last executing test programs: 9.590394391s ago: executing program 3 (id=73): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000006c0)={0x20, 0x0, 0x4, "f926e121"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.037078432s ago: executing program 3 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xb, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.207266163s ago: executing program 3 (id=99): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f00000000c0)={0xa45971c3, 0x1, @qam={0xffff4672, 0x14, 0xb}}) 4.754161398s ago: executing program 3 (id=101): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.314123049s ago: executing program 3 (id=103): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000006c0)={0x20, 0x0, 0x4, "f926e121"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.19136735s ago: executing program 2 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c00000016"], 0xfc}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 3.874432795s ago: executing program 2 (id=108): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, 0x0, 0x0) 3.551505824s ago: executing program 2 (id=109): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x0, 0x4, 0x0, 0x1, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x2, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r5, 0x2000) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 3.076177776s ago: executing program 2 (id=113): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$unix(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f00000000c0)={0x21, 0x1, 0x6, 0xe8fc, 0x6, 0x41}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@loopback, 0xfffffffc, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) pipe(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xea8, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000004d232000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe90000000000000000000000000000000007000000000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000e00041819000000000000000c0015005c07350001000000"], 0xf8}}, 0x0) 3.009779824s ago: executing program 1 (id=114): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @remote, 0xf}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.867228839s ago: executing program 1 (id=115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c000780080005000100000008000600000000000800060000000000080005000000000008000500000000004400"], 0x198}}, 0x0) 2.387498101s ago: executing program 1 (id=117): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x5, 0x76, 0xb, 0x5, 0x6, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0xb, 0x5d, 0x800, 0xf94, 0xff, 0x8, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0xfffffffd, 0x4, 0x5, 0x1000, 0x9, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x0, 0x5, 0x400, 0x5, 0x9, 0x1, 0x8, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x2008, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f6, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x9, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x5, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd4f, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0x7, 0xfffff6d2, 0x0, 0x3, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0xb, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa24, 0x2, 0x9, 0x4007, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x8003, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x5, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x3, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x83b9, 0xc, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x5, 0x0, 0x5, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x4000000, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0x8, 0x3, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x8, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xf, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0xdd4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x1, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xbffeffff, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x9, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0xf9, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x10, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x979, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a7, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xffff2c2c, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0x5, 0x103, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdbffffff, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x8015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0x5, 0x4, 0x6, 0x6, 0x8, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x9, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) write$proc_mixer(0xffffffffffffffff, 0x0, 0xbb) 1.140327918s ago: executing program 1 (id=119): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r1}, 0x10) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 843.149579ms ago: executing program 1 (id=121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 842.212863ms ago: executing program 0 (id=122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 712.898421ms ago: executing program 0 (id=123): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @remote, 0xf}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 657.412537ms ago: executing program 1 (id=124): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x252}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2000}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7d, 0x7, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0xffff, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 656.585945ms ago: executing program 2 (id=125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c000780080005000100000008000600000000000800060000000000080005000000000008000500000000004400"], 0x198}}, 0x0) 554.450909ms ago: executing program 0 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c00000016"], 0xfc}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 509.613028ms ago: executing program 2 (id=127): syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a9200090502101000"], 0x0) 436.226857ms ago: executing program 3 (id=128): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 284.901779ms ago: executing program 0 (id=129): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r1}, 0x10) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 204.389938ms ago: executing program 0 (id=130): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b6800000cc9", 0x26, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xb, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 0 (id=131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. [ 91.755868][ T5592] cgroup: Unknown subsys name 'net' [ 91.918179][ T1612] cfg80211: failed to load regulatory.db [ 92.039308][ T5592] cgroup: Unknown subsys name 'cpuset' [ 92.101136][ T5592] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.127980][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.766465][ T4921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.772698][ T4921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.776385][ T4921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.801108][ T4921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.802830][ T4921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.946091][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.949232][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.998048][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.000146][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.035418][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.036404][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.038915][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.039590][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.040028][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.060037][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.095859][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.100618][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.111162][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.119328][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.131336][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.942661][ T60] Bluetooth: hci0: command tx timeout [ 99.170568][ T60] Bluetooth: hci3: command tx timeout [ 99.250525][ T60] Bluetooth: hci2: command tx timeout [ 99.250533][ T5616] Bluetooth: hci1: command tx timeout [ 99.328330][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.328585][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.328825][ T5609] bridge_slave_0: entered allmulticast mode [ 99.350026][ T5609] bridge_slave_0: entered promiscuous mode [ 99.402079][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.402380][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.402592][ T5609] bridge_slave_1: entered allmulticast mode [ 99.407410][ T5609] bridge_slave_1: entered promiscuous mode [ 99.417068][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.418020][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.418761][ T5614] bridge_slave_0: entered allmulticast mode [ 99.436068][ T5614] bridge_slave_0: entered promiscuous mode [ 99.510739][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.511039][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.511248][ T5614] bridge_slave_1: entered allmulticast mode [ 99.513713][ T5614] bridge_slave_1: entered promiscuous mode [ 99.615250][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.615483][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.615692][ T5612] bridge_slave_0: entered allmulticast mode [ 99.618251][ T5612] bridge_slave_0: entered promiscuous mode [ 99.670990][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.696291][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.696705][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.696995][ T5612] bridge_slave_1: entered allmulticast mode [ 99.699795][ T5612] bridge_slave_1: entered promiscuous mode [ 99.742437][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.742669][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.742895][ T5613] bridge_slave_0: entered allmulticast mode [ 99.745285][ T5613] bridge_slave_0: entered promiscuous mode [ 99.775558][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.788523][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.821456][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.821704][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.821916][ T5613] bridge_slave_1: entered allmulticast mode [ 99.824394][ T5613] bridge_slave_1: entered promiscuous mode [ 99.869643][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.959569][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.990195][ T5609] team0: Port device team_slave_0 added [ 100.019555][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.035916][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.039460][ T5609] team0: Port device team_slave_1 added [ 100.054725][ T5614] team0: Port device team_slave_0 added [ 100.086122][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.114966][ T5614] team0: Port device team_slave_1 added [ 100.202116][ T5612] team0: Port device team_slave_0 added [ 100.227901][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.227915][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.227935][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.283603][ T5612] team0: Port device team_slave_1 added [ 100.286973][ T5613] team0: Port device team_slave_0 added [ 100.289455][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.289467][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.289487][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.305366][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.305417][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.305560][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.394930][ T5613] team0: Port device team_slave_1 added [ 100.411804][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.411817][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.411838][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.495171][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.495185][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.495205][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.564147][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.564161][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.564181][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.566107][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.566118][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.566138][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.667322][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.667336][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.667356][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.759182][ T5609] hsr_slave_0: entered promiscuous mode [ 100.766692][ T5609] hsr_slave_1: entered promiscuous mode [ 101.010618][ T60] Bluetooth: hci0: command tx timeout [ 101.091482][ T5614] hsr_slave_0: entered promiscuous mode [ 101.093374][ T5614] hsr_slave_1: entered promiscuous mode [ 101.094919][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 101.095026][ T5614] Cannot create hsr debugfs directory [ 101.211523][ T5612] hsr_slave_0: entered promiscuous mode [ 101.213219][ T5612] hsr_slave_1: entered promiscuous mode [ 101.214465][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 101.214496][ T5612] Cannot create hsr debugfs directory [ 101.252271][ T60] Bluetooth: hci3: command tx timeout [ 101.295391][ T5613] hsr_slave_0: entered promiscuous mode [ 101.296941][ T5613] hsr_slave_1: entered promiscuous mode [ 101.298277][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 101.298308][ T5613] Cannot create hsr debugfs directory [ 101.330565][ T60] Bluetooth: hci2: command tx timeout [ 101.330727][ T5616] Bluetooth: hci1: command tx timeout [ 102.240475][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.284060][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.303988][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.348579][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.358142][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.387236][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.414232][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.438371][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.582097][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.617067][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.626630][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.659703][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.677194][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.714780][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.747451][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.777299][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.955177][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.986156][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.002613][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.027588][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.039240][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.086219][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.090604][ T60] Bluetooth: hci0: command tx timeout [ 103.137609][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.166676][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.329233][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.330970][ T60] Bluetooth: hci3: command tx timeout [ 103.367485][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.381150][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.410628][ T60] Bluetooth: hci2: command tx timeout [ 103.410663][ T60] Bluetooth: hci1: command tx timeout [ 103.416960][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.448194][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.486634][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.503098][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.546153][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.646881][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.784999][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.816723][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.869503][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.869684][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.973897][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.974527][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.049980][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.128016][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.128205][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.178840][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.228469][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.229173][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.324054][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.369012][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.401224][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.401405][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.499971][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.500141][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.629162][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.699373][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.699545][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.767097][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.767344][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.181389][ T5616] Bluetooth: hci0: command tx timeout [ 105.410829][ T5616] Bluetooth: hci3: command tx timeout [ 105.492930][ T5616] Bluetooth: hci2: command tx timeout [ 105.502254][ T5616] Bluetooth: hci1: command tx timeout [ 105.833607][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.231977][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.252537][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.312264][ T5609] veth0_vlan: entered promiscuous mode [ 106.393233][ T5609] veth1_vlan: entered promiscuous mode [ 106.458081][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.602788][ T5612] veth0_vlan: entered promiscuous mode [ 106.617781][ T5613] veth0_vlan: entered promiscuous mode [ 106.661389][ T5609] veth0_macvtap: entered promiscuous mode [ 106.689991][ T5612] veth1_vlan: entered promiscuous mode [ 106.707385][ T5609] veth1_macvtap: entered promiscuous mode [ 106.733590][ T5613] veth1_vlan: entered promiscuous mode [ 106.814717][ T5614] veth0_vlan: entered promiscuous mode [ 106.842262][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.878725][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.893500][ T5614] veth1_vlan: entered promiscuous mode [ 106.960279][ T3392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.984172][ T3392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.988363][ T5612] veth0_macvtap: entered promiscuous mode [ 107.017775][ T3392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.024195][ T5613] veth0_macvtap: entered promiscuous mode [ 107.039928][ T3392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.058495][ T5612] veth1_macvtap: entered promiscuous mode [ 107.134927][ T5613] veth1_macvtap: entered promiscuous mode [ 107.434114][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.456741][ T5614] veth0_macvtap: entered promiscuous mode [ 107.479322][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.519569][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.533643][ T5614] veth1_macvtap: entered promiscuous mode [ 107.558650][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.629784][ T3392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.651588][ T3392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.672044][ T3392] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.675039][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.675058][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.717160][ T3392] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.737178][ T3392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.788403][ T3392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.801171][ T3392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.845321][ T3392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.866850][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.005787][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.018057][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.018078][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.362478][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.409333][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.460109][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.479046][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.723715][ T324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.723748][ T324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.194089][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.194110][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.382957][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.382980][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.524880][ T5757] capability: warning: `syz.0.5' uses 32-bit capabilities (legacy support in use) [ 109.664778][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.664799][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.855454][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.855473][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.972605][ T5761] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.213461][ T5765] fuse: Bad value for 'fd' [ 110.214495][ T5765] Invalid source name [ 110.214509][ T5765] UBIFS error (pid: 5765): cannot open "./file0", error -22 [ 110.247513][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.247536][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.943817][ T5788] fuse: Bad value for 'fd' [ 111.952688][ T5788] Invalid source name [ 111.952707][ T5788] UBIFS error (pid: 5788): cannot open "./file0", error -22 [ 112.077761][ T5770] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 113.175077][ T5698] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.569801][ T5698] usb 3-1: Using ep0 maxpacket: 16 [ 113.682649][ T49] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.721649][ T5698] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 113.721685][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.730147][ T5698] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.730195][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.730219][ T5698] usb 3-1: Product: syz [ 113.730235][ T5698] usb 3-1: Manufacturer: syz [ 113.730251][ T5698] usb 3-1: SerialNumber: syz [ 113.919407][ T5812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 113.919453][ T5812] netlink: 144 bytes leftover after parsing attributes in process `syz.0.23'. [ 113.942211][ T49] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.947913][ T49] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.947947][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.947969][ T49] usb 4-1: Product: syz [ 113.947985][ T49] usb 4-1: Manufacturer: syz [ 113.948001][ T49] usb 4-1: SerialNumber: syz [ 114.102079][ T5698] usb 3-1: config 0 descriptor?? [ 114.443526][ T5698] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 114.443563][ T5698] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 114.885646][ T5698] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 114.937641][ T5698] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 115.464364][ T49] cdc_ncm 4-1:1.0: failed to get mac address [ 115.558401][ T49] cdc_ncm 4-1:1.0: bind() failure [ 115.562817][ T5698] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 115.574037][ T5698] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 115.768336][ T49] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 115.776392][ T49] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 115.786064][ T49] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 115.986108][ T49] usb 4-1: USB disconnect, device number 2 [ 116.193016][ T5698] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 116.193466][ T5698] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 116.194066][ T5698] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 116.348789][ T5698] usb 3-1: USB disconnect, device number 2 [ 118.245168][ T1612] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.450081][ T1612] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.469835][ T1612] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.469871][ T1612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.469886][ T1612] usb 4-1: Product: syz [ 118.469897][ T1612] usb 4-1: Manufacturer: syz [ 118.469925][ T1612] usb 4-1: SerialNumber: syz [ 118.591623][ T822] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.743519][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 118.747670][ T822] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 118.747704][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.791506][ T822] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.791540][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.791562][ T822] usb 2-1: Product: syz [ 118.791578][ T822] usb 2-1: Manufacturer: syz [ 118.791593][ T822] usb 2-1: SerialNumber: syz [ 118.857760][ T5832] syz.0.31 (5832) used greatest stack depth: 18904 bytes left [ 118.929177][ T822] usb 2-1: config 0 descriptor?? [ 118.983356][ T822] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.983394][ T822] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 119.267419][ T1612] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 119.267506][ T1612] cdc_ncm 4-1:1.0: bind() failure [ 119.293899][ T1612] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 119.293943][ T1612] cdc_ncm 4-1:1.1: bind() failure [ 119.568582][ T822] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 119.569863][ T822] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 120.192751][ T822] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 120.194271][ T822] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 120.829604][ T822] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 120.830858][ T822] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 120.845067][ T822] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 120.906778][ T5784] usb 4-1: USB disconnect, device number 3 [ 120.988787][ T822] usb 2-1: USB disconnect, device number 2 [ 122.391335][ T5698] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.550196][ T5698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.567372][ T5698] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.567405][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.567428][ T5698] usb 1-1: Product: syz [ 122.567443][ T5698] usb 1-1: Manufacturer: syz [ 122.567459][ T5698] usb 1-1: SerialNumber: syz [ 122.970701][ T1612] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.214132][ T1612] usb 4-1: Using ep0 maxpacket: 16 [ 123.216999][ T1612] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 123.217036][ T1612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.259627][ T1612] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.277179][ T1612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.277279][ T1612] usb 4-1: Product: syz [ 123.277296][ T1612] usb 4-1: Manufacturer: syz [ 123.277313][ T1612] usb 4-1: SerialNumber: syz [ 123.319109][ T5698] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 123.319194][ T5698] cdc_ncm 1-1:1.0: bind() failure [ 123.414091][ T1612] usb 4-1: config 0 descriptor?? [ 123.459707][ T1612] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.459743][ T1612] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 123.535712][ T5698] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 123.535822][ T5698] cdc_ncm 1-1:1.1: bind() failure [ 124.105354][ T1612] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 124.105990][ T1612] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 124.715817][ T1612] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 124.716806][ T1612] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 125.282587][ T5698] usb 1-1: USB disconnect, device number 2 [ 125.337252][ T1612] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 125.338289][ T1612] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 125.351914][ T1612] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 125.557685][ T5958] fuse: Bad value for 'fd' [ 125.558737][ T5958] Invalid source name [ 125.558754][ T5958] UBIFS error (pid: 5958): cannot open "./file0", error -22 [ 125.612974][ T1612] usb 4-1: USB disconnect, device number 4 [ 126.780550][ T5698] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.946526][ T5698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.974175][ T5698] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.974207][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.974228][ T5698] usb 1-1: Product: syz [ 126.974243][ T5698] usb 1-1: Manufacturer: syz [ 126.974258][ T5698] usb 1-1: SerialNumber: syz [ 127.310848][ T5986] fuse: Bad value for 'fd' [ 127.316529][ T5986] Invalid source name [ 127.316613][ T5986] UBIFS error (pid: 5986): cannot open "./file0", error -22 [ 127.704522][ T5698] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 127.704604][ T5698] cdc_ncm 1-1:1.0: bind() failure [ 127.854630][ T5698] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 127.854680][ T5698] cdc_ncm 1-1:1.1: bind() failure [ 127.997369][ T5947] syz.1.84 (5947) used greatest stack depth: 18648 bytes left [ 128.070589][ T5784] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.222088][ T5784] usb 4-1: Using ep0 maxpacket: 16 [ 128.229127][ T5784] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 128.229161][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.270561][ T5784] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.270594][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.270616][ T5784] usb 4-1: Product: syz [ 128.270632][ T5784] usb 4-1: Manufacturer: syz [ 128.270647][ T5784] usb 4-1: SerialNumber: syz [ 128.280294][ T5784] usb 4-1: config 0 descriptor?? [ 128.332002][ T5784] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.332059][ T5784] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 128.686083][ T6009] fuse: Bad value for 'fd' [ 128.687227][ T6009] Invalid source name [ 128.687243][ T6009] UBIFS error (pid: 6009): cannot open "./file0", error -22 [ 128.954442][ T5784] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 128.958954][ T5784] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 129.451004][ T9] usb 1-1: USB disconnect, device number 3 [ 129.565684][ T5784] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 129.570230][ T5784] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 130.938150][ T5784] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 130.938617][ T5784] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 130.939994][ T5784] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 131.012516][ T5784] usb 4-1: USB disconnect, device number 5 [ 131.124104][ T6036] Invalid source name [ 131.124123][ T6036] UBIFS error (pid: 6036): cannot open "./file0", error -22 [ 131.730641][ T5819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.817986][ T6056] Invalid source name [ 131.818005][ T6056] UBIFS error (pid: 6056): cannot open "./file0", error -22 [ 131.851324][ T5698] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.934399][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.936965][ T5819] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.936997][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.937019][ T5819] usb 2-1: Product: syz [ 131.937036][ T5819] usb 2-1: Manufacturer: syz [ 131.937052][ T5819] usb 2-1: SerialNumber: syz [ 132.010674][ T5698] usb 3-1: Using ep0 maxpacket: 8 [ 132.026016][ T5698] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 132.026046][ T5698] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.026129][ T5698] usb 3-1: config 0 has no interface number 0 [ 132.026181][ T5698] usb 3-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.082807][ T5698] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 132.082842][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.082864][ T5698] usb 3-1: Product: syz [ 132.082941][ T5698] usb 3-1: Manufacturer: syz [ 132.082958][ T5698] usb 3-1: SerialNumber: syz [ 132.129483][ T5698] usb 3-1: config 0 descriptor?? [ 132.258503][ T5698] ------------[ cut here ]------------ [ 132.258519][ T5698] workqueue: ath6kl_wq is using neither WQ_PERCPU or WQ_UNBOUND. Setting WQ_PERCPU. [ 132.258537][ T5698] WARNING: kernel/workqueue.c:5856 at __alloc_workqueue+0x1d02/0x2070, CPU#1: kworker/1:5/5698 [ 132.258584][ T5698] Modules linked in: [ 132.258627][ T5698] CPU: 1 UID: 0 PID: 5698 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.258655][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.258670][ T5698] Workqueue: usb_hub_wq hub_event [ 132.258702][ T5698] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 132.258731][ T5698] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 132.258751][ T5698] RSP: 0018:ffffc900050aebc8 EFLAGS: 00010287 [ 132.258771][ T5698] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 132.258788][ T5698] RDX: ffffc90018ec9000 RSI: ffff88805d6cfd68 RDI: ffffffff8fd24120 [ 132.258805][ T5698] RBP: 0000000000000000 R08: ffff88804cb39f00 R09: 0000000000000002 [ 132.258821][ T5698] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 132.258837][ T5698] R13: ffff88805d6cfc00 R14: ffffc900050aece0 R15: 0000000000000000 [ 132.258853][ T5698] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 132.258872][ T5698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.258888][ T5698] CR2: 0000555559141a38 CR3: 000000003862c000 CR4: 00000000003526f0 [ 132.258908][ T5698] Call Trace: [ 132.258922][ T5698] [ 132.258952][ T5698] alloc_workqueue_noprof+0xe3/0x210 [ 132.258990][ T5698] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 132.259022][ T5698] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 132.259048][ T5698] ? irqentry_exit+0x218/0x8c0 [ 132.259078][ T5698] ? ath6kl_usb_probe+0x8e/0x1580 [ 132.259125][ T5698] ath6kl_usb_probe+0xaa/0x1580 [ 132.259170][ T5698] ? __pfx_ath6kl_usb_probe+0x10/0x10 [ 132.259218][ T5698] usb_probe_interface+0x659/0xc70 [ 132.259264][ T5698] ? __pfx_usb_probe_interface+0x10/0x10 [ 132.259294][ T5698] really_probe+0x267/0xaf0 [ 132.259366][ T5698] __driver_probe_device+0x1e2/0x350 [ 132.259401][ T5698] driver_probe_device+0x4f/0x240 [ 132.259440][ T5698] __device_attach_driver+0x270/0x410 [ 132.259478][ T5698] bus_for_each_drv+0x25b/0x2f0 [ 132.259503][ T5698] ? __pfx___device_attach_driver+0x10/0x10 [ 132.259537][ T5698] ? __pfx_bus_for_each_drv+0x10/0x10 [ 132.259561][ T5698] ? rt_spin_unlock+0x160/0x200 [ 132.259593][ T5698] __device_attach+0x2c8/0x450 [ 132.259626][ T5698] ? __pfx___device_attach+0x10/0x10 [ 132.259657][ T5698] ? rt_spin_unlock+0x160/0x200 [ 132.259688][ T5698] device_initial_probe+0xa1/0xd0 [ 132.259721][ T5698] bus_probe_device+0x12d/0x220 [ 132.259749][ T5698] device_add+0x7ec/0xb90 [ 132.259783][ T5698] usb_set_configuration+0x1a87/0x2110 [ 132.259844][ T5698] usb_generic_driver_probe+0x8d/0x150 [ 132.259877][ T5698] usb_probe_device+0x1c4/0x3b0 [ 132.259912][ T5698] ? __pfx_usb_probe_device+0x10/0x10 [ 132.259941][ T5698] really_probe+0x267/0xaf0 [ 132.259981][ T5698] __driver_probe_device+0x1e2/0x350 [ 132.260015][ T5698] driver_probe_device+0x4f/0x240 [ 132.260049][ T5698] __device_attach_driver+0x270/0x410 [ 132.260086][ T5698] bus_for_each_drv+0x25b/0x2f0 [ 132.260109][ T5698] ? __pfx___device_attach_driver+0x10/0x10 [ 132.260142][ T5698] ? __pfx_bus_for_each_drv+0x10/0x10 [ 132.260166][ T5698] ? rt_spin_unlock+0x160/0x200 [ 132.260198][ T5698] __device_attach+0x2c8/0x450 [ 132.260232][ T5698] ? __pfx___device_attach+0x10/0x10 [ 132.260263][ T5698] ? rt_spin_unlock+0x160/0x200 [ 132.260295][ T5698] device_initial_probe+0xa1/0xd0 [ 132.260385][ T5698] bus_probe_device+0x12d/0x220 [ 132.260414][ T5698] device_add+0x7ec/0xb90 [ 132.260447][ T5698] usb_new_device+0x9f8/0x16e0 [ 132.260485][ T5698] ? __pfx_usb_new_device+0x10/0x10 [ 132.260520][ T5698] hub_event+0x2a49/0x4f60 [ 132.260603][ T5698] ? __pfx_hub_event+0x10/0x10 [ 132.260632][ T5698] ? process_one_work+0x8be/0x1630 [ 132.260681][ T5698] ? process_one_work+0x8be/0x1630 [ 132.260715][ T5698] process_one_work+0x98b/0x1630 [ 132.260772][ T5698] ? __pfx_process_one_work+0x10/0x10 [ 132.260803][ T5698] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.260851][ T5698] worker_thread+0xb49/0x1140 [ 132.260900][ T5698] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.260946][ T5698] kthread+0x388/0x470 [ 132.260973][ T5698] ? __pfx_worker_thread+0x10/0x10 [ 132.261006][ T5698] ? __pfx_kthread+0x10/0x10 [ 132.261035][ T5698] ret_from_fork+0x514/0xb70 [ 132.261066][ T5698] ? __pfx_ret_from_fork+0x10/0x10 [ 132.261095][ T5698] ? __switch_to+0xc79/0x1410 [ 132.261121][ T5698] ? __pfx_kthread+0x10/0x10 [ 132.261149][ T5698] ret_from_fork_asm+0x1a/0x30 [ 132.261200][ T5698] [ 132.261211][ T5698] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 132.261229][ T5698] CPU: 1 UID: 0 PID: 5698 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.261255][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.261271][ T5698] Workqueue: usb_hub_wq hub_event [ 132.261299][ T5698] Call Trace: [ 132.261317][ T5698] [ 132.261327][ T5698] vpanic+0x56c/0xa60 [ 132.261362][ T5698] ? __pfx__printk+0x10/0x10 [ 132.261388][ T5698] ? __pfx_vpanic+0x10/0x10 [ 132.261419][ T5698] ? is_bpf_text_address+0x292/0x2b0 [ 132.261453][ T5698] ? is_bpf_text_address+0x26/0x2b0 [ 132.261495][ T5698] panic+0xc5/0xd0 [ 132.261530][ T5698] ? __pfx_panic+0x10/0x10 [ 132.261576][ T5698] ? ret_from_fork_asm+0x1a/0x30 [ 132.261614][ T5698] __warn+0x315/0x4c0 [ 132.261646][ T5698] ? __alloc_workqueue+0x1d02/0x2070 [ 132.261676][ T5698] ? __alloc_workqueue+0x1d02/0x2070 [ 132.261706][ T5698] __report_bug+0x339/0x540 [ 132.261736][ T5698] ? __device_attach+0x2c8/0x450 [ 132.261764][ T5698] ? device_initial_probe+0xa1/0xd0 [ 132.261791][ T5698] ? bus_probe_device+0x12d/0x220 [ 132.261818][ T5698] ? __alloc_workqueue+0x1d02/0x2070 [ 132.261846][ T5698] ? __pfx___report_bug+0x10/0x10 [ 132.261875][ T5698] ? device_add+0x7ec/0xb90 [ 132.261925][ T5698] report_bug_entry+0x19a/0x290 [ 132.261959][ T5698] ? __alloc_workqueue+0x1d07/0x2070 [ 132.261985][ T5698] ? __alloc_workqueue+0x1d0c/0x2070 [ 132.262012][ T5698] handle_bug+0xce/0x200 [ 132.262048][ T5698] exc_invalid_op+0x1a/0x50 [ 132.262083][ T5698] asm_exc_invalid_op+0x1a/0x20 [ 132.262107][ T5698] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 132.262137][ T5698] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 132.262157][ T5698] RSP: 0018:ffffc900050aebc8 EFLAGS: 00010287 [ 132.262178][ T5698] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 132.262195][ T5698] RDX: ffffc90018ec9000 RSI: ffff88805d6cfd68 RDI: ffffffff8fd24120 [ 132.262213][ T5698] RBP: 0000000000000000 R08: ffff88804cb39f00 R09: 0000000000000002 [ 132.262228][ T5698] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 132.262244][ T5698] R13: ffff88805d6cfc00 R14: ffffc900050aece0 R15: 0000000000000000 [ 132.262271][ T5698] ? __alloc_workqueue+0x1cfb/0x2070 [ 132.262316][ T5698] ? __alloc_workqueue+0x1cfb/0x2070 [ 132.262365][ T5698] alloc_workqueue_noprof+0xe3/0x210 [ 132.262403][ T5698] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 132.262436][ T5698] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 132.262462][ T5698] ? irqentry_exit+0x218/0x8c0 [ 132.262491][ T5698] ? ath6kl_usb_probe+0x8e/0x1580 [ 132.262539][ T5698] ath6kl_usb_probe+0xaa/0x1580 [ 132.262583][ T5698] ? __pfx_ath6kl_usb_probe+0x10/0x10 [ 132.262632][ T5698] usb_probe_interface+0x659/0xc70 [ 132.262679][ T5698] ? __pfx_usb_probe_interface+0x10/0x10 [ 132.262709][ T5698] really_probe+0x267/0xaf0 [ 132.262750][ T5698] __driver_probe_device+0x1e2/0x350 [ 132.262787][ T5698] driver_probe_device+0x4f/0x240 [ 132.262825][ T5698] __device_attach_driver+0x270/0x410 [ 132.262863][ T5698] bus_for_each_drv+0x25b/0x2f0 [ 132.262888][ T5698] ? __pfx___device_attach_driver+0x10/0x10 [ 132.262922][ T5698] ? __pfx_bus_for_each_drv+0x10/0x10 [ 132.262946][ T5698] ? rt_spin_unlock+0x160/0x200 [ 132.262979][ T5698] __device_attach+0x2c8/0x450 [ 132.263013][ T5698] ? __pfx___device_attach+0x10/0x10 [ 132.263046][ T5698] ? rt_spin_unlock+0x160/0x200 [ 132.263077][ T5698] device_initial_probe+0xa1/0xd0 [ 132.263112][ T5698] bus_probe_device+0x12d/0x220 [ 132.263140][ T5698] device_add+0x7ec/0xb90 [ 132.263173][ T5698] usb_set_configuration+0x1a87/0x2110 [ 132.263235][ T5698] usb_generic_driver_probe+0x8d/0x150 [ 132.263268][ T5698] usb_probe_device+0x1c4/0x3b0 [ 132.263312][ T5698] ? __pfx_usb_probe_device+0x10/0x10 [ 132.263341][ T5698] really_probe+0x267/0xaf0 [ 132.263383][ T5698] __driver_probe_device+0x1e2/0x350 [ 132.263418][ T5698] driver_probe_device+0x4f/0x240 [ 132.263454][ T5698] __device_attach_driver+0x270/0x410 [ 132.263491][ T5698] bus_for_each_drv+0x25b/0x2f0 [ 132.263514][ T5698] ? __pfx___device_attach_driver+0x10/0x10 [ 132.263545][ T5698] ? __pfx_bus_for_each_drv+0x10/0x10 [ 132.263567][ T5698] ? rt_spin_unlock+0x160/0x200 [ 132.263596][ T5698] __device_attach+0x2c8/0x450 [ 132.263627][ T5698] ? __pfx___device_attach+0x10/0x10 [ 132.263655][ T5698] ? rt_spin_unlock+0x160/0x200 [ 132.263684][ T5698] device_initial_probe+0xa1/0xd0 [ 132.263716][ T5698] bus_probe_device+0x12d/0x220 [ 132.263743][ T5698] device_add+0x7ec/0xb90 [ 132.263776][ T5698] usb_new_device+0x9f8/0x16e0 [ 132.263813][ T5698] ? __pfx_usb_new_device+0x10/0x10 [ 132.263848][ T5698] hub_event+0x2a49/0x4f60 [ 132.263926][ T5698] ? __pfx_hub_event+0x10/0x10 [ 132.263954][ T5698] ? process_one_work+0x8be/0x1630 [ 132.264004][ T5698] ? process_one_work+0x8be/0x1630 [ 132.264037][ T5698] process_one_work+0x98b/0x1630 [ 132.264095][ T5698] ? __pfx_process_one_work+0x10/0x10 [ 132.264128][ T5698] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.264173][ T5698] worker_thread+0xb49/0x1140 [ 132.264220][ T5698] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.264266][ T5698] kthread+0x388/0x470 [ 132.264293][ T5698] ? __pfx_worker_thread+0x10/0x10 [ 132.264338][ T5698] ? __pfx_kthread+0x10/0x10 [ 132.264366][ T5698] ret_from_fork+0x514/0xb70 [ 132.264398][ T5698] ? __pfx_ret_from_fork+0x10/0x10 [ 132.264427][ T5698] ? __switch_to+0xc79/0x1410 [ 132.264454][ T5698] ? __pfx_kthread+0x10/0x10 [ 132.264483][ T5698] ret_from_fork_asm+0x1a/0x30 [ 132.264529][ T5698] [ 132.265127][ T5698] Kernel Offset: disabled