last executing test programs: 8.798598793s ago: executing program 2 (id=62): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108", 0x25}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000002400)=""/4082, 0xff2) 8.638058587s ago: executing program 2 (id=63): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0xd267}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0xfeb1}}, 0x48) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 8.436413872s ago: executing program 2 (id=64): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x20200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0xe8, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) ioctl$UI_DEV_CREATE(r4, 0x5501) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 7.120735526s ago: executing program 1 (id=72): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426", 0x28}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000002400)=""/4082, 0xff2) 6.962418031s ago: executing program 1 (id=73): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000005c0)={0x14, 0x0, 0x0}, &(0x7f0000000840)={0x34, &(0x7f0000000600)={0x20, 0xf, 0xf, "1df212243e9d7de5a7e4d5537664fc"}, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0xa3}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x16}}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 6.951037801s ago: executing program 2 (id=74): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000"], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000080)="646f4aa6cb0956a615") syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201500285d5c2086004021b000100031003090458080119662194090586d7d059f3f1e4c2dc7a6688572c2406e4798969872649cf9117d7ca8c6e0f27c54decddd48a3350b99ba5ac9b13a3e0c9fbd86a0808cc59ebd6cbd4917a46239d369bf77c69f6587b3df5767ac7e8256252100baa4b10d8b3b8b2b3e92cebb235474c06cf5079557181b57b991f017b9963"], 0x0) 5.668487634s ago: executing program 3 (id=75): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0xde5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x7, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xc, 0x1, 0x8, 0x1, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004400010029bd7000048000000100000004004880200001801c004c801700448005006c0000000000c290b77dca18cf9e2b5f92"], 0x38}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt(r1, 0xfffffff7, 0x5, &(0x7f0000000b80)=""/121, &(0x7f0000000580)=0x79) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) listen(r1, 0x402) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30"], 0x428}}, 0x40088) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 5.538476957s ago: executing program 3 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 5.465903879s ago: executing program 3 (id=77): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000094"]) 5.405752931s ago: executing program 3 (id=78): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x8001, 0x6010, 0x0, 0x0}], 0x1}) 5.023271661s ago: executing program 1 (id=80): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0xfffefffd, @local, 0xffffffdc}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb302000000000000007300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fe", 0x1b}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 4.966826442s ago: executing program 0 (id=81): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426", 0x28}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000002400)=""/4082, 0xff2) 4.814311916s ago: executing program 0 (id=82): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x48000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x20200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0xe8, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) ioctl$UI_DEV_CREATE(r4, 0x5501) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 3.88055714s ago: executing program 2 (id=83): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x800004, 0xfffffffe}, &(0x7f0000000580), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r3, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="6d433a3a92646108add89103433b184176fa31e78f66ae5797c32bf23577e3bad416918cb279bfc5f5b2eb666cde21960b6750eee094439dd2975095cf77794211df40650470a37ce0988e295f9f1c7507c11ad1f1f8039d09699f4cae6ed0cb85204ce02e04069e820ee961591155266a585756e9fd8fb08629b4e4c20f52ec7973fbe69325a10d7be48eb1a92c291bedf647da1a6b32d2bf18ff76e78bb0bf9b7f2c265883ed1b3fab047516", 0xad}, {0x0}], 0x3, &(0x7f0000000a40)=ANY=[], 0x2b8}, 0x2, 0x48000, 0x1, {0x2}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) close(r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r8, 0x80ad}], 0x1, 0x2) io_setup(0xc, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) 3.822236552s ago: executing program 0 (id=84): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0xde5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x7, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xc, 0x1, 0x8, 0x1, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004400010029bd7000048000000100000004004880200001801c004c801700448005006c0000000000c290b77dca18cf9e2b5f92"], 0x38}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt(r1, 0xfffffff7, 0x5, &(0x7f0000000b80)=""/121, &(0x7f0000000580)=0x79) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) listen(r1, 0x402) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30"], 0x428}}, 0x40088) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.686285616s ago: executing program 0 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3.52026688s ago: executing program 0 (id=86): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@wrmsr={0x65, 0x20, {0x38c, 0x800}}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x642, 0x7, 0x8, 0x9}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x9d, 0x0, 0xfffffffffffffbff, 0x2}}], 0xc0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) exit(0x3) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x2, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001400090528bd7080faffffff02186d00", @ANYRES32=r1, @ANYBLOB="080001000a2101020800040064010100080002007f00000108000400ffffffff08000a000400000008000200ffffffffad69f0e9b60501fb4d61251e1100c728aaca5cc957e9604ba6606b5d8d9e10517ec60a063a4e1f5f9a8aebe4d01f94611e1147f1fd94cb84399ffd41abbb2e9d3582e0f95a502bd810c435586db6fbc2a34b8e48c6d9c5891d9a88d1257af327231c81440b6c2c75da4a0f1546dcb856d9c3cc74a95d87030e6947ee93c4f0c5fc5618a502c63696b6d0429923618375a4c23e62afccd71d44808b522bcf39422378f7fdabd8fa93ce7b13150a6af8454fd5ea64e1e150ef2f3ef9a3"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32c33d136}, 0x80) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 2.568932144s ago: executing program 0 (id=87): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a2230102030109021200"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.234272993s ago: executing program 3 (id=88): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000005c0)={0x14, 0x0, 0x0}, &(0x7f0000000840)={0x34, &(0x7f0000000600)={0x20, 0xf, 0xf, "1df212243e9d7de5a7e4d5537664fc"}, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0xa3}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x16}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 1.914083411s ago: executing program 1 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) 1.849277633s ago: executing program 1 (id=90): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426", 0x28}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000002400)=""/4082, 0xff2) 1.845221733s ago: executing program 2 (id=91): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.726431706s ago: executing program 1 (id=92): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000"], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000080)="646f4aa6cb0956a615") syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201500285d5c2086004021b000100031003090458080119662194090586d7d059f3f1e4c2dc7a6688572c2406e4798969872649cf9117d7ca8c6e0f27c54decddd48a3350b99ba5ac9b13a3e0c9fbd86a0808cc59ebd6cbd4917a46239d369bf77c69f6587b3df5767ac7e8256252100baa4b10d8b3b8b2b3e92cebb235474c06cf5079557181b57b991f017b9963"], 0x0) 0s ago: executing program 3 (id=93): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0xde5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x7, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xc, 0x1, 0x8, 0x1, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004400010029bd7000048000000100000004004880200001801c004c801700448005006c0000000000c290b77dca18cf9e2b5f92"], 0x38}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt(r1, 0xfffffff7, 0x5, &(0x7f0000000b80)=""/121, &(0x7f0000000580)=0x79) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) listen(r1, 0x402) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30"], 0x428}}, 0x40088) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0xf500}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 75.542152][ T5766] cgroup: Unknown subsys name 'net' [ 75.674176][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.417590][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.132868][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.141529][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.149726][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.158338][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.159521][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.166108][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.174208][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.195718][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.205988][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.208165][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.223026][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.232547][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.241016][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.249105][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.274788][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.287465][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.298820][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.306902][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.315588][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.323994][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.331648][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.341537][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.353401][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.362231][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.810158][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 79.830611][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 79.891047][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 79.954259][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 80.093219][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.101303][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.109581][ T5779] bridge_slave_0: entered allmulticast mode [ 80.117221][ T5779] bridge_slave_0: entered promiscuous mode [ 80.130893][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.138312][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.145556][ T5783] bridge_slave_0: entered allmulticast mode [ 80.155373][ T5783] bridge_slave_0: entered promiscuous mode [ 80.174536][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.182612][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.189910][ T5779] bridge_slave_1: entered allmulticast mode [ 80.196845][ T5779] bridge_slave_1: entered promiscuous mode [ 80.211895][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.219157][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.226777][ T5783] bridge_slave_1: entered allmulticast mode [ 80.234447][ T5783] bridge_slave_1: entered promiscuous mode [ 80.252188][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.259657][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.267163][ T5778] bridge_slave_0: entered allmulticast mode [ 80.274081][ T5778] bridge_slave_0: entered promiscuous mode [ 80.311895][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.320790][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.328388][ T5778] bridge_slave_1: entered allmulticast mode [ 80.335329][ T5778] bridge_slave_1: entered promiscuous mode [ 80.362415][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.369714][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.377643][ T5780] bridge_slave_0: entered allmulticast mode [ 80.384603][ T5780] bridge_slave_0: entered promiscuous mode [ 80.403991][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.416108][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.429005][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.440224][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.447594][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.454842][ T5780] bridge_slave_1: entered allmulticast mode [ 80.462884][ T5780] bridge_slave_1: entered promiscuous mode [ 80.483123][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.494161][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.549099][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.572363][ T5783] team0: Port device team_slave_0 added [ 80.611919][ T5779] team0: Port device team_slave_0 added [ 80.621654][ T5779] team0: Port device team_slave_1 added [ 80.629066][ T5783] team0: Port device team_slave_1 added [ 80.638002][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.649650][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.662387][ T5778] team0: Port device team_slave_0 added [ 80.671742][ T5778] team0: Port device team_slave_1 added [ 80.761164][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.768391][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.795307][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.810910][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.818354][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.844727][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.859003][ T5780] team0: Port device team_slave_0 added [ 80.865672][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.872804][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.899124][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.911397][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.919324][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.945993][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.963629][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.973500][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.000707][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.013428][ T5780] team0: Port device team_slave_1 added [ 81.029855][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.036853][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.065932][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.127407][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.134500][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.160572][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.181902][ T5779] hsr_slave_0: entered promiscuous mode [ 81.189290][ T5779] hsr_slave_1: entered promiscuous mode [ 81.197738][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.204890][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.231182][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.333468][ T5783] hsr_slave_0: entered promiscuous mode [ 81.341236][ T5783] hsr_slave_1: entered promiscuous mode [ 81.348037][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.348112][ T5787] Bluetooth: hci2: command tx timeout [ 81.355917][ T5783] Cannot create hsr debugfs directory [ 81.362250][ T5781] Bluetooth: hci0: command tx timeout [ 81.386064][ T5780] hsr_slave_0: entered promiscuous mode [ 81.394180][ T5780] hsr_slave_1: entered promiscuous mode [ 81.402008][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.410321][ T5780] Cannot create hsr debugfs directory [ 81.427578][ T5781] Bluetooth: hci3: command tx timeout [ 81.432528][ T5778] hsr_slave_0: entered promiscuous mode [ 81.433300][ T5781] Bluetooth: hci1: command tx timeout [ 81.445103][ T5778] hsr_slave_1: entered promiscuous mode [ 81.451844][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.460953][ T5778] Cannot create hsr debugfs directory [ 81.853096][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.869637][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.880428][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.902117][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.949487][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.964201][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.975566][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.986480][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.098999][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.111524][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.124440][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.135210][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.273608][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.283665][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.294430][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.305121][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.333535][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.382418][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.407760][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.441143][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.448626][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.472741][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.479942][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.532789][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.559191][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.566433][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.586304][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.593528][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.669958][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.744958][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.775411][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.782800][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.832517][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.854057][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.861502][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.916611][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.988198][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.995494][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.012654][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.020011][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.050675][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.066753][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.173913][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.362377][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.412545][ T5779] veth0_vlan: entered promiscuous mode [ 83.429413][ T5781] Bluetooth: hci0: command tx timeout [ 83.434905][ T5781] Bluetooth: hci2: command tx timeout [ 83.481217][ T5779] veth1_vlan: entered promiscuous mode [ 83.507571][ T5781] Bluetooth: hci1: command tx timeout [ 83.513094][ T5787] Bluetooth: hci3: command tx timeout [ 83.550540][ T5779] veth0_macvtap: entered promiscuous mode [ 83.563123][ T5779] veth1_macvtap: entered promiscuous mode [ 83.600318][ T5780] veth0_vlan: entered promiscuous mode [ 83.616406][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.645844][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.665712][ T5780] veth1_vlan: entered promiscuous mode [ 83.689002][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.701553][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.710903][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.719918][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.756528][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.793937][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.840723][ T5780] veth0_macvtap: entered promiscuous mode [ 83.886452][ T5780] veth1_macvtap: entered promiscuous mode [ 83.982431][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.994454][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.000802][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.017744][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.020618][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.036017][ T5778] veth0_vlan: entered promiscuous mode [ 84.059529][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.081344][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.092842][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.130477][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.140650][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.150877][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.159737][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.176039][ T5778] veth1_vlan: entered promiscuous mode [ 84.184460][ T5783] veth0_vlan: entered promiscuous mode [ 84.193946][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.202525][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.253008][ T5783] veth1_vlan: entered promiscuous mode [ 84.362563][ T5778] veth0_macvtap: entered promiscuous mode [ 84.406909][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.415229][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.435499][ T5778] veth1_macvtap: entered promiscuous mode [ 84.481193][ T5783] veth0_macvtap: entered promiscuous mode [ 84.541021][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.552240][ T5783] veth1_macvtap: entered promiscuous mode [ 84.558425][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.609682][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.622350][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.634041][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.651758][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.663527][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.676930][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.692116][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.703507][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.714699][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.724899][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.735595][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.748495][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.767597][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.779018][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.792384][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.803708][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.816066][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.839450][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.850033][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.861500][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.873365][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.888676][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.907829][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.916560][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.948535][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.965685][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.976796][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.989483][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.001777][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.016729][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.026159][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.036330][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.045425][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.113039][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.128695][ T27] usb 4-1: config 0 has no interfaces? [ 85.135239][ T27] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 85.167785][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.198643][ T27] usb 4-1: config 0 descriptor?? [ 85.217084][ T5822] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.236935][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.255435][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.297837][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.306177][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.350276][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.365037][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.405940][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.424463][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.426934][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 85.456196][ T5822] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 85.477929][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.507397][ T5781] Bluetooth: hci2: command tx timeout [ 85.513935][ T5787] Bluetooth: hci0: command tx timeout [ 85.521615][ T5822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.537422][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.546400][ T5822] usb 3-1: Product: syz [ 85.550715][ T5822] usb 3-1: Manufacturer: syz [ 85.555367][ T5822] usb 3-1: SerialNumber: syz [ 85.588106][ T5781] Bluetooth: hci1: command tx timeout [ 85.593629][ T5781] Bluetooth: hci3: command tx timeout [ 85.751853][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.773790][ T5822] usb 3-1: 0:2 : does not exist [ 85.809852][ T5822] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 85.853180][ T5822] usb 3-1: USB disconnect, device number 2 [ 85.892641][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.988338][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.162612][ T5839] usb 1-1: device descriptor read/64, error -71 [ 86.423639][ T5860] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.440925][ T5839] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.597654][ T5839] usb 1-1: device descriptor read/64, error -71 [ 86.717957][ T5839] usb usb1-port1: attempt power cycle [ 87.147265][ T5839] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.192759][ T5839] usb 1-1: device descriptor read/8, error -71 [ 87.232598][ T5874] input: syz1 as /devices/virtual/input/input5 [ 87.367395][ T174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.496873][ T5839] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.540182][ T5839] usb 1-1: device descriptor read/8, error -71 [ 87.588042][ T5787] Bluetooth: hci0: command tx timeout [ 87.593863][ T5781] Bluetooth: hci2: command tx timeout [ 87.607287][ T174] usb 3-1: Using ep0 maxpacket: 32 [ 87.624957][ T174] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 87.663929][ T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.667463][ T5787] Bluetooth: hci1: command tx timeout [ 87.673610][ T5839] usb usb1-port1: unable to enumerate USB device [ 87.684235][ T5781] Bluetooth: hci3: command tx timeout [ 87.707281][ T174] usb 3-1: Product: syz [ 87.711528][ T174] usb 3-1: Manufacturer: syz [ 87.728241][ T174] usb 3-1: SerialNumber: syz [ 87.747735][ T174] usb 3-1: config 0 descriptor?? [ 87.760082][ T174] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 87.771900][ T5820] usb 4-1: USB disconnect, device number 2 [ 88.876198][ T5892] loop5: detected capacity change from 0 to 7 [ 88.904546][ T5892] Dev loop5: unable to read RDB block 7 [ 88.907100][ T5819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.910757][ T5892] loop5: AHDI p1 p3 p4 [ 88.923415][ T5892] loop5: partition table partially beyond EOD, truncated [ 88.935184][ T5892] loop5: p1 size 100663296 extends beyond EOD, truncated [ 88.950203][ T5892] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 88.961327][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 89.013001][ T5894] Dev loop5: unable to read RDB block 7 [ 89.022463][ T5894] loop5: AHDI p1 p3 p4 [ 89.028668][ T5894] loop5: partition table partially beyond EOD, truncated [ 89.036560][ T5894] loop5: p1 size 100663296 extends beyond EOD, truncated [ 89.050764][ T5894] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 89.138408][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 89.173440][ T5819] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 89.195095][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 89.206815][ T174] gspca_ov534_9: reg_r err -32 [ 89.214723][ T5819] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.218321][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 89.252149][ T5819] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.282572][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.304726][ T5819] usb 4-1: Product: syz [ 89.314728][ T5819] usb 4-1: Manufacturer: syz [ 89.324837][ T5819] usb 4-1: SerialNumber: syz [ 89.567626][ T5819] usb 4-1: 0:2 : does not exist [ 89.590631][ T5819] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 89.598309][ T174] gspca_ov534_9: Unknown sensor 0000 [ 89.598450][ T174] ov534_9: probe of 3-1:0.0 failed with error -22 [ 89.644470][ T5819] usb 4-1: USB disconnect, device number 3 [ 89.650858][ T5820] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 89.718680][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.849825][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.861476][ T5820] usb 1-1: config 0 has no interfaces? [ 89.868911][ T5820] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 89.879109][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.903175][ T5820] usb 1-1: config 0 descriptor?? [ 90.246064][ T174] usb 3-1: USB disconnect, device number 3 [ 90.247126][ T5819] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.272507][ T5919] input: syz1 as /devices/virtual/input/input6 [ 90.509751][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.536418][ T5819] usb 2-1: config 110 has an invalid interface number: 99 but max is 0 [ 90.545503][ T5819] usb 2-1: config 110 has no interface number 0 [ 90.558178][ T5819] usb 2-1: config 110 interface 99 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 1023 [ 90.571237][ T5819] usb 2-1: config 110 interface 99 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 90.582708][ T5819] usb 2-1: config 110 interface 99 altsetting 232 has an invalid endpoint with address 0x46, skipping [ 90.595163][ T5819] usb 2-1: config 110 interface 99 altsetting 232 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.609091][ T5819] usb 2-1: config 110 interface 99 has no altsetting 0 [ 90.620365][ T5819] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=4c.b7 [ 90.670732][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.678939][ T5819] usb 2-1: Product: syz [ 90.683321][ T5819] usb 2-1: Manufacturer: syz [ 90.689808][ T5819] usb 2-1: SerialNumber: syz [ 90.703281][ T5916] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.713703][ T5916] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.787410][ T174] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.956565][ T5916] netlink: 'syz.1.25': attribute type 13 has an invalid length. [ 91.007293][ T174] usb 3-1: Using ep0 maxpacket: 8 [ 91.020383][ T174] usb 3-1: no configurations [ 91.033219][ T174] usb 3-1: can't read configurations, error -22 [ 91.087966][ T5924] binder_alloc: 5915: pid 5915 spamming oneway? 2 buffers allocated for a total size of 5120 [ 91.118836][ T5924] binder_alloc: 5915: pid 5915 spamming oneway? 3 buffers allocated for a total size of 5128 [ 91.207538][ T174] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.348286][ T5819] usb 2-1: bad CDC descriptors [ 91.356005][ T5819] usb 2-1: bad CDC descriptors [ 91.373458][ T5819] cdc_acm 2-1:110.99: Zero length descriptor references [ 91.380862][ T5819] cdc_acm: probe of 2-1:110.99 failed with error -22 [ 91.395502][ T5819] usb 2-1: USB disconnect, device number 2 [ 91.417101][ T174] usb 3-1: Using ep0 maxpacket: 8 [ 91.427536][ T174] usb 3-1: no configurations [ 91.438732][ T174] usb 3-1: can't read configurations, error -22 [ 91.453621][ T174] usb usb3-port1: attempt power cycle [ 91.787248][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.877186][ T174] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.908558][ T174] usb 3-1: Using ep0 maxpacket: 8 [ 91.925445][ T174] usb 3-1: no configurations [ 91.930789][ T174] usb 3-1: can't read configurations, error -22 [ 91.967223][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 91.975184][ T8] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 91.985991][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 91.994531][ T8] usb 4-1: config 0 has no interface number 0 [ 92.002854][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 92.011807][ T8] usb 4-1: config 0 has no interface number 0 [ 92.020323][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 92.029080][ T8] usb 4-1: config 0 has no interface number 0 [ 92.044949][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 92.056202][ T8] usb 4-1: config 0 has no interface number 0 [ 92.070883][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 92.083147][ T8] usb 4-1: config 0 has no interface number 0 [ 92.089898][ T174] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 92.122739][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 92.131640][ T8] usb 4-1: config 0 has no interface number 0 [ 92.140856][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 92.149661][ T8] usb 4-1: config 0 has no interface number 0 [ 92.158343][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 92.166520][ T8] usb 4-1: config 0 has no interface number 0 [ 92.174342][ T174] usb 3-1: Using ep0 maxpacket: 8 [ 92.182273][ T174] usb 3-1: no configurations [ 92.188625][ T8] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 92.197929][ T174] usb 3-1: can't read configurations, error -22 [ 92.204430][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.213085][ T174] usb usb3-port1: unable to enumerate USB device [ 92.226282][ T8] usb 4-1: Product: syz [ 92.234702][ T8] usb 4-1: Manufacturer: syz [ 92.243268][ T8] usb 4-1: SerialNumber: syz [ 92.254640][ T8] usb 4-1: config 0 descriptor?? [ 92.270401][ T8] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 92.318383][ T9] cfg80211: failed to load regulatory.db [ 92.343354][ T5939] loop5: detected capacity change from 0 to 7 [ 92.351790][ T5939] Dev loop5: unable to read RDB block 7 [ 92.360845][ T5939] loop5: AHDI p1 p3 p4 [ 92.365117][ T5939] loop5: partition table partially beyond EOD, truncated [ 92.373263][ T5939] loop5: p1 size 100663296 extends beyond EOD, truncated [ 92.380050][ T5819] usb 1-1: USB disconnect, device number 6 [ 92.383301][ T5939] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 92.483502][ T5940] Dev loop5: unable to read RDB block 7 [ 92.493793][ T5940] loop5: AHDI p1 p3 p4 [ 92.498809][ T5940] loop5: partition table partially beyond EOD, truncated [ 92.508337][ T5940] loop5: p1 size 100663296 extends beyond EOD, truncated [ 92.521695][ T5940] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 92.596583][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 92.670842][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 92.699949][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 92.973405][ T5952] input: syz1 as /devices/virtual/input/input7 [ 92.979889][ T5819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.227178][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 93.239339][ T5819] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 93.259902][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.275249][ T5819] usb 2-1: Product: syz [ 93.280883][ T5819] usb 2-1: Manufacturer: syz [ 93.285790][ T5819] usb 2-1: SerialNumber: syz [ 93.298078][ T5819] usb 2-1: config 0 descriptor?? [ 93.312745][ T5819] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 94.554028][ T8] etas_es58x 4-1:0.2: could not retrieve the product info string [ 94.557108][ T790] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 94.625549][ T8] usb 4-1: USB disconnect, device number 4 [ 94.637219][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 94.659047][ T8] etas_es58x 4-1:0.2: Disconnecting syz syz [ 94.741535][ T5819] gspca_ov534_9: reg_r err -32 [ 94.781162][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.796057][ T790] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.805942][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.820098][ T790] usb 3-1: config 0 descriptor?? [ 94.832735][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.843644][ T23] usb 1-1: config 0 has no interfaces? [ 94.849301][ T23] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 94.858784][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.873352][ T23] usb 1-1: config 0 descriptor?? [ 95.036549][ T790] usbhid 3-1:0.0: can't add hid device: -71 [ 95.045695][ T790] usbhid: probe of 3-1:0.0 failed with error -71 [ 95.056038][ T790] usb 3-1: USB disconnect, device number 8 [ 95.098532][ T5819] gspca_ov534_9: Unknown sensor 0000 [ 95.098655][ T5819] ov534_9: probe of 2-1:0.0 failed with error -22 [ 95.609725][ T790] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 95.769495][ T8] usb 2-1: USB disconnect, device number 3 [ 95.803938][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.823849][ T790] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.842389][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.853165][ T790] usb 3-1: config 0 descriptor?? [ 96.197223][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.267243][ T790] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 96.282259][ T790] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input8 [ 96.377559][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 96.389184][ T8] usb 2-1: no configurations [ 96.397883][ T8] usb 2-1: can't read configurations, error -22 [ 96.427886][ T790] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 96.485277][ C1] keytouch 0003:0926:3333.0001: Event data for report 0 was too short (8 vs 2) [ 96.557796][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.684708][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.694642][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.710593][ T790] usb 3-1: USB disconnect, device number 9 [ 96.747174][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 96.755328][ T8] usb 2-1: no configurations [ 96.771495][ T8] usb 2-1: can't read configurations, error -22 [ 96.792642][ T8] usb usb2-port1: attempt power cycle [ 97.217305][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.249361][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 97.262409][ T8] usb 2-1: no configurations [ 97.279506][ T8] usb 2-1: can't read configurations, error -22 [ 97.313580][ T9] usb 1-1: USB disconnect, device number 7 [ 97.459288][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.464803][ T5984] loop5: detected capacity change from 0 to 7 [ 97.495180][ T5984] Dev loop5: unable to read RDB block 7 [ 97.502594][ T5984] loop5: AHDI p1 p3 p4 [ 97.508111][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 97.510820][ T5984] loop5: partition table partially beyond EOD, truncated [ 97.514208][ T8] usb 2-1: no configurations [ 97.525215][ T5984] loop5: p1 size 100663296 extends beyond EOD, truncated [ 97.526442][ T8] usb 2-1: can't read configurations, error -22 [ 97.541125][ T8] usb usb2-port1: unable to enumerate USB device [ 97.542945][ T5984] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 97.638587][ T5984] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-16) [ 97.657381][ T5968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.790097][ T5989] input: syz1 as /devices/virtual/input/input9 [ 98.197267][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.337252][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 98.397159][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 98.403949][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 98.421031][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.434344][ T9] usb 4-1: config 0 has no interface number 0 [ 98.445281][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.458672][ T9] usb 4-1: config 0 has no interface number 0 [ 98.471000][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.483806][ T9] usb 4-1: config 0 has no interface number 0 [ 98.493375][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.509066][ T9] usb 4-1: config 0 has no interface number 0 [ 98.516841][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.531951][ T9] usb 4-1: config 0 has no interface number 0 [ 98.546983][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 98.568504][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.576583][ T9] usb 4-1: config 0 has no interface number 0 [ 98.593946][ T8] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 98.611039][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.621535][ T8] usb 3-1: Product: syz [ 98.625887][ T8] usb 3-1: Manufacturer: syz [ 98.630860][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.654173][ T9] usb 4-1: config 0 has no interface number 0 [ 98.665393][ T8] usb 3-1: SerialNumber: syz [ 98.673997][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.688230][ T8] usb 3-1: config 0 descriptor?? [ 98.700477][ T9] usb 4-1: config 0 has no interface number 0 [ 98.721094][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 98.734528][ T9] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 98.747803][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.756246][ T9] usb 4-1: Product: syz [ 98.769269][ T9] usb 4-1: Manufacturer: syz [ 98.774253][ T9] usb 4-1: SerialNumber: syz [ 98.795282][ T9] usb 4-1: config 0 descriptor?? [ 98.811016][ T9] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 99.027331][ T9] etas_es58x 4-1:0.2: could not retrieve the product info string [ 99.207939][ T790] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.277181][ T23] usb 4-1: USB disconnect, device number 5 [ 99.290902][ T23] etas_es58x 4-1:0.2: Disconnecting syz syz [ 99.327569][ T5821] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 99.409296][ T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.423824][ T790] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.434915][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.455350][ T790] usb 1-1: config 0 descriptor?? [ 99.534758][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.555308][ T5821] usb 2-1: config 0 has no interfaces? [ 99.564461][ T5821] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 99.578786][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.591288][ T5821] usb 2-1: config 0 descriptor?? [ 99.684719][ T790] usbhid 1-1:0.0: can't add hid device: -71 [ 99.696730][ T790] usbhid: probe of 1-1:0.0 failed with error -71 [ 99.717484][ T790] usb 1-1: USB disconnect, device number 8 [ 100.114203][ T8] gspca_ov534_9: reg_r err -32 [ 100.297282][ T790] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 100.467225][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.490605][ T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.501938][ T790] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.511273][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.517161][ T8] gspca_ov534_9: Unknown sensor 0000 [ 100.519895][ T8] ov534_9: probe of 3-1:0.0 failed with error -22 [ 100.528030][ T790] usb 1-1: config 0 descriptor?? [ 100.648977][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.661448][ T23] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.671529][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.680853][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.696740][ T6055] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.708621][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 100.919898][ T8] usb 4-1: USB disconnect, device number 6 [ 100.965293][ T790] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 100.989320][ T790] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input10 [ 101.107717][ T790] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 101.192598][ T174] usb 3-1: USB disconnect, device number 10 [ 101.208566][ C1] keytouch 0003:0926:3333.0002: Event data for report 0 was too short (8 vs 1) [ 101.397803][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 101.412075][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.436628][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.458567][ T5821] usb 1-1: USB disconnect, device number 9 [ 101.603388][ T6074] loop5: detected capacity change from 0 to 7 [ 101.613647][ T6074] Dev loop5: unable to read RDB block 7 [ 101.619258][ T8] usb 4-1: config 0 has no interfaces? [ 101.619889][ T6074] loop5: AHDI p1 p3 p4 [ 101.630614][ T6074] loop5: partition table partially beyond EOD, truncated [ 101.632337][ T8] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 101.638574][ T6074] loop5: p1 size 100663296 extends beyond EOD, truncated [ 101.652322][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.664226][ T8] usb 4-1: Product: syz [ 101.664470][ T6074] loop5: p3 size 4261412863 extends beyond EOD, [ 101.668557][ T8] usb 4-1: Manufacturer: syz [ 101.668932][ T6074] truncated [ 101.675262][ T8] usb 4-1: SerialNumber: syz [ 101.694325][ T8] usb 4-1: config 0 descriptor?? [ 101.730785][ T6075] Dev loop5: unable to read RDB block 7 [ 101.736583][ T6075] loop5: AHDI p1 p3 p4 [ 101.742359][ T6075] loop5: partition table partially beyond EOD, truncated [ 101.751514][ T6075] loop5: p1 size 100663296 extends beyond EOD, truncated [ 101.760473][ T6075] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 101.848448][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 101.852127][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 101.948182][ T8] usb 4-1: USB disconnect, device number 7 [ 101.973393][ T6078] input: syz1 as /devices/virtual/input/input11 [ 102.074588][ T5821] usb 2-1: USB disconnect, device number 8 [ 102.437128][ T790] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 102.627247][ T790] usb 1-1: Using ep0 maxpacket: 8 [ 102.634632][ T790] usb 1-1: no configurations [ 102.645386][ T790] usb 1-1: can't read configurations, error -22 [ 102.817143][ T790] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 102.867286][ T5821] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.029020][ T790] usb 1-1: Using ep0 maxpacket: 8 [ 103.035850][ T790] usb 1-1: no configurations [ 103.056253][ T790] usb 1-1: can't read configurations, error -22 [ 103.096299][ T790] usb usb1-port1: attempt power cycle [ 103.114400][ T5821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.128407][ T5821] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 103.147033][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.165567][ T5821] usb 4-1: Product: syz [ 103.176893][ T5821] usb 4-1: Manufacturer: syz [ 103.199182][ T5821] usb 4-1: SerialNumber: syz [ 103.212430][ T5821] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 103.507446][ T790] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 103.540991][ T790] usb 1-1: Using ep0 maxpacket: 8 [ 103.547144][ T790] usb 1-1: no configurations [ 103.551996][ T790] usb 1-1: can't read configurations, error -22 [ 103.558737][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 103.627238][ T5849] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 103.717579][ T790] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 103.749358][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 103.763206][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 103.776486][ T790] usb 1-1: Using ep0 maxpacket: 8 [ 103.781791][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 103.792215][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.800818][ T790] usb 1-1: no configurations [ 103.805546][ T790] usb 1-1: can't read configurations, error -22 [ 103.813291][ T790] usb usb1-port1: unable to enumerate USB device [ 103.828125][ T23] usb 2-1: probing VID:PID(0424:012C) [ 103.836657][ T23] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 103.854174][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.865692][ T5849] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.874927][ T23] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 103.881798][ T23] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 103.888475][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.897205][ T23] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 103.904166][ T23] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 103.915552][ T5849] usb 3-1: config 0 descriptor?? [ 104.000335][ T5821] gspca_mr97310a: reg read [21] error -71 [ 104.006336][ T5821] mr97310a: probe of 4-1:1.0 failed with error -71 [ 104.024488][ T5821] usb 4-1: USB disconnect, device number 8 [ 104.139481][ T5849] usbhid 3-1:0.0: can't add hid device: -71 [ 104.145721][ T5849] usbhid: probe of 3-1:0.0 failed with error -71 [ 104.156612][ T5849] usb 3-1: USB disconnect, device number 11 [ 104.257793][ T23] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 104.459642][ T23] usb 2-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 104.722858][ T5849] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 104.814860][ T6109] program syz.3.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.909416][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.920708][ T5849] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.930661][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.940628][ T5849] usb 3-1: config 0 descriptor?? [ 105.160724][ T5821] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.290547][ T23] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 105.332363][ T790] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 105.355645][ T5849] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 105.366334][ T23] usb 2-1: USB disconnect, device number 9 [ 105.377506][ T790] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 105.394353][ T790] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 105.395830][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.421356][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.432449][ T5821] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 105.440339][ T5849] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input12 [ 105.442508][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.499569][ T5821] usb 4-1: config 0 descriptor?? [ 105.545767][ T6123] input: syz1 as /devices/virtual/input/input13 [ 105.590517][ T5849] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 105.792401][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.809705][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.819703][ T9] usb 3-1: USB disconnect, device number 12 [ 105.935843][ T5821] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.943105][ T5821] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.950366][ T5821] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.957798][ T5821] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.964877][ T5821] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.972472][ T5821] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.980586][ T5821] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 105.992687][ T5821] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 106.097639][ T23] USB vub300 remote SDIO host controller[0] now disconnected [ 106.135602][ T5821] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 106.336365][ T5821] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 106.355402][ T5821] cp2112: probe of 0003:10C4:EA90.0004 failed with error -5 [ 106.475546][ T6127] use of bytesused == 0 is deprecated and will be removed in the future, [ 106.485278][ T6127] use the actual size instead. [ 106.634261][ T6133] Zero length message leads to an empty skb [ 107.954051][ T790] usb 4-1: USB disconnect, device number 9 [ 107.977157][ T5820] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 108.197179][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 108.203997][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.214384][ T5820] usb 1-1: config 0 has no interfaces? [ 108.222634][ T5820] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 108.233803][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.242176][ T5820] usb 1-1: Product: syz [ 108.246639][ T5820] usb 1-1: Manufacturer: syz [ 108.251444][ T5820] usb 1-1: SerialNumber: syz [ 108.258657][ T5820] usb 1-1: config 0 descriptor?? [ 108.274818][ T6115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.447646][ T790] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 108.649289][ T790] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 108.659222][ T790] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 108.669049][ T790] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 108.678407][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.693274][ T790] usb 4-1: probing VID:PID(0424:012C) [ 108.700641][ T790] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 108.707806][ T790] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 108.714383][ T790] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 108.720933][ T790] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 108.727451][ T790] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 108.777128][ T5821] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 108.787367][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 108.962679][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.973733][ T5821] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.980718][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.983333][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.994949][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.012826][ T23] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 109.014719][ T5821] usb 2-1: config 0 descriptor?? [ 109.022583][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.047470][ T23] usb 3-1: config 0 descriptor?? [ 109.102399][ T790] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 109.267230][ T5821] usbhid 2-1:0.0: can't add hid device: -71 [ 109.274580][ T5821] usbhid: probe of 2-1:0.0 failed with error -71 [ 109.284651][ T5821] usb 2-1: USB disconnect, device number 10 [ 109.303223][ T790] usb 4-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 109.488006][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 109.495474][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 109.503043][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 109.514741][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 109.522261][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 109.530424][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 109.543043][ T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 109.553469][ T23] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 109.687193][ T23] cp2112 0003:10C4:EA90.0005: error requesting version [ 109.696750][ T23] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32 [ 109.867149][ T5821] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 110.050516][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.061721][ T5821] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.071014][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.089305][ T5821] usb 2-1: config 0 descriptor?? [ 110.141474][ T790] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 110.169884][ T5849] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 110.180614][ T790] usb 4-1: USB disconnect, device number 10 [ 110.189723][ T5849] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 110.264837][ T790] USB vub300 remote SDIO host controller[0] now disconnected [ 110.307242][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 110.324414][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 110.333375][ C1] preempt_count: 101, expected: 0 [ 110.338503][ C1] RCU nest depth: 0, expected: 0 [ 110.343479][ C1] 1 lock held by swapper/1/0: [ 110.348229][ C1] #0: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 110.358788][ C1] Preemption disabled at: [ 110.358802][ C1] [<0000000000000000>] 0x0 [ 110.367738][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 110.374792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.384947][ C1] Call Trace: [ 110.388251][ C1] [ 110.391116][ C1] dump_stack_lvl+0x18c/0x250 [ 110.395856][ C1] ? show_regs_print_info+0x20/0x20 [ 110.401252][ C1] ? load_image+0x420/0x420 [ 110.405809][ C1] __might_resched+0x48d/0x5f0 [ 110.410691][ C1] ? __might_sleep+0xe0/0xe0 [ 110.415388][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 110.421310][ C1] ? _raw_spin_unlock+0x40/0x40 [ 110.426173][ C1] ? kasan_set_track+0x5f/0x70 [ 110.431006][ C1] ? kasan_save_free_info+0x28/0x40 [ 110.436218][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 110.441513][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 110.447164][ C1] __flush_work+0x10f/0xac0 [ 110.451866][ C1] ? flush_work+0x20/0x20 [ 110.456249][ C1] ? __timer_delete+0x6b/0x290 [ 110.461034][ C1] ? mark_lock+0x94/0x320 [ 110.465390][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 110.471411][ C1] ? mod_delayed_work_on+0x1c0/0x1c0 [ 110.476882][ C1] ? lock_chain_count+0x20/0x20 [ 110.481748][ C1] ? __cancel_work_timer+0x36e/0x560 [ 110.487490][ C1] __cancel_work_timer+0x3f8/0x560 [ 110.492712][ C1] ? cancel_work_sync+0x20/0x20 [ 110.497583][ C1] ? kobject_put+0x260/0x450 [ 110.502205][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 110.507354][ C1] ? kobject_put+0x421/0x450 [ 110.512001][ C1] mmc_free_host+0x19/0x30 [ 110.517049][ C1] call_timer_fn+0x189/0x540 [ 110.521652][ C1] ? kref_get+0x70/0x70 [ 110.525835][ C1] ? call_timer_fn+0xd2/0x540 [ 110.530912][ C1] ? __run_timers+0x810/0x810 [ 110.535607][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.541010][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 110.546324][ C1] ? kref_get+0x70/0x70 [ 110.550526][ C1] __run_timers+0x570/0x810 [ 110.555087][ C1] ? detach_timer+0x2b0/0x2b0 [ 110.559798][ C1] ? lock_chain_count+0x20/0x20 [ 110.564667][ C1] run_timer_softirq+0x67/0xf0 [ 110.569483][ C1] handle_softirqs+0x27d/0x820 [ 110.574272][ C1] ? read_tsc+0x9/0x20 [ 110.578534][ C1] ? ktime_get+0x24b/0x280 [ 110.582980][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 110.587765][ C1] ? do_softirq+0x1a0/0x1a0 [ 110.592370][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 110.597635][ C1] __irq_exit_rcu+0xd3/0x190 [ 110.602266][ C1] ? irq_exit_rcu+0x20/0x20 [ 110.606883][ C1] irq_exit_rcu+0x9/0x20 [ 110.611226][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 110.616884][ C1] [ 110.619836][ C1] [ 110.622797][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.628797][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 110.634462][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 110.654393][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 110.660480][ C1] RAX: 1a44c9d02d6f9d00 RBX: ffffffff81630d54 RCX: 1a44c9d02d6f9d00 [ 110.668469][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 110.676538][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 110.684787][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 110.692855][ C1] R13: dffffc0000000000 R14: 1ffff1100374e780 R15: 0000000000000000 [ 110.701069][ C1] ? do_idle+0x334/0x5c0 [ 110.705349][ C1] default_idle+0x13/0x20 [ 110.709706][ C1] default_idle_call+0x6c/0xa0 [ 110.714615][ C1] do_idle+0x334/0x5c0 [ 110.718711][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 110.723932][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.730117][ C1] cpu_startup_entry+0x43/0x60 [ 110.734911][ C1] start_secondary+0xee/0xf0 [ 110.739604][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 110.745711][ C1] [ 110.748975][ C1] ODEBUG: object ffffc900001f09c0 is NOT on stack ffffc90000180000, but annotated. [ 110.750112][ C1] [ 110.750117][ C1] ====================================================== [ 110.750123][ C1] WARNING: possible circular locking dependency detected [ 110.750130][ C1] syzkaller #0 Tainted: G W [ 110.750139][ C1] ------------------------------------------------------ [ 110.750145][ C1] swapper/1/0 is trying to acquire lock: [ 110.750154][ C1] ffffffff8d1260a0 (console_owner){..-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 110.750206][ C1] [ 110.750206][ C1] but task is already holding lock: [ 110.750211][ C1] ffffffff9750e368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 110.750253][ C1] [ 110.750253][ C1] which lock already depends on the new lock. [ 110.750253][ C1] [ 110.750258][ C1] [ 110.750258][ C1] the existing dependency chain (in reverse order) is: [ 110.750263][ C1] [ 110.750263][ C1] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 110.750287][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 110.750314][ C1] debug_object_activate+0x6c/0x500 [ 110.750334][ C1] insert_work+0x35/0x310 [ 110.750354][ C1] __queue_work+0xbfd/0xfd0 [ 110.750370][ C1] queue_work_on+0x128/0x1f0 [ 110.750386][ C1] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 110.750422][ C1] rcu_init+0x10d/0x160 [ 110.750446][ C1] start_kernel+0x1fd/0x4e0 [ 110.750468][ C1] x86_64_start_reservations+0x2a/0x30 [ 110.750489][ C1] copy_bootdata+0x0/0xd0 [ 110.750508][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 110.750531][ C1] [ 110.750531][ C1] -> #3 (&pool->lock){-.-.}-{2:2}: [ 110.750554][ C1] _raw_spin_lock+0x2e/0x40 [ 110.750577][ C1] __queue_work+0x72f/0xfd0 [ 110.750592][ C1] queue_work_on+0x128/0x1f0 [ 110.750608][ C1] rpm_suspend+0x1133/0x1b60 [ 110.750631][ C1] __pm_runtime_idle+0x12f/0x1a0 [ 110.750653][ C1] __device_attach+0x352/0x420 [ 110.750677][ C1] bus_probe_device+0x180/0x260 [ 110.750697][ C1] device_add+0x87c/0xc40 [ 110.750715][ C1] serial_base_port_add+0x2f6/0x430 [ 110.750733][ C1] serial_core_register_port+0x378/0x20b0 [ 110.750759][ C1] serial8250_register_8250_port+0x15fd/0x1f40 [ 110.750778][ C1] serial_pnp_probe+0x577/0x750 [ 110.750797][ C1] pnp_device_probe+0x305/0x4b0 [ 110.750815][ C1] really_probe+0x247/0xae0 [ 110.750829][ C1] __driver_probe_device+0x1f5/0x390 [ 110.750853][ C1] driver_probe_device+0x4f/0x420 [ 110.750868][ C1] __driver_attach+0x444/0x6d0 [ 110.750891][ C1] bus_for_each_dev+0x235/0x2b0 [ 110.750909][ C1] bus_add_driver+0x340/0x630 [ 110.750930][ C1] driver_register+0x23a/0x310 [ 110.750946][ C1] serial8250_init+0x9a/0x170 [ 110.750966][ C1] do_one_initcall+0x242/0x790 [ 110.750986][ C1] do_initcall_level+0x13d/0x1f0 [ 110.751009][ C1] do_initcalls+0x69/0xd0 [ 110.751031][ C1] kernel_init_freeable+0x3d9/0x560 [ 110.751053][ C1] kernel_init+0x1d/0x1c0 [ 110.751077][ C1] ret_from_fork+0x48/0x80 [ 110.751096][ C1] ret_from_fork_asm+0x11/0x20 [ 110.751116][ C1] [ 110.751116][ C1] -> #2 (&dev->power.lock){-...}-{2:2}: [ 110.751139][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 110.751162][ C1] __pm_runtime_resume+0x10f/0x170 [ 110.751184][ C1] __uart_start+0x171/0x3e0 [ 110.751198][ C1] uart_write+0x449/0x5d0 [ 110.751212][ C1] n_tty_write+0xd3d/0x11e0 [ 110.751233][ C1] file_tty_write+0x529/0x960 [ 110.751252][ C1] vfs_write+0x474/0x9a0 [ 110.751274][ C1] ksys_write+0x151/0x260 [ 110.751295][ C1] do_syscall_64+0x55/0xb0 [ 110.751312][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.751331][ C1] [ 110.751331][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 110.751354][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 110.751377][ C1] serial8250_console_write+0x181/0x18b0 [ 110.751399][ C1] console_flush_all+0x6ad/0xcf0 [ 110.751427][ C1] console_unlock+0xad/0x350 [ 110.751446][ C1] vprintk_emit+0x497/0x610 [ 110.751465][ C1] _printk+0xde/0x130 [ 110.751488][ C1] register_console+0xb96/0xf00 [ 110.751508][ C1] univ8250_console_init+0x45/0x50 [ 110.751529][ C1] console_init+0x17b/0x5d0 [ 110.751549][ C1] start_kernel+0x2c8/0x4e0 [ 110.751570][ C1] x86_64_start_reservations+0x2a/0x30 [ 110.751589][ C1] copy_bootdata+0x0/0xd0 [ 110.751607][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 110.751627][ C1] [ 110.751627][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 110.751647][ C1] __lock_acquire+0x37ef/0x7d80 [ 110.751664][ C1] lock_acquire+0x19e/0x420 [ 110.751680][ C1] console_flush_all+0x676/0xcf0 [ 110.751699][ C1] console_unlock+0xad/0x350 [ 110.751717][ C1] vprintk_emit+0x497/0x610 [ 110.751735][ C1] _printk+0xde/0x130 [ 110.751758][ C1] __debug_object_init+0x18d/0x450 [ 110.751776][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 110.751796][ C1] wakeup_source_unregister+0x116/0x190 [ 110.751813][ C1] mmc_host_classdev_release+0x47/0x100 [ 110.751836][ C1] device_release+0xbc/0x1e0 [ 110.751855][ C1] kobject_put+0x21b/0x450 [ 110.751876][ C1] call_timer_fn+0x189/0x540 [ 110.751892][ C1] __run_timers+0x570/0x810 [ 110.751906][ C1] run_timer_softirq+0x67/0xf0 [ 110.751921][ C1] handle_softirqs+0x27d/0x820 [ 110.751937][ C1] __irq_exit_rcu+0xd3/0x190 [ 110.751952][ C1] irq_exit_rcu+0x9/0x20 [ 110.751966][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 110.751987][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.752005][ C1] pv_native_safe_halt+0xf/0x10 [ 110.752025][ C1] default_idle+0x13/0x20 [ 110.752047][ C1] default_idle_call+0x6c/0xa0 [ 110.752069][ C1] do_idle+0x334/0x5c0 [ 110.752088][ C1] cpu_startup_entry+0x43/0x60 [ 110.752107][ C1] start_secondary+0xee/0xf0 [ 110.752125][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 110.752146][ C1] [ 110.752146][ C1] other info that might help us debug this: [ 110.752146][ C1] [ 110.752152][ C1] Chain exists of: [ 110.752152][ C1] console_owner --> &pool->lock --> &obj_hash[i].lock [ 110.752152][ C1] [ 110.752178][ C1] Possible unsafe locking scenario: [ 110.752178][ C1] [ 110.752183][ C1] CPU0 CPU1 [ 110.752187][ C1] ---- ---- [ 110.752191][ C1] lock(&obj_hash[i].lock); [ 110.752202][ C1] lock(&pool->lock); [ 110.752213][ C1] lock(&obj_hash[i].lock); [ 110.752225][ C1] lock(console_owner); [ 110.752236][ C1] [ 110.752236][ C1] *** DEADLOCK *** [ 110.752236][ C1] [ 110.752239][ C1] 4 locks held by swapper/1/0: [ 110.752249][ C1] #0: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 110.752294][ C1] #1: ffffffff9750e368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 110.752339][ C1] #2: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 110.752386][ C1] #3: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 110.752440][ C1] [ 110.752440][ C1] stack backtrace: [ 110.752446][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 110.752463][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.752471][ C1] Call Trace: [ 110.752476][ C1] [ 110.752482][ C1] dump_stack_lvl+0x18c/0x250 [ 110.752497][ C1] ? load_image+0x420/0x420 [ 110.752515][ C1] ? show_regs_print_info+0x20/0x20 [ 110.752532][ C1] ? print_circular_bug+0x12b/0x1a0 [ 110.752550][ C1] check_noncircular+0x2fc/0x400 [ 110.752568][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 110.752584][ C1] ? lockdep_lock+0xf5/0x230 [ 110.752602][ C1] __lock_acquire+0x37ef/0x7d80 [ 110.752626][ C1] ? verify_lock_unused+0x140/0x140 [ 110.752648][ C1] lock_acquire+0x19e/0x420 [ 110.752662][ C1] ? console_flush_all+0x10b/0xcf0 [ 110.752680][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 110.752694][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 110.752711][ C1] ? read_lock_is_recursive+0x20/0x20 [ 110.752727][ C1] ? __rwlock_init+0x150/0x150 [ 110.752744][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 110.752763][ C1] console_flush_all+0x676/0xcf0 [ 110.752778][ C1] ? console_flush_all+0x10b/0xcf0 [ 110.752795][ C1] ? console_flush_all+0x10b/0xcf0 [ 110.752814][ C1] ? is_console_locked+0x20/0x20 [ 110.752834][ C1] console_unlock+0xad/0x350 [ 110.752851][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 110.752871][ C1] vprintk_emit+0x497/0x610 [ 110.752888][ C1] ? printk_sprint+0x460/0x460 [ 110.752906][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 110.752925][ C1] _printk+0xde/0x130 [ 110.752945][ C1] ? load_image+0x420/0x420 [ 110.752965][ C1] ? alloc_object+0x1c/0x640 [ 110.752981][ C1] ? lock_release+0x8c0/0x8c0 [ 110.752998][ C1] __debug_object_init+0x18d/0x450 [ 110.753015][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 110.753032][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 110.753052][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 110.753072][ C1] ? read_tsc+0x9/0x20 [ 110.753086][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 110.753103][ C1] ? synchronize_srcu+0x25a/0x280 [ 110.753120][ C1] wakeup_source_unregister+0x116/0x190 [ 110.753136][ C1] mmc_host_classdev_release+0x47/0x100 [ 110.753155][ C1] ? mmc_free_host+0x30/0x30 [ 110.753171][ C1] device_release+0xbc/0x1e0 [ 110.753188][ C1] kobject_put+0x21b/0x450 [ 110.753207][ C1] call_timer_fn+0x189/0x540 [ 110.753220][ C1] ? kref_get+0x70/0x70 [ 110.753238][ C1] ? call_timer_fn+0xd2/0x540 [ 110.753251][ C1] ? __run_timers+0x810/0x810 [ 110.753266][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.753285][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 110.753302][ C1] ? kref_get+0x70/0x70 [ 110.753320][ C1] __run_timers+0x570/0x810 [ 110.753338][ C1] ? detach_timer+0x2b0/0x2b0 [ 110.753353][ C1] ? lock_chain_count+0x20/0x20 [ 110.753370][ C1] run_timer_softirq+0x67/0xf0 [ 110.753383][ C1] handle_softirqs+0x27d/0x820 [ 110.753396][ C1] ? read_tsc+0x9/0x20 [ 110.753417][ C1] ? ktime_get+0x24b/0x280 [ 110.753433][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 110.753447][ C1] ? do_softirq+0x1a0/0x1a0 [ 110.753462][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 110.753480][ C1] __irq_exit_rcu+0xd3/0x190 [ 110.753493][ C1] ? irq_exit_rcu+0x20/0x20 [ 110.753509][ C1] irq_exit_rcu+0x9/0x20 [ 110.753521][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 110.753539][ C1] [ 110.753543][ C1] [ 110.753547][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.753562][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 110.753581][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 110.753592][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 110.753604][ C1] RAX: 1a44c9d02d6f9d00 RBX: ffffffff81630d54 RCX: 1a44c9d02d6f9d00 [ 110.753614][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 110.753624][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 110.753634][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 110.753643][ C1] R13: dffffc0000000000 R14: 1ffff1100374e780 R15: 0000000000000000 [ 110.753654][ C1] ? do_idle+0x334/0x5c0 [ 110.753673][ C1] default_idle+0x13/0x20 [ 110.753690][ C1] default_idle_call+0x6c/0xa0 [ 110.753708][ C1] do_idle+0x334/0x5c0 [ 110.753725][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 110.753741][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.753760][ C1] cpu_startup_entry+0x43/0x60 [ 110.753776][ C1] start_secondary+0xee/0xf0 [ 110.753790][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 110.753811][ C1] [ 111.956795][ C1] ------------[ cut here ]------------ [ 111.962354][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 111.971666][ C1] Modules linked in: [ 111.975707][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 111.984218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.995045][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 112.001044][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 6f fe 25 13 48 c7 c1 80 3b 1d 8b 48 c7 c7 e0 3b 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 93 db 48 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 112.021440][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 112.027605][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 1a44c9d02d6f9d00 [ 112.035862][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 112.044113][ C1] RBP: dffffc0000000000 R08: ffffc900001f0527 R09: 1ffff9200003e0a4 [ 112.052105][ C1] R10: dffffc0000000000 R11: fffff5200003e0a5 R12: ffff88801ba73c20 [ 112.060093][ C1] R13: ffff88807712e460 R14: 0000000000000001 R15: ffffffff8acbdf00 [ 112.068075][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 112.077426][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.084204][ C1] CR2: 0000200000001080 CR3: 000000002e051000 CR4: 00000000003506e0 [ 112.092220][ C1] Call Trace: [ 112.095526][ C1] [ 112.098582][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 112.103725][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 112.110164][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 112.116102][ C1] ? read_tsc+0x9/0x20 [ 112.120481][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 112.126145][ C1] ? synchronize_srcu+0x25a/0x280 [ 112.131348][ C1] wakeup_source_unregister+0x116/0x190 [ 112.136918][ C1] mmc_host_classdev_release+0x47/0x100 [ 112.142766][ C1] ? mmc_free_host+0x30/0x30 [ 112.147485][ C1] device_release+0xbc/0x1e0 [ 112.152131][ C1] kobject_put+0x21b/0x450 [ 112.157053][ C1] call_timer_fn+0x189/0x540 [ 112.161673][ C1] ? kref_get+0x70/0x70 [ 112.165854][ C1] ? call_timer_fn+0xd2/0x540 [ 112.170567][ C1] ? __run_timers+0x810/0x810 [ 112.175688][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.180906][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 112.186213][ C1] ? kref_get+0x70/0x70 [ 112.190490][ C1] __run_timers+0x570/0x810 [ 112.195041][ C1] ? detach_timer+0x2b0/0x2b0 [ 112.199822][ C1] ? lock_chain_count+0x20/0x20 [ 112.204982][ C1] run_timer_softirq+0x67/0xf0 [ 112.209763][ C1] handle_softirqs+0x27d/0x820 [ 112.214568][ C1] ? read_tsc+0x9/0x20 [ 112.218817][ C1] ? ktime_get+0x24b/0x280 [ 112.223504][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 112.228396][ C1] ? do_softirq+0x1a0/0x1a0 [ 112.233365][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 112.238596][ C1] __irq_exit_rcu+0xd3/0x190 [ 112.243577][ C1] ? irq_exit_rcu+0x20/0x20 [ 112.248107][ C1] irq_exit_rcu+0x9/0x20 [ 112.252727][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 112.258821][ C1] [ 112.261846][ C1] [ 112.264790][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.271217][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 112.276866][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 112.297006][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 112.303092][ C1] RAX: 1a44c9d02d6f9d00 RBX: ffffffff81630d54 RCX: 1a44c9d02d6f9d00 [ 112.311166][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 112.319245][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 112.327512][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 112.335602][ C1] R13: dffffc0000000000 R14: 1ffff1100374e780 R15: 0000000000000000 [ 112.343687][ C1] ? do_idle+0x334/0x5c0 [ 112.347958][ C1] default_idle+0x13/0x20 [ 112.352308][ C1] default_idle_call+0x6c/0xa0 [ 112.357110][ C1] do_idle+0x334/0x5c0 [ 112.361196][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 112.366674][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.373102][ C1] cpu_startup_entry+0x43/0x60 [ 112.378151][ C1] start_secondary+0xee/0xf0 [ 112.382761][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 112.388967][ C1] [ 112.392037][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.400377][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 112.409031][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.419611][ C1] Call Trace: [ 112.423695][ C1] [ 112.426559][ C1] dump_stack_lvl+0x18c/0x250 [ 112.431605][ C1] ? show_regs_print_info+0x20/0x20 [ 112.437362][ C1] ? load_image+0x420/0x420 [ 112.442092][ C1] panic+0x2ca/0x720 [ 112.446274][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 112.450819][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 112.457081][ C1] __warn+0x2e0/0x470 [ 112.461079][ C1] ? __debug_object_init+0x18d/0x450 [ 112.466467][ C1] ? __debug_object_init+0x18d/0x450 [ 112.472135][ C1] report_bug+0x2be/0x4f0 [ 112.476927][ C1] ? __debug_object_init+0x18d/0x450 [ 112.482421][ C1] ? __debug_object_init+0x18d/0x450 [ 112.487787][ C1] ? __debug_object_init+0x18f/0x450 [ 112.493091][ C1] handle_bug+0xcf/0x120 [ 112.497704][ C1] exc_invalid_op+0x1a/0x50 [ 112.502305][ C1] asm_exc_invalid_op+0x1a/0x20 [ 112.507165][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 112.513096][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 6f fe 25 13 48 c7 c1 80 3b 1d 8b 48 c7 c7 e0 3b 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 93 db 48 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 112.532825][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 112.539443][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 1a44c9d02d6f9d00 [ 112.547681][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 112.555776][ C1] RBP: dffffc0000000000 R08: ffffc900001f0527 R09: 1ffff9200003e0a4 [ 112.564027][ C1] R10: dffffc0000000000 R11: fffff5200003e0a5 R12: ffff88801ba73c20 [ 112.572264][ C1] R13: ffff88807712e460 R14: 0000000000000001 R15: ffffffff8acbdf00 [ 112.580258][ C1] ? __debug_object_init+0x18d/0x450 [ 112.585646][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 112.590865][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 112.597127][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 112.602872][ C1] ? read_tsc+0x9/0x20 [ 112.607042][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 112.612769][ C1] ? synchronize_srcu+0x25a/0x280 [ 112.617984][ C1] wakeup_source_unregister+0x116/0x190 [ 112.623905][ C1] mmc_host_classdev_release+0x47/0x100 [ 112.629564][ C1] ? mmc_free_host+0x30/0x30 [ 112.634164][ C1] device_release+0xbc/0x1e0 [ 112.638853][ C1] kobject_put+0x21b/0x450 [ 112.643282][ C1] call_timer_fn+0x189/0x540 [ 112.647881][ C1] ? kref_get+0x70/0x70 [ 112.652045][ C1] ? call_timer_fn+0xd2/0x540 [ 112.656767][ C1] ? __run_timers+0x810/0x810 [ 112.661548][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.666759][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 112.672149][ C1] ? kref_get+0x70/0x70 [ 112.676404][ C1] __run_timers+0x570/0x810 [ 112.680918][ C1] ? detach_timer+0x2b0/0x2b0 [ 112.685628][ C1] ? lock_chain_count+0x20/0x20 [ 112.690663][ C1] run_timer_softirq+0x67/0xf0 [ 112.695702][ C1] handle_softirqs+0x27d/0x820 [ 112.700647][ C1] ? read_tsc+0x9/0x20 [ 112.704723][ C1] ? ktime_get+0x24b/0x280 [ 112.709253][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 112.714107][ C1] ? do_softirq+0x1a0/0x1a0 [ 112.719401][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 112.724697][ C1] __irq_exit_rcu+0xd3/0x190 [ 112.729646][ C1] ? irq_exit_rcu+0x20/0x20 [ 112.734257][ C1] irq_exit_rcu+0x9/0x20 [ 112.738767][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 112.744452][ C1] [ 112.747471][ C1] [ 112.750523][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.756694][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 112.762344][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 112.782307][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 112.788399][ C1] RAX: 1a44c9d02d6f9d00 RBX: ffffffff81630d54 RCX: 1a44c9d02d6f9d00 [ 112.796389][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 112.804553][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 112.812560][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 112.820544][ C1] R13: dffffc0000000000 R14: 1ffff1100374e780 R15: 0000000000000000 [ 112.828553][ C1] ? do_idle+0x334/0x5c0 [ 112.832905][ C1] default_idle+0x13/0x20 [ 112.837518][ C1] default_idle_call+0x6c/0xa0 [ 112.842394][ C1] do_idle+0x334/0x5c0 [ 112.846765][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 112.852060][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.858240][ C1] cpu_startup_entry+0x43/0x60 [ 112.863070][ C1] start_secondary+0xee/0xf0 [ 112.867675][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 112.873857][ C1] [ 112.877025][ C1] Kernel Offset: disabled [ 112.881379][ C1] Rebooting in 86400 seconds..