state [ 693.649286][T10174] syz_tun (unregistering): left allmulticast mode [ 693.649317][T10174] syz_tun (unregistering): left promiscuous mode [ 693.649428][T10174] bridge0: port 3(syz_tun) entered disabled state [ 697.247763][T10363] chnl_net:caif_netlink_parms(): no params data found [ 707.886321][T10380] chnl_net:caif_netlink_parms(): no params data found [ 713.931426][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.931553][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.931856][T10363] bridge_slave_0: entered allmulticast mode [ 713.962888][T10363] bridge_slave_0: entered promiscuous mode [ 714.186724][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.186870][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.187165][T10363] bridge_slave_1: entered allmulticast mode [ 714.242915][T10363] bridge_slave_1: entered promiscuous mode [ 715.498659][T10390] chnl_net:caif_netlink_parms(): no params data found [ 716.778386][T10363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.042235][T10363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.046009][T10380] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.046141][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.046393][T10380] bridge_slave_0: entered allmulticast mode [ 717.097503][T10380] bridge_slave_0: entered promiscuous mode [ 717.263183][T10380] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.263364][T10380] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.263632][T10380] bridge_slave_1: entered allmulticast mode [ 717.417844][T10380] bridge_slave_1: entered promiscuous mode [ 723.474145][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 723.543006][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 723.585553][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 723.737219][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 723.738137][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 723.903792][T10380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.833107][T10380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.893601][ T9567] Bluetooth: hci1: command tx timeout [ 726.042707][T10390] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.042842][T10390] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.043184][T10390] bridge_slave_0: entered allmulticast mode [ 726.079482][T10390] bridge_slave_0: entered promiscuous mode [ 727.972088][ T9567] Bluetooth: hci1: command tx timeout [ 728.491098][T10390] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.491265][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.491613][T10390] bridge_slave_1: entered allmulticast mode [ 728.494865][T10390] bridge_slave_1: entered promiscuous mode [ 730.007277][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 730.055363][ T9566] Bluetooth: hci1: command tx timeout [ 730.056440][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 730.074783][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 730.100244][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 730.104079][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 731.690906][T10397] chnl_net:caif_netlink_parms(): no params data found [ 731.746875][T10401] chnl_net:caif_netlink_parms(): no params data found [ 732.141094][ T5832] Bluetooth: hci1: command tx timeout [ 732.423446][ T5832] Bluetooth: hci2: command tx timeout [ 734.453091][ T5832] Bluetooth: hci2: command tx timeout [ 734.954604][ T9567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 735.049775][ T9567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 735.094310][ T9567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 735.107089][ T9567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.109955][ T9567] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 736.532091][ T5832] Bluetooth: hci2: command tx timeout [ 737.249899][ T5832] Bluetooth: hci3: command tx timeout [ 738.609896][ T9567] Bluetooth: hci2: command tx timeout [ 739.358804][ T9567] Bluetooth: hci3: command tx timeout [ 741.415224][ T9567] Bluetooth: hci3: command tx timeout [ 742.026689][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 742.298681][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 742.319942][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 742.338057][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 742.347604][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 743.489828][ T5832] Bluetooth: hci3: command tx timeout [ 744.532219][ T5832] Bluetooth: hci6: command tx timeout [ 744.736468][ T9567] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 744.787328][ T9567] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 744.798987][ T9567] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 744.814825][ T9567] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 744.816255][ T9567] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 746.609801][ T9567] Bluetooth: hci6: command tx timeout [ 747.409724][ T9567] Bluetooth: hci7: command tx timeout [ 747.579718][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.579802][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.689838][ T9567] Bluetooth: hci6: command tx timeout [ 749.490799][ T9567] Bluetooth: hci7: command tx timeout [ 750.839823][ T9567] Bluetooth: hci6: command tx timeout [ 751.570545][ T9567] Bluetooth: hci7: command tx timeout [ 753.649761][ T9567] Bluetooth: hci7: command tx timeout [ 780.607898][T10426] chnl_net:caif_netlink_parms(): no params data found [ 785.850719][T10435] chnl_net:caif_netlink_parms(): no params data found [ 786.157250][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 786.227746][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 786.298065][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 786.299254][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 786.302526][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 787.250840][T10451] chnl_net:caif_netlink_parms(): no params data found [ 790.212876][ T9567] Bluetooth: hci5: command tx timeout [ 790.578721][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 790.651050][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 790.652634][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 790.682276][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 790.686890][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 792.289908][ T9567] Bluetooth: hci5: command tx timeout [ 792.638091][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 792.723325][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 792.727958][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 792.734641][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 792.740487][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 793.090666][ T5832] Bluetooth: hci1: command tx timeout [ 793.159399][T10453] chnl_net:caif_netlink_parms(): no params data found [ 794.386599][ T5832] Bluetooth: hci5: command tx timeout [ 794.929879][ T38] INFO: task kworker/u8:5:67 blocked for more than 143 seconds. [ 794.929920][ T38] Not tainted syzkaller #0 [ 794.929933][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.929943][ T38] task:kworker/u8:5 state:D stack:19968 pid:67 tgid:67 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 794.930014][ T38] Workqueue: netns cleanup_net [ 794.930063][ T38] Call Trace: [ 794.930072][ T38] [ 794.930087][ T38] __schedule+0x1681/0x54c0 [ 794.930157][ T38] ? __pfx___schedule+0x10/0x10 [ 794.930202][ T38] rt_mutex_schedule+0x76/0xf0 [ 794.930236][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 794.930292][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 794.930348][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 794.930387][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 794.930433][ T38] ? rcu_barrier+0x4c/0x580 [ 794.930472][ T38] ? rcu_barrier+0x4c/0x580 [ 794.930513][ T38] ? rcu_barrier+0x4c/0x580 [ 794.930546][ T38] mutex_lock_nested+0x168/0x1d0 [ 794.930588][ T38] rcu_barrier+0x4c/0x580 [ 794.930623][ T38] ? cleanup_net+0x57a/0x800 [ 794.930663][ T38] cleanup_net+0x57f/0x800 [ 794.930701][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 794.930743][ T38] ? process_scheduled_works+0xa70/0x1860 [ 794.930779][ T38] ? process_scheduled_works+0xa70/0x1860 [ 794.930816][ T38] process_scheduled_works+0xb5d/0x1860 [ 794.930887][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 794.930932][ T38] ? assign[ 794.930932][ T38] ? assign_work+0x3d5/0x5e0 [ 794.930974][ T38] worker_thread+0xa53/0xfc0 [ 794.931027][ T38] kthread+0x388/0x470 [ 794.931055][ T38] ? __pfx_worker_thread+0x10/0x10 [ 794.931076][ T38] ? __pfx_kthread+0x10/0x10 [ 794.931105][ T38] ret_from_fork+0x514/0xb70 [ 794.931131][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 794.931170][ T38] ? __switch_to+0xc79/0x1410 [ 794.931207][ T38] ? __pfx_kthread+0x10/0x10 [ 794.931236][ T38] ret_from_fork_asm+0x1a/0x30 [ 794.931281][ T38] [ 794.931463][ T38] INFO: task syz.0.1303:10334 blocked for more than 143 seconds. [ 794.931486][ T38] Not tainted syzkaller #0 [ 794.931498][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.931509][ T38] task:syz.0.1303 state:D stack:23496 pid:10334 tgid:10333 ppid:5819 task_flags:0x400140 flags:0x00080002 [ 794.931573][ T38] Call Trace: [ 794.931580][ T38] [ 794.931594][ T38] __schedule+0x1681/0x54c0 [ 794.931655][ T38] ? __pfx___schedule+0x10/0x10 [ 794.931698][ T38] rt_mutex_schedule+0x76/0xf0 [ 794.931731][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 794.931786][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 794.931826][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 794.931862][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 794.931916][ T38] ? rcu_barrier+0x4c/0x580 [ 794.931956][ T38] ? rcu_barrier+0x4c/0x580 [ 794.931987][ T38] mutex_lock_nested+0x168/0x1d0 [ 794.932021][ T38] ? rt_spin_unlock+0x14f/0x200 [ 794.932061][ T38] rcu_barrier+0x4c/0x580 [ 794.932093][ T38] ? rt_spin_unlock+0x160/0x200 [ 794.932133][ T38] ? sunrpc_destroy_cache_detail+0x159/0x190 [ 794.932184][ T38] nfsd_export_shutdown+0x9b/0x120 [ 794.932225][ T38] ops_undo_list+0x49f/0x940 [ 794.932266][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 794.932298][ T38] ? ops_init+0x469/0x5c0 [ 794.932342][ T38] setup_net+0x2f0/0x340 [ 794.932377][ T38] ? __pfx_setup_net+0x10/0x10 [ 794.932408][ T38] ? mutex_rt_init_lockdep+0x66/0x80 [ 794.932446][ T38] ? preinit_net+0x4b5/0x7d0 [ 794.932480][ T38] copy_net_ns+0x50e/0x730 [ 794.932516][ T38] create_new_namespaces+0x3e7/0x6a0 [ 794.932556][ T38] ? security_capable+0x7e/0x2c0 [ 794.932594][ T38] unshare_nsproxy_namespaces+0x149/0x190 [ 794.932633][ T38] ksys_unshare+0x57d/0x9f0 [ 794.932659][ T38] ? __se_sys_futex+0x3a8/0x450 [ 794.932698][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 794.932723][ T38] ? rcu_is_watching+0x15/0xb0 [ 794.932765][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.932791][ T38] __x64_sys_unshare+0x38/0x50 [ 794.932815][ T38] do_syscall_64+0x15f/0xf80 [ 794.932842][ T38] ? trace_irq_disable+0x3b/0x140 [ 794.932865][ T38] ? clear_bhb_loop+0x40/0x90 [ 794.932895][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.932926][ T38] RIP: 0033:0x7f893d4cc819 [ 794.932952][ T38] RSP: 002b:00007f893b726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 794.932976][ T38] RAX: ffffffffffffffda RBX: 00007f893d745fa0 RCX: 00007f893d4cc819 [ 794.932993][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 794.933008][ T38] RBP: 00007f893d562c91 R08: 0000000000000000 R09: 0000000000000000 [ 794.933022][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.933035][ T38] R13: 00007f893d746038 R14: 00007f893d745fa0 R15: 00007fffe37f6838 [ 794.933071][ T38] [ 794.933110][ T38] [ 794.933110][ T38] Showing all locks held in the system: [ 794.933124][ T38] 3 locks held by rcuc/1/28: [ 794.933152][ T38] 1 lock held by khungtaskd/38: [ 794.933165][ T38] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 794.933226][ T38] 3 locks held by kworker/u8:2/43: [ 794.933239][ T38] #0: ffff88803243e138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 794.933308][ T38] #1: ffffc90000b57c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 794.933378][ T38] #2: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 794.933447][ T38] 8 locks held by kworker/u8:3/44: [ 794.933464][ T38] 3 locks held by kworker/u8:5/67: [ 794.933477][ T38] #0: ffff88801b2a8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 794.933542][ T38] #1: ffffc9000152fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 794.933609][ T38] #2: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.933678][ T38] 6 locks held by kworker/u8:6/147: [ 794.933694][ T38] 6 locks held by kworker/u8:7/1002: [ 794.933707][ T38] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 794.933775][ T38] #1: ffffc90005edfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 794.933846][ T38] #2: ffff88803c684310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 794.933923][ T38] #3: ffff88804da87120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 794.933981][ T38] #4: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 794.934044][ T38] #5: ffff8880b8836e10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 794.934104][ T38] 6 locks held by kworker/u8:9/1119: [ 794.934117][ T38] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 794.934189][ T38] #1: ffffc9000623fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 794.934258][ T38] #2: ffff88802674a310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 794.934344][ T38] #3: ffff88803cb08920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 794.934408][ T38] #4: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 794.934470][ T38] #5: ffff8880b8836e10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 794.934530][ T38] 2 locks held by kworker/u8:10/1423: [ 794.934544][ T38] 6 locks held by kworker/u8:11/1452: [ 794.934557][ T38] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 794.934625][ T38] #1: ffffc90006cbfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 794.934695][ T38] #2: ffff88802b6d8310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 794.934763][ T38] #3: ffff888011064520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 794.934827][ T38] #4: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 794.934893][ T38] #5: ffff8880b8836e10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 794.934951][ T38] 5 locks held by kworker/u8:12/1474: [ 794.934978][ T38] 2 locks held by getty/5566: [ 794.934991][ T38] #0: ffff88803777c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 794.935055][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 794.935119][ T38] 3 locks held by kworker/1:5/5902: [ 794.935132][ T38] #0: ffff88801a04f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 794.935206][ T38] #1: ffffc90005e87c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 794.935274][ T38] #2: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.935339][ T38] 3 locks held by kworker/u8:15/7164: [ 794.935352][ T38] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 794.935420][ T38] #1: ffffc9000e6a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 794.935488][ T38] #2: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 794.935549][ T38] 1 lock held by syz.4.1258/10174: [ 794.935562][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.935627][ T38] 1 lock held by syz.3.1271/10223: [ 794.935641][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.935706][ T38] 1 lock held by syz-executor/10240: [ 794.935719][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.935784][ T38] 1 lock held by syz-executor/10249: [ 794.935797][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.935862][ T38] 1 lock held by syz-executor/10269: [ 794.935875][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.935942][ T38] 4 locks held by kworker/u8:17/10316: [ 794.935956][ T38] 2 locks held by syz.0.1303/10334: [ 794.935969][ T38] #0: ffffffff8f35d120 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 794.936031][ T38] #1: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.936097][ T38] 1 lock held by syz-executor/10363: [ 794.936111][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.936183][ T38] 1 lock held by syz.5.1314/10371: [ 794.936197][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.936261][ T38] 1 lock held by syz-executor/10380: [ 794.936275][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.936340][ T38] 1 lock held by syz-executor/10390: [ 794.936354][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.936420][ T38] 1 lock held by syz-executor/10397: [ 794.936434][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.936499][ T38] 1 lock held by syz-executor/10401: [ 794.936513][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.936582][ T38] 1 lock held by syz-executor/10426: [ 794.936595][ T38] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 794.936661][ T38] 1 lock held by syz-executor/10435: [ 794.936674][ T38] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 794.936738][ T38] 2 locks held by syz-executor/10451: [ 794.936752][ T38] #0: ffffffff8f8bec38 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 794.936822][ T38] #1: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 794.936886][ T38] 4 locks held by syz-executor/10453: [ 794.936902][ T38] 2 locks held by syz-executor/10470: [ 794.936915][ T38] #0: ffffffff8f35d120 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 794.936976][ T38] #1: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 794.937043][ T38] 1 lock held by syz-executor/10479: [ 794.937057][ T38] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 794.937119][ T38] 1 lock held by syz-executor/10482: [ 794.937132][ T38] #0: ffffffff8f36ba38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 794.937202][ T38] [ 794.937208][ T38] ============================================= [ 794.937208][ T38] [ 794.937230][ T38] NMI backtrace for cpu 0 [ 794.937254][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 794.937278][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.937292][ T38] Call Trace: [ 794.937301][ T38] [ 794.937310][ T38] dump_stack_lvl+0xe8/0x150 [ 794.937349][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 794.937383][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 794.937422][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 794.937460][ T38] sys_info+0x135/0x170 [ 794.937491][ T38] watchdog+0xfd3/0x1030 [ 794.937522][ T38] ? watchdog+0x1c9/0x1030 [ 794.937550][ T38] kthread+0x388/0x470 [ 794.937579][ T38] ? __pfx_watchdog+0x10/0x10 [ 794.937598][ T38] ? __pfx_kthread+0x10/0x10 [ 794.937627][ T38] ret_from_fork+0x514/0xb70 [ 794.937652][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 794.937673][ T38] ? __switch_to+0xc79/0x1410 [ 794.937708][ T38] ? __pfx_kthread+0x10/0x10 [ 794.937737][ T38] ret_from_fork_asm+0x1a/0x30 [ 794.937779][ T38] [ 794.937787][ T38] Sending NMI from CPU 0 to CPUs 1: [ 794.937820][ C1] NMI backtrace for cpu 1 [ 794.937836][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 794.937857][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.937868][ C1] RIP: 0010:lock_release+0xa8/0x3c0 [ 794.937897][ C1] Code: 00 0f 85 f7 01 00 00 49 81 3e 40 13 36 93 0f 84 ea 01 00 00 9c 5b fa 48 c7 c7 cd fa 64 8d e8 9f 54 8c 09 65 ff 05 18 fa d1 10 44 24 24 01 00 00 00 83 3d 29 45 eb 0d 00 0f 84 90 01 00 00 41 [ 794.937914][ C1] RSP: 0018:ffffc90000a2ec98 EFLAGS: 00000002 [ 794.937929][ C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 0000000000000046 [ 794.937941][ C1] RDX: 0000000000000100 RSI: ffffffff8d64facd RDI: ffffffff8ba74060 [ 794.937954][ C1] RBP: ffffc90000a2ee18 R08: 0000000000000000 R09: 0000000000000100 [ 794.937965][ C1] R10: 0000000000000100 R11: 0000000000000003 R12: 1ffff92000145da8 [ 794.937977][ C1] R13: ffffffff898d70d1 R14: ffffffff8dfc80c0 R15: ffff88801d6c5c40 [ 794.937991][ C1] FS: 0000000000000000(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000 [ 794.938006][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.938018][ C1] CR2: 00007f905443dc8d CR3: 000000008a5d6000 CR4: 00000000003526f0 [ 794.938035][ C1] Call Trace: [ 794.938041][ C1] [ 794.938048][ C1] ? nf_hook_slow+0x182/0x220 [ 794.938067][ C1] ? __pfx_dst_output+0x10/0x10 [ 794.938092][ C1] nf_hook+0x311/0x3a0 [ 794.938117][ C1] ? nf_hook+0xa1/0x3a0 [ 794.938140][ C1] ? __pfx_nf_hook+0x10/0x10 [ 794.938163][ C1] ? __ip_local_out+0x152/0x6a0 [ 794.938188][ C1] ? __pfx_dst_output+0x10/0x10 [ 794.938214][ C1] ? __ip_local_out+0x152/0x6a0 [ 794.938239][ C1] __ip_local_out+0x558/0x6a0 [ 794.938262][ C1] ? __pfx_dst_output+0x10/0x10 [ 794.938288][ C1] ip_local_out+0x2a/0x190 [ 794.938313][ C1] synproxy_send_client_synack+0x8c1/0xe30 [ 794.938340][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 794.938358][ C1] ? nft_redir_eval+0x1b8/0x4a0 [ 794.938384][ C1] ? synproxy_pernet+0x45/0x270 [ 794.938405][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 794.938427][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 794.938448][ C1] ? nf_ip_checksum+0x13c/0x510 [ 794.938470][ C1] nft_synproxy_do_eval+0x305/0x580 [ 794.938492][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 794.938514][ C1] ? __ip_vs_service_find+0x1c3/0x8e0 [ 794.938541][ C1] nft_do_chain+0x467/0x19f0 [ 794.938560][ C1] ? __ip_vs_service_find+0x8d6/0x8e0 [ 794.938589][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 794.938619][ C1] ? ip_vs_in_hook+0xc50/0x1bf0 [ 794.938637][ C1] ? ip_vs_in_hook+0xc84/0x1bf0 [ 794.938661][ C1] nft_do_chain_inet+0x360/0x4b0 [ 794.938683][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 794.938706][ C1] ? NF_HOOK+0x9e/0x3c0 [ 794.938726][ C1] ? NF_HOOK+0x9e/0x3c0 [ 794.938745][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 794.938765][ C1] nf_hook_slow+0xc5/0x220 [ 794.938784][ C1] NF_HOOK+0x21f/0x3c0 [ 794.938804][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 794.938825][ C1] ? NF_HOOK+0x9e/0x3c0 [ 794.938844][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 794.938863][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 794.938885][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 794.938915][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 794.938937][ C1] NF_HOOK+0x336/0x3c0 [ 794.938956][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 794.938979][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 794.938998][ C1] ? NF_HOOK+0x9e/0x3c0 [ 794.939017][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 794.939037][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 794.939059][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 794.939078][ C1] ? process_backlog+0x271/0xc60 [ 794.939101][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 794.939120][ C1] process_backlog+0x569/0xc60 [ 794.939146][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 794.939170][ C1] __napi_poll+0xab/0x550 [ 794.939194][ C1] net_rx_action+0x696/0xe00 [ 794.939225][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 794.939248][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 794.939273][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 794.939306][ C1] handle_softirqs+0x1de/0x6d0 [ 794.939339][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 794.939367][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 794.939389][ C1] rcu_cpu_kthread+0x9e8/0x1470 [ 794.939414][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 794.939440][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 794.939460][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 794.939485][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 794.939502][ C1] smpboot_thread_fn+0x541/0xa50 [ 794.939521][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 794.939547][ C1] kthread+0x388/0x470 [ 794.939569][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 794.939588][ C1] ? __pfx_kthread+0x10/0x10 [ 794.939611][ C1] ret_from_fork+0x514/0xb70 [ 794.939629][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 794.939646][ C1] ? __switch_to+0xc79/0x1410 [ 794.939671][ C1] ? __pfx_kthread+0x10/0x10 [ 794.939692][ C1] ret_from_fork_asm+0x1a/0x30 [ 794.939719][ C1] [ 795.169830][ T5832] Bluetooth: hci8: command tx timeout [ 795.170407][ T5832] Bluetooth: hci1: command tx timeout [ 795.356663][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 795.356732][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 795.356802][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.356845][ T38] Call Trace: [ 795.356868][ T38] [ 795.356900][ T38] vpanic+0x56c/0xa60 [ 795.356971][ T38] ? __pfx___schedule+0x10/0x10 [ 795.357047][ T38] ? __pfx_vpanic+0x10/0x10 [ 795.357141][ T38] panic+0xc5/0xd0 [ 795.357198][ T38] ? __pfx_panic+0x10/0x10 [ 795.357264][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 795.357363][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 795.357474][ T38] watchdog+0x102c/0x1030 [ 795.357554][ T38] ? watchdog+0x1c9/0x1030 [ 795.357631][ T38] kthread+0x388/0x470 [ 795.357702][ T38] ? __pfx_watchdog+0x10/0x10 [ 795.357722][ T38] ? __pfx_kthread+0x10/0x10 [ 795.357806][ T38] ret_from_fork+0x514/0xb70 [ 795.357881][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 795.357945][ T38] ? __switch_to+0xc79/0x1410 [ 795.358034][ T38] ? __pfx_kthread+0x10/0x10 [ 795.358110][ T38] ret_from_fork_asm+0x1a/0x30 [ 795.358254][ T38] [ 795.358883][ T38] Kernel Offset: disabled