last executing test programs: 40.869497791s ago: executing program 3 (id=11): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0xe}], 0x1}, 0x6000000) r2 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') r3 = syz_open_dev$media(0x0, 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) fchdir(r2) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) 40.651813788s ago: executing program 3 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x400000f5, 0x0, 0x7}]}) 39.968203868s ago: executing program 3 (id=15): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) socket$packet(0x11, 0x2, 0x300) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000200)=@secondary) keyctl$set_timeout(0xf, 0x0, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={r1, 0xe, 0xd7, "a19c4f0dc6ccbce46766f39fe17d0b8ba426f6f166550c5dd3618a9bd1456d30650736086e3dc47c88ffb6303e96d7de7162d3f7bb68f216b33f29da3f12e01c7c16c1e2c0aab2fd4ea843826c16dc8f88096c570db8fff30e57f3bc7370d633f1b06616aee7dd6c46884a57bb56de9ef05957e3ce27b22198418966afd1d5491bc3c61a45d1dc31b7ceb66736534804d75db4b443f09fd10f87923cdfcb399d47e8b34814873867132676cb9eb22dff6ccd4afa81043ecb82d6f437da50f3761f202c272df22606e13eec3dcad0eb764a873d4c44867d"}, 0xdf) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) fsmount(0xffffffffffffffff, 0x1, 0x7) 39.718086029s ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x500000, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/../file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 39.60213181s ago: executing program 3 (id=18): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00004e3000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x100000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4000000000000000, 0x0, 0xffffffffffffffff, 0x2000000000000000, 0x2000000000000005, 0x1000], 0xeeee8000, 0x2010d3}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0x106, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0x5, 0x7, 0x1}) 37.545692093s ago: executing program 3 (id=27): personality(0x5400004) personality(0x400000a) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x2010, r1, 0x3) 37.164565799s ago: executing program 32 (id=27): personality(0x5400004) personality(0x400000a) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x2010, r1, 0x3) 10.620119517s ago: executing program 2 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 10.406116352s ago: executing program 2 (id=131): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10002, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x4, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf77f, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x103, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x4, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x2, 0x2, 0x100, 0xd8ce, 0xf, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x10000, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='/dev/kvm\x00', 0x0, 0xb6}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.41389189s ago: executing program 2 (id=136): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = userfaultfd(0x801) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8.347506955s ago: executing program 2 (id=143): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x0, 0xf, 0x6, "428a7482a325"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000f80)={0x44, &(0x7f0000000cc0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x40, 0x1, 0x5d, {0x5d, 0x23, "e4dbd5e913eb085c4ca8b226af62717af0590f86c7893c9df8edd4ed8d390e91b1c1582da04832f4d89cb3a3487b04d1e764ee51612d59a61cec6b947c8141094a89e3d6a12d924b685bfa47d1239254bbf8abdc0276120793925a"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000200)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "2443e45be2aeec5b122ff4a9022350e0"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0xf8, 0x73, "76a4a446", "d1872fb0"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x0, 0x9, 0x2, 0x800, 0x9}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x20, 0x18, 0xfc, "9ac4e6100e4dec26636efaabb99831369a95d35c3624efff1e993708944aa75836262777429f4595956bae4d67f4b14c4309e5b54bf547b673fd4e87b31b852efe0a896743e111aa747cfe7256d4bace334ec5956bd3567230cd81fd3e87ea4036f76dd820c9dcf63212e0fc543000b27cd2f8068678d44a8f5f130c5fe4b90118f84504d747ad675a84b02edffc1fd1ab010df28031e4d7a97a212cca98d75db8d03a06e06fd8f294416fa7b4906efa6ed950834dad19864aa1e9f82a75e86e8429f0e653b2df2f1ecf6834d2c4d272e53409303054e8247028cb0a6facf2849515fe19b9d3b4a7121f01108c84c2f3d66cf4b0fd3d5e468ecf1ea9"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x1c00, 0x1, [0xf]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xd4}, &(0x7f0000000640)={0x40, 0xb, 0x2, "2c99"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0xc}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'E2'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.925764987s ago: executing program 4 (id=151): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0x3, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x13, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x11, 0x0, 0x12a0, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff6, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8ac, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x41, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fdf, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7bffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x0, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x9, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x5, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x400, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0x8ff, 0x1005, 0x1, 0x40004, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x18, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xf000) 5.213508512s ago: executing program 2 (id=154): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x100) write$char_usb(r1, &(0x7f00000000c0)="00aa85ece7252b3c2109a2427e909b599a5543775cff1e07ebcf543747c479db4f34f17402949030d040b2a6579cec6639c12b93f103cfe059fcdce9eba9f64b6a3871098a47c6fc2e210b31e905ec9ab5fcc53c5cbb4f24e47cd68e67e89874ed27874f9e0ad93d41ea704b0ed9b025d549dcd5288c", 0x76) 4.834055604s ago: executing program 4 (id=155): semctl$IPC_RMID(0x0, 0x0, 0x0) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x34, '\x00', @st={0x4, [{0x2, @uvalue=0x1000}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x56}, {0x3, @uvalue=0x4}]}, 0xfd}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x420c40, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000240)={'\x00', 0x26a, 0x1}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x6}) (async) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x6}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="020600000000000004"], 0x40) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x48090) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0xd0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x4, 0xd6, {0xa, 0x25, 0x25, 0x6, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x2eaa09cb99dc33c6, 0x1, 0x2, 0xa, {0xa, 0x25, 0x25, 0x5, 0xf7, 0x3}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0xd0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x4, 0xd6, {0xa, 0x25, 0x25, 0x6, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x2eaa09cb99dc33c6, 0x1, 0x2, 0xa, {0xa, 0x25, 0x25, 0x5, 0xf7, 0x3}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 4.340222212s ago: executing program 1 (id=157): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee01) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.25030038s ago: executing program 4 (id=158): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ppoll(&(0x7f0000000380)=[{r0, 0x6000}, {r0, 0x4}, {r0, 0x400d}, {0xffffffffffffffff, 0x100}, {r1}, {r0, 0xa200}, {0xffffffffffffffff, 0x6}, {r1, 0x200}], 0x8, &(0x7f0000000400), &(0x7f0000000440)={[0x8000000000000000]}, 0x8) 4.223281018s ago: executing program 4 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x200008d5}, 0x34000000) 4.042221897s ago: executing program 4 (id=161): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x100) write$char_usb(r1, &(0x7f00000000c0)="00aa85ece7252b3c2109a2427e909b599a5543775cff1e07ebcf543747c479db4f34f17402949030d040b2a6579cec6639c12b93f103cfe059fcdce9eba9f64b6a3871098a47c6fc2e210b31e905ec9ab5fcc53c5cbb4f24e47cd68e67e89874ed27874f9e0ad93d41ea704b0ed9b025d549dcd5288c", 0x76) 3.203683748s ago: executing program 0 (id=163): r0 = fsmount(0xffffffffffffffff, 0x0, 0x84) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x78b, 0x400001) unlink(&(0x7f0000000140)='./file0\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000480)=0x6) bind$inet(r3, &(0x7f00000004c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r4, 0xe3b6}, {r3, 0x300}, {r3, 0x90}], 0x3, &(0x7f0000000580)={r6, r7+60000000}, &(0x7f00000005c0)={[0x3]}, 0x8) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x4) (async) r8 = dup2(r4, r2) tee(r4, r2, 0x9, 0x4) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) (async) recvfrom$unix(r2, &(0x7f0000000680)=""/165, 0xa5, 0x122, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) waitid$P_PIDFD(0x3, r8, &(0x7f0000000780), 0x8, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000008c0)={0xf, 0x8, 0xfa00, {r1, 0x1}}, 0x10) (async) futex_waitv(&(0x7f0000001940)=[{0x3ff, &(0x7f0000000900), 0x82}, {0x3ff, &(0x7f0000000940)=0x100000001}, {0xfffffffffffffc15, &(0x7f0000000980)=0x80000001, 0x2}, {0xd7a1, &(0x7f00000009c0)=0x1ff, 0x2}, {0x307, &(0x7f0000000a00)=0x82, 0x82}, {0x2, &(0x7f0000000a40)=0x200000000000000, 0x2}, {0xc4, &(0x7f0000000a80)=0x3, 0x82}, {0x1, &(0x7f0000000ac0)=0x8000000000000000, 0x2}, {0x7, &(0x7f0000000b00), 0x2}, {0x44b5, &(0x7f0000000b40)=0x8000000000000000, 0x2}, {0x8, &(0x7f0000000b80)=0x3, 0x2}, {0x401, &(0x7f0000000bc0)=0x5, 0x2}, {0x1, &(0x7f0000000c00)=0x8001, 0x2}, {0x5, &(0x7f0000000c40)=0xff, 0x2}, {0x1, &(0x7f0000000c80)=0x818d, 0x2}, {0x8, &(0x7f0000000cc0)=0x8001, 0x2}, {0xdb, &(0x7f0000000d00)=0x4, 0x82}, {0x1, &(0x7f0000000d40)=0xfffffffffffffffb, 0x2}, {0x0, &(0x7f0000000d80)=0x6, 0x82}, {0x0, &(0x7f0000000dc0)=0x6, 0x2}, {0xfff, &(0x7f0000000e00)=0x10000, 0x82}, {0x9, &(0x7f0000000e40), 0x82}, {0x9283, &(0x7f0000000e80)=0x3, 0x82}, {0x400, &(0x7f0000000ec0)=0x1000, 0x82}, {0x2, &(0x7f0000000f00)=0x5, 0x82}, {0x0, &(0x7f0000000f40)=0x6f2, 0x2}, {0x5, &(0x7f0000000f80)=0x6, 0x82}, {0x1, &(0x7f0000000fc0)=0x5, 0x2}, {0x8, &(0x7f0000001000)=0x800, 0x2}, {0x95, &(0x7f0000001040)=0x2, 0x82}, {0x4, &(0x7f0000001080)=0x9, 0x82}, {0x6, &(0x7f00000010c0)=0x9, 0x82}, {0x8, &(0x7f0000001100)=0xffffffffffff7fff, 0x2}, {0x8000000000000001, &(0x7f0000001140)=0x4, 0x2}, {0x7, &(0x7f0000001180)=0x80000000, 0x2}, {0x5d, &(0x7f00000011c0)=0x10000, 0x82}, {0x5a, &(0x7f0000001200)=0x2, 0x82}, {0x9, &(0x7f0000001240)=0x7, 0x2}, {0x0, &(0x7f0000001280)=0x132c0, 0x82}, {0x101, &(0x7f00000012c0)=0x8, 0x82}, {0x0, &(0x7f0000001300)=0x9, 0x2}, {0x3ff, &(0x7f0000001340)=0xfffffffffffffff8, 0x82}, {0x400, &(0x7f0000001380)=0x9, 0x2}, {0x9, &(0x7f00000013c0)=0x2, 0x2}, {0x3ff, &(0x7f0000001400)=0x4bb, 0x2}, {0x1ff, &(0x7f0000001440)=0x5b20, 0x80}, {0x8, &(0x7f0000001480)=0x8, 0x82}, {0x0, &(0x7f00000014c0)=0x6, 0x4}, {0x5, &(0x7f0000001500)=0x7fffffff, 0x2}, {0x4, &(0x7f0000001540)=0x8, 0x82}, {0xff, &(0x7f0000001580)=0x4, 0x2}, {0x7f, &(0x7f00000015c0)=0x7f, 0x2}, {0x4, &(0x7f0000001600), 0x2}, {0x1, &(0x7f0000001640)=0x7, 0x82}, {0xfffffffffffffffe, &(0x7f0000001680)=0x8, 0x82}, {0x1689413f, &(0x7f00000016c0)=0xa, 0x82}, {0x7fff, &(0x7f0000001700), 0x82}, {0x8f96, &(0x7f0000001740)=0x644, 0x82}, {0x3, &(0x7f0000001780)=0x1, 0x82}, {0xe233, &(0x7f00000017c0)=0x5, 0x82}, {0x1ff, &(0x7f0000001800)=0x2, 0x2}, {0x3, &(0x7f0000001840)=0x6, 0x82}, {0x1ff, &(0x7f0000001880)=0x5, 0x2}, {0x8, &(0x7f00000018c0)=0xffff, 0x2}, {0x7, &(0x7f0000001900)=0x3, 0x2}], 0x41, 0x0, &(0x7f0000001f80)={0x77359400}, 0x1) r10 = fspick(r9, &(0x7f0000001fc0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) ioctl$OCFS2_IOC_RESVSP64(r8, 0x4030582a, &(0x7f0000002000)={0x2, 0x0, 0x65, 0xe10, 0x9, 0x8}) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000002080)={&(0x7f0000002040)=[{0xffffffffffff0001, 0xf2, 0x1}, {0xff, 0x6}, {0xb, 0x3127, 0x2}], 0x3, 0x10, 0x1, 0x1}) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000020c0)={0x0, 0x0, '\x00', @bt={0x5, 0xfffffffd, 0x8, 0x5, 0x5, 0x4, 0x4, 0x9}}) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) (async) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000002180)={0x0, 0xea60}, 0x10) (async) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 2.902265891s ago: executing program 0 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0x7}, 0x14}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) 2.735012459s ago: executing program 0 (id=165): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10002, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x4, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf77f, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x103, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x4, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x2, 0x2, 0x100, 0xd8ce, 0xf, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x10000, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='/dev/kvm\x00', 0x0, 0xb6}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.132438329s ago: executing program 2 (id=166): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001000000107900110040000103030109f4f58a2ea7403ab805c64839970cb73502ff0700000000000004000d58dd010300092191aff80bcd3d65a8"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x30, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec110000150001002dbd7000ffdbdf2510"], 0x11ec}, 0x1, 0x0, 0x0, 0x1}, 0x48090) syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000000009077ea550c637cdeb826f2c7fdf8016f6719f69d16cdb557ca1f45579e246d6247aa1bfd0ea5fc485d60e594d94aa0d3a94675bd63609f5b9dd64fc825f1de26dfdf70563a663bb114d3d1d6f2252029ce2fc939a0db658ac46c1213481196377a3cb5a077c0b3a7ad77dc44a146f68eec40d70bc82760c6ee1f9a94c9559089ab42d3abbab244301a51c467fc5f64864c8f31567f94c9e0d038f41a7f0c53353ed19e0e43abb0be8b945cb7087fee806fee6cb94d4bf183d9857cec35a7549e3a2d1dd7404"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) memfd_create(0x0, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x9, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r6, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.750114954s ago: executing program 1 (id=167): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ppoll(&(0x7f0000000380)=[{r0, 0x6000}, {r0, 0x4}, {r0, 0x400d}, {0xffffffffffffffff, 0x100}, {r1}, {r0, 0xa200}, {0xffffffffffffffff, 0x6}, {r1, 0x200}], 0x8, &(0x7f0000000400), &(0x7f0000000440)={[0x8000000000000000]}, 0x8) 1.614596684s ago: executing program 1 (id=168): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001400010000000000000000000000000aca533eb3aea9e603fe9b22c05e2759e8fda3496db73d3cf551482ca55c1382cdf90ee4fb4b53b5841e527f56c68ceb076f95a9abd183"], 0x64}}, 0x40000) listen(r1, 0xfffffff9) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000ac0)=0x5, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x27, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r3], 0x7) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x80811501, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x3, [{}, {}, {}, {0xffffffff}, {0x1ff}, {}, {0x2000}, {0x4}], 0x54, 0x0, 0x4}}) read$midi(r0, 0x0, 0x14) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000005140), 0x0, 0x1) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) 1.565857403s ago: executing program 0 (id=169): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0xdc6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) recvmmsg(0xffffffffffffffff, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.186695493s ago: executing program 0 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)='grpquota') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.040162674s ago: executing program 0 (id=171): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae8000000000a0101000000000000000005"], 0x238}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) r1 = fanotify_init(0x20, 0x2) write(r1, &(0x7f0000000040)="1ce6545f214cdac50000b6ccca31e9667bdf4d8ddac8ce174e8bd3a610e9c189708d1b8cb8fae4861a0ca54b8871a07dd916f7315279f5695cccac930e4da144", 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xe0, &(0x7f0000000380)={[{0xa9, 0x4e00, "ddbd8ce70db73c5242ad6d5d7dbec1cb85b881caaf12e7be1086a107048d407d2f36af4b48d2f2252acd5ebefb49bc6feb9b8f4ccf17c9ea2a3a82be7e138e40a4ba6adb900ff59ecf30a9886c01e3ea15e72c148e1b2b96fddc20c7303af383112a2bddba3fc014add3d59af77495f2e8e957e8ff416a519b803ddc5490be1135c5859a9c40cf37347f87ae5c723f4f31aae941a9d1d6c97cfbda4a9f8da95b709f56ef295c54a432"}, {0x29, 0x4e00, "4aa9a435ddfdd77dcdab7bf008da9669a2bcf741a05ee57fc659f7c0e14656b394ec4b84c9b84f2f8f"}]}) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @none, 0x3, 0x2}, 0xe) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) close(0x4) 940.936913ms ago: executing program 4 (id=172): syz_usb_connect$midi(0x0, 0x48, &(0x7f0000000440)=ANY=[@ANYBLOB="120150020000001030144b4741000102030109023600010108400009040000020103308109050a0200"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x8380, 0x1850, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0xf, 0x7, 0x1, {0x22, 0x888}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xb0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x4, 0x4}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xd2, 0x5, 0x9, 0x10, 0x40}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x4, 0xb6ec}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x100a}}]}) 706.645742ms ago: executing program 1 (id=173): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1}}}], 0x20}, 0x4008890) 702.696365ms ago: executing program 1 (id=174): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e22, @empty}}, 0x6}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 0s ago: executing program 1 (id=175): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0xdc, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0xe, 0xe0, 0x7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x2d, 0x7}, [@mixer_unit={0x6, 0x24, 0x5, 0x1, 0x9, "1b"}, @feature_unit={0x11, 0x24, 0x7, 0x1, 0x3, [0x6, 0xc, 0x3]}, @selector_unit={0xc, 0x24, 0xc, 0x7, 0x7, "de4bf10d3a48a7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x0, 0xb7, "7f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xfe, 0x8, 0x55, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x5, 0x9, {0xa, 0x25, 0x25, 0x62, 0x2f, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x5, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x98, 0x8, 0x8, 0xa, 0x71}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x0, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x1, {0xa, 0x25, 0x25, 0x3, 0xa, 0x1}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x7, 0x28, 0x8, 0xff, 0xe}, 0x36, &(0x7f00000003c0)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x1, 0x5, 0x8, 0x81}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x6, 0xf00f, 0x0, [0xf0, 0x3f00, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x9, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x1, 0x4}]}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0xae, &(0x7f0000000440)=@string={0xae, 0x3, "d0c3188c876c1d43d8db83d65756b1ae3757798320aee79b5c23f5814c5ef593d0f4a4f2905ef663f4d2cd5be7af94fcd88d15e57f814ab40653fb7838bfe350877503b8d21b224995b513cb943ab06f899c45508926287c2e67bd8732915dfb9135040188fa5c2c1212bfe76e135d673784baf0804567d3536cbc7a048f03a7387cbf00fb07a185d09ae663e196c17f048ae7f37dbd816085c2cc3d9c33eba894bd7cf70f438bc37f9c1a55"}}, {0x23, &(0x7f0000000500)=@string={0x23, 0x3, "b9d975532e085bae12653ae13fb0eeef439f887a6d01c6bcd63e3069b721b0cead"}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x24}}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1000001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd5) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f86, 0x3, 0x9, 0x1, 0x8, 0x8, 0x722, 0x5, 0xb, 0x8, 0x3f, 0xb763599953cb091e, {0xf56, 0x6fd8e84b}, 0x3, 0xed}}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfffffffd, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04300381c900c3faa2be800ed21c1702322a5085625c53d0496acc0d526aded0958b309e1d2a82ebd8cb936b6b36097d377d92b900a02eb040ca957e931af810f4c8c08d0c1bf79ae5f13c1c2fb97c4125c2c86e28d049fe13220e81b213a2d9b4919a6d1d"], 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 75.963028][ T5594] cgroup: Unknown subsys name 'net' [ 76.202106][ T5594] cgroup: Unknown subsys name 'cpuset' [ 76.257144][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.926900][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.222148][ T4926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.245956][ T4926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.269909][ T4926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.289248][ T4926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.291295][ T4926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.291454][ T4926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.294821][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.295501][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.310337][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.357753][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.365306][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.378004][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.378916][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.380650][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.384204][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.390121][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.408418][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.412410][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.417370][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.420449][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.368433][ T61] Bluetooth: hci1: command tx timeout [ 82.446665][ T5614] Bluetooth: hci3: command tx timeout [ 82.446834][ T61] Bluetooth: hci0: command tx timeout [ 82.472278][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.473109][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.473270][ T5605] bridge_slave_0: entered allmulticast mode [ 82.475113][ T5605] bridge_slave_0: entered promiscuous mode [ 82.482512][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.482776][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.483302][ T5608] bridge_slave_0: entered allmulticast mode [ 82.487185][ T5608] bridge_slave_0: entered promiscuous mode [ 82.527375][ T61] Bluetooth: hci2: command tx timeout [ 82.540716][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.540954][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.541168][ T5605] bridge_slave_1: entered allmulticast mode [ 82.543070][ T5605] bridge_slave_1: entered promiscuous mode [ 82.544072][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.544237][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.544366][ T5608] bridge_slave_1: entered allmulticast mode [ 82.546090][ T5608] bridge_slave_1: entered promiscuous mode [ 82.633945][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.634145][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.635244][ T5606] bridge_slave_0: entered allmulticast mode [ 82.637331][ T5606] bridge_slave_0: entered promiscuous mode [ 82.697390][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.697624][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.697858][ T5606] bridge_slave_1: entered allmulticast mode [ 82.699594][ T5606] bridge_slave_1: entered promiscuous mode [ 82.705411][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.713359][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.713702][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.713963][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.714169][ T5607] bridge_slave_0: entered allmulticast mode [ 82.720017][ T5607] bridge_slave_0: entered promiscuous mode [ 82.755921][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.763377][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.763950][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.764215][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.764450][ T5607] bridge_slave_1: entered allmulticast mode [ 82.767863][ T5607] bridge_slave_1: entered promiscuous mode [ 82.852737][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.903723][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.906220][ T5605] team0: Port device team_slave_0 added [ 82.910899][ T5608] team0: Port device team_slave_0 added [ 82.922300][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.943419][ T5605] team0: Port device team_slave_1 added [ 82.945719][ T5608] team0: Port device team_slave_1 added [ 82.959477][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.372523][ T5606] team0: Port device team_slave_0 added [ 83.415959][ T5606] team0: Port device team_slave_1 added [ 83.418647][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.418661][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.418683][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.423020][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.423031][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.423054][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.430005][ T5607] team0: Port device team_slave_0 added [ 83.455706][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.455725][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.455746][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.461391][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.461406][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.461429][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.467496][ T5607] team0: Port device team_slave_1 added [ 83.543892][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.543907][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.543930][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.583011][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.583025][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.583048][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.590995][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.591009][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.591031][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.658012][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.658028][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.658052][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.736658][ T5605] hsr_slave_0: entered promiscuous mode [ 83.738828][ T5605] hsr_slave_1: entered promiscuous mode [ 83.793718][ T5608] hsr_slave_0: entered promiscuous mode [ 83.794826][ T5608] hsr_slave_1: entered promiscuous mode [ 83.795775][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 83.795857][ T5608] Cannot create hsr debugfs directory [ 83.847736][ T5606] hsr_slave_0: entered promiscuous mode [ 83.850109][ T5606] hsr_slave_1: entered promiscuous mode [ 83.850939][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 83.850961][ T5606] Cannot create hsr debugfs directory [ 83.921646][ T5607] hsr_slave_0: entered promiscuous mode [ 83.922722][ T5607] hsr_slave_1: entered promiscuous mode [ 83.923548][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 83.923569][ T5607] Cannot create hsr debugfs directory [ 84.459297][ T61] Bluetooth: hci1: command tx timeout [ 84.537513][ T5614] Bluetooth: hci3: command tx timeout [ 84.537601][ T61] Bluetooth: hci0: command tx timeout [ 84.616889][ T61] Bluetooth: hci2: command tx timeout [ 84.836322][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.887934][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.906334][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.940458][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.942097][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.980991][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.000674][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.041757][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.141907][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.181347][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.186192][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.220986][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.226411][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.259724][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.291172][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.320666][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.439210][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.481922][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.502363][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.542542][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.547920][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.581049][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.620256][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.663594][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.783624][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.831412][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.844863][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.883273][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.896554][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.934057][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.945744][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.973964][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.049973][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.143559][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.186139][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.186295][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.218996][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.240642][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.240789][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.331376][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.375446][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.375607][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.398421][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.442746][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.443081][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.519790][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.527848][ T61] Bluetooth: hci1: command tx timeout [ 86.579104][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.597897][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.598094][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.606702][ T5614] Bluetooth: hci3: command tx timeout [ 86.606786][ T61] Bluetooth: hci0: command tx timeout [ 86.684692][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.684887][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.686651][ T61] Bluetooth: hci2: command tx timeout [ 86.751153][ T822] cfg80211: failed to load regulatory.db [ 86.830802][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.871154][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.871282][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.923204][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.923391][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.594497][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.076125][ T5605] veth0_vlan: entered promiscuous mode [ 88.096319][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.158268][ T5605] veth1_vlan: entered promiscuous mode [ 88.292257][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.417784][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.435343][ T5605] veth0_macvtap: entered promiscuous mode [ 88.453701][ T5606] veth0_vlan: entered promiscuous mode [ 88.472775][ T5605] veth1_macvtap: entered promiscuous mode [ 88.505667][ T5606] veth1_vlan: entered promiscuous mode [ 88.570824][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.594672][ T5608] veth0_vlan: entered promiscuous mode [ 88.605707][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.606912][ T61] Bluetooth: hci1: command tx timeout [ 88.674350][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.687905][ T5614] Bluetooth: hci3: command tx timeout [ 88.688388][ T61] Bluetooth: hci0: command tx timeout [ 88.702397][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.715731][ T5608] veth1_vlan: entered promiscuous mode [ 88.725717][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.741270][ T5607] veth0_vlan: entered promiscuous mode [ 88.742815][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.768350][ T61] Bluetooth: hci2: command tx timeout [ 88.840836][ T5606] veth0_macvtap: entered promiscuous mode [ 88.863764][ T5607] veth1_vlan: entered promiscuous mode [ 88.918565][ T5606] veth1_macvtap: entered promiscuous mode [ 89.279200][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.330930][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.331843][ T5608] veth0_macvtap: entered promiscuous mode [ 89.373316][ T1548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.373341][ T1548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.395385][ T100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.399137][ T5608] veth1_macvtap: entered promiscuous mode [ 89.414877][ T100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.431596][ T100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.452812][ T100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.456124][ T5607] veth0_macvtap: entered promiscuous mode [ 89.552994][ T5607] veth1_macvtap: entered promiscuous mode [ 89.579159][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.579179][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.657952][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.797082][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.871565][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.983865][ T3649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.998309][ T3649] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.002746][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.003285][ T3649] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.008307][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.099018][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.130029][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.145577][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.145595][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.163506][ T100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.181638][ T100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.573503][ T3649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.573520][ T3649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.835317][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.835336][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.202775][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.202794][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.350628][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.350644][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.449150][ T61] Bluetooth: hci3: connection err: -111 [ 91.504662][ T822] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.569400][ T3649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.569419][ T3649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.745011][ T822] usb 1-1: config 201 has an invalid interface number: 249 but max is 0 [ 91.745039][ T822] usb 1-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 91.745057][ T822] usb 1-1: config 201 has no interface number 0 [ 91.745101][ T822] usb 1-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 91.745125][ T822] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.745150][ T822] usb 1-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.745173][ T822] usb 1-1: config 201 interface 249 has no altsetting 0 [ 91.826830][ T822] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 91.826856][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.826874][ T822] usb 1-1: Product: syz [ 91.826887][ T822] usb 1-1: Manufacturer: syz [ 91.826901][ T822] usb 1-1: SerialNumber: syz [ 92.253260][ T5763] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.714555][ T822] ath6kl: Failed to submit usb control message: -71 [ 93.714604][ T822] ath6kl: unable to send the bmi data to the device: -71 [ 93.714618][ T822] ath6kl: Unable to send get target info: -71 [ 93.749648][ T822] ath6kl: Failed to init ath6kl core: -71 [ 93.776263][ T5613] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.818912][ T822] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 93.972032][ T822] usb 1-1: USB disconnect, device number 2 [ 94.047164][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.047196][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.047230][ T5613] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 94.047250][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.118455][ T5613] usb 3-1: config 0 descriptor?? [ 94.477684][ T5787] capability: warning: `syz.3.9' uses 32-bit capabilities (legacy support in use) [ 95.208191][ T5613] cypress 0003:04B4:DE64.0001: unknown main item tag 0x0 [ 95.208234][ T5613] cypress 0003:04B4:DE64.0001: unknown main item tag 0x0 [ 95.208269][ T5613] cypress 0003:04B4:DE64.0001: unknown main item tag 0x0 [ 95.294436][ T5613] cypress 0003:04B4:DE64.0001: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.2-1/input0 [ 95.367318][ T5613] usb 3-1: USB disconnect, device number 2 [ 95.615462][ T5803] fido_id[5803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 96.136644][ T822] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.163876][ T5816] ======================================================= [ 96.163876][ T5816] WARNING: The mand mount option has been deprecated and [ 96.163876][ T5816] and is ignored by this kernel. Remove the mand [ 96.163876][ T5816] option from the mount to silence this warning. [ 96.163876][ T5816] ======================================================= [ 96.306790][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 96.309122][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 96.309149][ T822] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 96.315293][ T822] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.315318][ T822] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.315337][ T822] usb 1-1: Product: syz [ 96.315350][ T822] usb 1-1: Manufacturer: syz [ 96.315371][ T822] usb 1-1: SerialNumber: syz [ 96.476407][ T822] usb 1-1: config 0 descriptor?? [ 96.750800][ T5807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.752593][ T5807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.902931][ T5717] usb 1-1: USB disconnect, device number 3 [ 97.589031][ T5828] program syz.0.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.885486][ T5833] netlink: 'syz.1.24': attribute type 3 has an invalid length. [ 98.186980][ T5614] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 98.187003][ T5614] Bluetooth: Wrong link type (-22) [ 98.187499][ T5614] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 98.187513][ T5614] Bluetooth: Wrong link type (-22) [ 98.187554][ T5614] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 98.187565][ T5614] Bluetooth: Wrong link type (-22) [ 98.196045][ T5839] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 98.316630][ T5613] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.410592][ T5841] FAT-fs (nullb0): bogus number of reserved sectors [ 98.410606][ T5841] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 98.476617][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 98.492501][ T5613] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.516417][ T5613] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 98.541863][ T5613] usb 3-1: string descriptor 0 read error: -22 [ 98.542002][ T5613] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 98.542023][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.650553][ T5613] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 98.811029][ T5613] usb 3-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 98.849498][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.016346][ T5844] FAULT_INJECTION: forcing a failure. [ 99.016346][ T5844] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.016387][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz.1.30 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 99.016407][ T5844] Tainted: [L]=SOFTLOCKUP [ 99.016413][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.016428][ T5844] Call Trace: [ 99.016436][ T5844] [ 99.016442][ T5844] dump_stack_lvl+0xe8/0x150 [ 99.016473][ T5844] should_fail_ex+0x46b/0x600 [ 99.016495][ T5844] _copy_from_user+0x2d/0xb0 [ 99.016515][ T5844] video_usercopy+0x36f/0x1450 [ 99.016541][ T5844] ? __pfx___video_do_ioctl+0x10/0x10 [ 99.016561][ T5844] ? __pfx_video_usercopy+0x10/0x10 [ 99.016588][ T5844] ? __fget_files+0x2a/0x420 [ 99.016607][ T5844] ? __fget_files+0x2a/0x420 [ 99.016622][ T5844] ? __fget_files+0x3a6/0x420 [ 99.016640][ T5844] v4l2_ioctl+0x190/0x1e0 [ 99.016659][ T5844] ? __pfx_v4l2_ioctl+0x10/0x10 [ 99.016677][ T5844] __se_sys_ioctl+0xff/0x170 [ 99.016699][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.016717][ T5844] do_syscall_64+0x15f/0xf80 [ 99.016736][ T5844] ? trace_irq_disable+0x3b/0x140 [ 99.016759][ T5844] ? clear_bhb_loop+0x40/0x90 [ 99.016778][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.016793][ T5844] RIP: 0033:0x7f1f3cc5cdd9 [ 99.016817][ T5844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.016829][ T5844] RSP: 002b:00007f1f3aeb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.016851][ T5844] RAX: ffffffffffffffda RBX: 00007f1f3ced5fa0 RCX: 00007f1f3cc5cdd9 [ 99.016862][ T5844] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 0000000000000003 [ 99.016870][ T5844] RBP: 00007f1f3aeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.016879][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.016886][ T5844] R13: 00007f1f3ced6038 R14: 00007f1f3ced5fa0 R15: 00007ffcbb317168 [ 99.016908][ T5844] [ 99.394743][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.418135][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.431093][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.434873][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.438665][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.700822][ T5613] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 99.752944][ T5613] usb 3-1: USB disconnect, device number 3 [ 99.764778][ T5852] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 100.088190][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.490019][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.858926][ T5614] Bluetooth: hci2: connection err: -111 [ 101.131121][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.269009][ T5896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 101.566645][ T5614] Bluetooth: hci1: command tx timeout [ 101.915206][ T5614] Bluetooth: hci3: connection err: -111 [ 101.946606][ T5717] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.178550][ T5924] ./cgroup.net/devices.allow: Can't lookup blockdev [ 102.231162][ T5717] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 102.231190][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.231208][ T5717] usb 3-1: Product: syz [ 102.231222][ T5717] usb 3-1: Manufacturer: syz [ 102.231235][ T5717] usb 3-1: SerialNumber: syz [ 103.490132][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 103.490204][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 103.540139][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 103.582881][ T5717] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 103.648833][ T5614] Bluetooth: hci1: command tx timeout [ 103.710695][ T5717] usb 3-1: USB disconnect, device number 4 [ 103.942073][ T12] bridge_slave_1: left allmulticast mode [ 103.942244][ T12] bridge_slave_1: left promiscuous mode [ 103.984422][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.210869][ T5614] Bluetooth: hci3: connection err: -111 [ 104.246264][ T12] bridge_slave_0: left allmulticast mode [ 104.246297][ T12] bridge_slave_0: left promiscuous mode [ 104.270610][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.908600][ T32] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 105.059777][ T5985] FAULT_INJECTION: forcing a failure. [ 105.059777][ T5985] name failslab, interval 1, probability 0, space 0, times 1 [ 105.059800][ T5985] CPU: 1 UID: 0 PID: 5985 Comm: syz.1.59 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 105.059815][ T5985] Tainted: [L]=SOFTLOCKUP [ 105.059819][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.059828][ T5985] Call Trace: [ 105.059833][ T5985] [ 105.059837][ T5985] dump_stack_lvl+0xe8/0x150 [ 105.059855][ T5985] should_fail_ex+0x46b/0x600 [ 105.059871][ T5985] should_failslab+0xa8/0x100 [ 105.059887][ T5985] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 105.059900][ T5985] ? __alloc_skb+0x1d0/0x7d0 [ 105.059910][ T5985] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 105.059925][ T5985] __alloc_skb+0x1d0/0x7d0 [ 105.059937][ T5985] netlink_sendmsg+0x5d4/0xb40 [ 105.059954][ T5985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.059967][ T5985] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 105.059983][ T5985] ? aa_sock_msg_perm+0x122/0x200 [ 105.059997][ T5985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.060007][ T5985] sock_sendmsg_nosec+0x112/0x150 [ 105.060024][ T5985] __sys_sendto+0x402/0x590 [ 105.060037][ T5985] ? __pfx___sys_sendto+0x10/0x10 [ 105.060046][ T5985] ? file_init_path+0x3b/0x5b0 [ 105.060070][ T5985] ? rcu_is_watching+0x15/0xb0 [ 105.060083][ T5985] __x64_sys_sendto+0xde/0x100 [ 105.060094][ T5985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.060105][ T5985] do_syscall_64+0x15f/0xf80 [ 105.060118][ T5985] ? trace_irq_disable+0x3b/0x140 [ 105.060131][ T5985] ? clear_bhb_loop+0x40/0x90 [ 105.060144][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.060154][ T5985] RIP: 0033:0x7f1f3cc1d60e [ 105.060164][ T5985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.060172][ T5985] RSP: 002b:00007f1f3ae93e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 105.060183][ T5985] RAX: ffffffffffffffda RBX: 00007f1f3ae956c0 RCX: 00007f1f3cc1d60e [ 105.060190][ T5985] RDX: 0000000000000020 RSI: 00007f1f3ae94000 RDI: 0000000000000009 [ 105.060196][ T5985] RBP: 0000000000000000 R08: 00007f1f3ae93f04 R09: 000000000000000c [ 105.060202][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 105.060208][ T5985] R13: 00007f1f3ae93f58 R14: 00007f1f3ae94000 R15: 0000000000000000 [ 105.060222][ T5985] [ 105.733698][ T5614] Bluetooth: hci1: command tx timeout [ 106.415858][ T5614] Bluetooth: hci3: connection err: -111 [ 106.937525][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.017492][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.078262][ T12] bond0 (unregistering): Released all slaves [ 107.230239][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 107.825245][ T5614] Bluetooth: hci1: command tx timeout [ 107.826573][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.926638][ T822] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 107.962777][ T5614] Bluetooth: hci2: connection err: -111 [ 107.986586][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 107.987499][ T9] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 108.005236][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.005260][ T9] usb 1-1: config 0 has no interface number 0 [ 108.005330][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.005350][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.014769][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.014793][ T9] usb 1-1: config 0 has no interface number 0 [ 108.014849][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.014870][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.033580][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.033604][ T9] usb 1-1: config 0 has no interface number 0 [ 108.033649][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.033669][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.058525][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.058549][ T9] usb 1-1: config 0 has no interface number 0 [ 108.058591][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.058612][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.077811][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.077834][ T9] usb 1-1: config 0 has no interface number 0 [ 108.077872][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.077891][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.152476][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.152500][ T9] usb 1-1: config 0 has no interface number 0 [ 108.152545][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.152566][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.195221][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.195246][ T9] usb 1-1: config 0 has no interface number 0 [ 108.195296][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.195317][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.216078][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.216102][ T9] usb 1-1: config 0 has no interface number 0 [ 108.216145][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.216165][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.251182][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 108.251210][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.251229][ T9] usb 1-1: Product: syz [ 108.251242][ T9] usb 1-1: Manufacturer: syz [ 108.251256][ T9] usb 1-1: SerialNumber: syz [ 108.327488][ T9] usb 1-1: config 0 descriptor?? [ 108.334250][ T9] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 108.403741][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.403773][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.404020][ T822] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 108.404045][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.533524][ T822] usb 2-1: config 0 descriptor?? [ 108.603202][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.610570][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.641562][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.650687][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.678946][ T9] etas_es58x 1-1:0.2: could not retrieve the product info string [ 108.983303][ T822] usbhid 2-1:0.0: can't add hid device: -71 [ 108.983410][ T822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 109.068774][ T822] usb 2-1: USB disconnect, device number 2 [ 109.420613][ T9] usb 1-1: USB disconnect, device number 4 [ 109.440253][ T9] etas_es58x 1-1:0.2: Disconnecting syz syz [ 109.555368][ T6073] netlink: 68 bytes leftover after parsing attributes in process `syz.2.77'. [ 109.758627][ T5614] Bluetooth: hci2: connection err: -111 [ 110.015957][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'. [ 110.298191][ T6093] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 110.746616][ T12] hsr_slave_0: left promiscuous mode [ 110.767218][ T12] hsr_slave_1: left promiscuous mode [ 110.768219][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.768323][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.786661][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.817005][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.817032][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.907992][ T12] veth1_macvtap: left promiscuous mode [ 110.913600][ T12] veth0_macvtap: left promiscuous mode [ 110.914229][ T12] veth1_vlan: left promiscuous mode [ 110.914718][ T12] veth0_vlan: left promiscuous mode [ 110.946553][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 110.949127][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.950331][ T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 110.952595][ T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 110.952617][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.952627][ T9] usb 1-1: Product: syz [ 110.952634][ T9] usb 1-1: Manufacturer: syz [ 110.952641][ T9] usb 1-1: SerialNumber: syz [ 111.123203][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 111.245452][ T9] usb 1-1: Not enough endpoints found in device, aborting! [ 111.416699][ T32] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 111.447499][ T6090] netlink: 'syz.0.82': attribute type 2 has an invalid length. [ 111.451568][ T5717] usb 1-1: USB disconnect, device number 5 [ 111.569184][ T32] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 111.569209][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.575860][ T32] usb 3-1: config 0 descriptor?? [ 111.606921][ T32] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 111.967888][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.992963][ T12] team0 (unregistering): Port device team_slave_1 removed [ 112.007419][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.007924][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.061011][ T32] gp8psk: usb out operation failed. [ 112.061040][ T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 112.061079][ T32] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 112.078206][ T32] usb 3-1: USB disconnect, device number 6 [ 112.096023][ T5614] Bluetooth: hci0: connection err: -111 [ 112.103440][ T12] team0 (unregistering): Port device team_slave_0 removed [ 112.126576][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 112.132275][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.134611][ T9] usb 2-1: config 6 has an invalid interface number: 50 but max is 0 [ 112.134634][ T9] usb 2-1: config 6 has no interface number 0 [ 112.134665][ T9] usb 2-1: config 6 interface 50 has no altsetting 0 [ 112.180212][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=a9.66 [ 112.180241][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.180258][ T9] usb 2-1: Product: syz [ 112.180272][ T9] usb 2-1: Manufacturer: syz [ 112.180285][ T9] usb 2-1: SerialNumber: syz [ 112.791529][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.50/input/input6 [ 113.133708][ T9] usb 2-1: USB disconnect, device number 3 [ 113.174419][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.174742][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.175000][ T5845] bridge_slave_0: entered allmulticast mode [ 113.178391][ T32] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 113.184952][ T5845] bridge_slave_0: entered promiscuous mode [ 113.218870][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.219137][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.219421][ T5845] bridge_slave_1: entered allmulticast mode [ 113.314070][ T5845] bridge_slave_1: entered promiscuous mode [ 113.322531][ T32] usb 3-1: device descriptor read/64, error -71 [ 113.426446][ T6126] sctp: [Deprecated]: syz.0.93 (pid 6126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.426446][ T6126] Use struct sctp_sack_info instead [ 113.628071][ T32] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.694051][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.699890][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.776715][ T32] usb 3-1: device descriptor read/64, error -71 [ 113.814655][ T5845] team0: Port device team_slave_0 added [ 113.820160][ T5845] team0: Port device team_slave_1 added [ 113.847195][ T5717] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.894692][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.894708][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.894731][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.898705][ T32] usb usb3-port1: attempt power cycle [ 113.912580][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.916852][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.916880][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.956596][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.016620][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 114.023730][ T5717] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 114.023755][ T5717] usb 1-1: config 0 has no interface number 0 [ 114.023797][ T5717] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 114.023820][ T5717] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 114.034397][ T5845] hsr_slave_0: entered promiscuous mode [ 114.037820][ T5845] hsr_slave_1: entered promiscuous mode [ 114.043861][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 114.043887][ T5845] Cannot create hsr debugfs directory [ 114.048646][ T5717] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 114.048670][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.048688][ T5717] usb 1-1: Product: syz [ 114.048700][ T5717] usb 1-1: Manufacturer: syz [ 114.048714][ T5717] usb 1-1: SerialNumber: syz [ 114.081808][ T5717] usb 1-1: config 0 descriptor?? [ 114.099794][ T6128] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.100056][ T6128] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.168142][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 114.172203][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.200044][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 114.200072][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.200089][ T9] usb 2-1: Product: syz [ 114.200102][ T9] usb 2-1: Manufacturer: syz [ 114.200115][ T9] usb 2-1: SerialNumber: syz [ 114.242934][ T9] usb 2-1: config 0 descriptor?? [ 114.268398][ T32] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 114.302607][ T9] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 114.359970][ T32] usb 3-1: device descriptor read/8, error -71 [ 114.361444][ T6128] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.362903][ T6128] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.506147][ T9] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 114.506373][ T9] quatech2 2-1:0.0: probe with driver quatech2 failed with error -8 [ 114.671720][ T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.735481][ T32] usb 3-1: device descriptor read/8, error -71 [ 114.837432][ T32] usb usb3-port1: unable to enumerate USB device [ 114.942099][ T6107] hfsplus: unable to find HFS+ superblock [ 114.955709][ T5613] usb 2-1: USB disconnect, device number 4 [ 114.973506][ T5717] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 114.976050][ T5717] asix 1-1:0.34: probe with driver asix failed with error -32 [ 115.122819][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 115.586747][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.628138][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.629266][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.676114][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.684944][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.785505][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.788859][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.910899][ T5845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.051708][ T6172] sctp: [Deprecated]: syz.1.97 (pid 6172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.051708][ T6172] Use struct sctp_sack_info instead [ 116.122432][ T6172] loop8: detected capacity change from 0 to 7 [ 116.224074][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 116.317726][ T5613] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 116.373201][ T6172] Dev loop8: unable to read RDB block 7 [ 116.373251][ T6172] loop8: AHDI p1 p2 [ 116.373277][ T6172] loop8: partition table partially beyond EOD, truncated [ 116.468328][ T6172] loop8: p1 start 1702000233 is beyond EOD, truncated [ 116.485918][ T5613] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.485965][ T5613] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 116.485990][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 116.486016][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 116.486036][ T5613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.517763][ T5613] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 116.517791][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 116.517809][ T5613] usb 3-1: Product: syz [ 116.517822][ T5613] usb 3-1: Manufacturer: syz [ 116.517835][ T5613] usb 3-1: SerialNumber: syz [ 116.526325][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.570385][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.614613][ T5613] usb 3-1: config 0 descriptor?? [ 116.700291][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.700435][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.852677][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.852960][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.871515][ T5613] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 116.871538][ T5613] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 116.990098][ T5717] usb 1-1: USB disconnect, device number 6 [ 117.069287][ T5613] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 117.069310][ T5613] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 117.069635][ T5613] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 117.132922][ T6054] udevd[6054]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 117.349877][ T5613] usb 3-1: USB disconnect, device number 11 [ 117.365559][ T822] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.546788][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 117.558462][ T822] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 117.558534][ T822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 117.558559][ T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 117.558582][ T822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 117.558606][ T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 117.558628][ T822] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.558666][ T822] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.558687][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.794534][ T822] usb 2-1: usb_control_msg returned -32 [ 117.794579][ T822] usbtmc 2-1:16.0: can't read capabilities [ 118.218206][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 118.281778][ T6207] usbtmc 2-1:16.0: Unable to send data, error -71 [ 118.347214][ T37] audit: type=1326 audit(1777423090.002:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.0.104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f164efccdd9 code=0x0 [ 118.437001][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 118.490118][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 118.958761][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.050031][ T6237] FAULT_INJECTION: forcing a failure. [ 119.050031][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 119.050066][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.2.107 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 119.050092][ T6237] Tainted: [L]=SOFTLOCKUP [ 119.050099][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.050110][ T6237] Call Trace: [ 119.050117][ T6237] [ 119.050126][ T6237] dump_stack_lvl+0xe8/0x150 [ 119.050156][ T6237] should_fail_ex+0x46b/0x600 [ 119.050186][ T6237] should_failslab+0xa8/0x100 [ 119.050221][ T6237] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 119.050244][ T6237] ? __alloc_skb+0x1d0/0x7d0 [ 119.050263][ T6237] ? lockdep_hardirqs_on+0x7a/0x110 [ 119.050291][ T6237] __alloc_skb+0x1d0/0x7d0 [ 119.050315][ T6237] pfkey_sendmsg+0x212/0x1120 [ 119.050342][ T6237] ? __lock_acquire+0x6b5/0x2d10 [ 119.050376][ T6237] ? __lock_acquire+0x6b5/0x2d10 [ 119.050407][ T6237] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 119.050442][ T6237] ? aa_sk_perm+0x703/0x950 [ 119.050470][ T6237] ? __pfx_aa_sk_perm+0x10/0x10 [ 119.050493][ T6237] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 119.050523][ T6237] ? aa_sock_msg_perm+0x122/0x200 [ 119.050546][ T6237] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 119.050569][ T6237] sock_sendmsg_nosec+0x112/0x150 [ 119.050600][ T6237] ____sys_sendmsg+0x55c/0x870 [ 119.050628][ T6237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.050659][ T6237] ? import_iovec+0x73/0xa0 [ 119.050691][ T6237] ___sys_sendmsg+0x2a5/0x360 [ 119.050712][ T6237] ? __lock_acquire+0x6b5/0x2d10 [ 119.050748][ T6237] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.050776][ T6237] ? kstrtouint+0x6e/0xe0 [ 119.050836][ T6237] ? __fget_files+0x2a/0x420 [ 119.050855][ T6237] ? __fget_files+0x3a6/0x420 [ 119.050888][ T6237] __sys_sendmmsg+0x282/0x4e0 [ 119.050916][ T6237] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.050946][ T6237] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 119.050988][ T6237] ? ksys_write+0x248/0x270 [ 119.051014][ T6237] ? __pfx_ksys_write+0x10/0x10 [ 119.051051][ T6237] __x64_sys_sendmmsg+0xa0/0xc0 [ 119.051072][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.051091][ T6237] do_syscall_64+0x15f/0xf80 [ 119.051113][ T6237] ? trace_irq_disable+0x3b/0x140 [ 119.051137][ T6237] ? clear_bhb_loop+0x40/0x90 [ 119.051160][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.051177][ T6237] RIP: 0033:0x7f11043ecdd9 [ 119.051202][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.051217][ T6237] RSP: 002b:00007f110263e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.051237][ T6237] RAX: ffffffffffffffda RBX: 00007f1104665fa0 RCX: 00007f11043ecdd9 [ 119.051251][ T6237] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 119.051262][ T6237] RBP: 00007f110263e090 R08: 0000000000000000 R09: 0000000000000000 [ 119.051273][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.051284][ T6237] R13: 00007f1104666038 R14: 00007f1104665fa0 R15: 00007ffcf0bbdc38 [ 119.051314][ T6237] [ 119.857489][ T32] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 119.924647][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 119.945472][ T5845] veth0_vlan: entered promiscuous mode [ 119.995263][ T5845] veth1_vlan: entered promiscuous mode [ 120.024772][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.024838][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 120.024872][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 120.024896][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 120.024916][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.049084][ T32] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 120.049111][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 120.049129][ T32] usb 3-1: Product: syz [ 120.049142][ T32] usb 3-1: Manufacturer: syz [ 120.049153][ T32] usb 3-1: SerialNumber: syz [ 120.060365][ T32] usb 3-1: config 0 descriptor?? [ 120.282899][ T32] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 120.282915][ T32] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 120.332246][ T5764] usb 2-1: USB disconnect, device number 5 [ 120.492653][ T32] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 120.492674][ T32] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 120.492693][ T32] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 120.545025][ T5845] veth0_macvtap: entered promiscuous mode [ 120.652868][ T5845] veth1_macvtap: entered promiscuous mode [ 120.691150][ T32] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 120.760817][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.965528][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.116745][ T6269] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.154676][ T1404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.215670][ T1404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.241334][ T1404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.242586][ T1404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.719156][ T32] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 121.719470][ T32] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 121.764774][ T32] usb 3-1: USB disconnect, device number 12 [ 122.502380][ T6272] syz.1.114 (6272) used greatest stack depth: 16784 bytes left [ 122.602548][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.602567][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.764891][ T3649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.764910][ T3649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.876765][ T5613] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.997413][ T5596] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 123.027264][ T5613] usb 2-1: Using ep0 maxpacket: 8 [ 123.029026][ T5613] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 123.029076][ T5613] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 123.029098][ T5613] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.029109][ T5613] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 123.029122][ T5613] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 123.029132][ T5613] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.029154][ T5613] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.029164][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.211360][ T5596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.211391][ T5596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.211484][ T5596] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 123.211506][ T5596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.302925][ T5596] usb 3-1: config 0 descriptor?? [ 123.376367][ T5613] usb 2-1: usb_control_msg returned -32 [ 123.376395][ T5613] usbtmc 2-1:16.0: can't read capabilities [ 123.376663][ T5764] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.526578][ T5764] usb 1-1: Using ep0 maxpacket: 16 [ 123.528554][ T5764] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 123.528578][ T5764] usb 1-1: config 0 has no interface number 0 [ 123.528618][ T5764] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 123.528646][ T5764] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 123.530903][ T5764] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 123.530928][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.530946][ T5764] usb 1-1: Product: syz [ 123.530959][ T5764] usb 1-1: Manufacturer: syz [ 123.530971][ T5764] usb 1-1: SerialNumber: syz [ 123.542916][ T5764] usb 1-1: config 0 descriptor?? [ 123.599027][ T6300] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 123.599200][ T6300] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 123.722796][ T5596] cypress 0003:04B4:DE64.0002: unknown main item tag 0x0 [ 123.722831][ T5596] cypress 0003:04B4:DE64.0002: unknown main item tag 0x0 [ 123.722858][ T5596] cypress 0003:04B4:DE64.0002: unknown main item tag 0x0 [ 123.755942][ T5596] cypress 0003:04B4:DE64.0002: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.2-1/input0 [ 123.834530][ T6300] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 123.834746][ T6300] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 123.923797][ T5596] usb 3-1: USB disconnect, device number 13 [ 124.370884][ T5613] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.444831][ T5764] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 124.445219][ T5764] asix 1-1:0.34: probe with driver asix failed with error -61 [ 124.547128][ T5613] usb 5-1: Using ep0 maxpacket: 32 [ 124.557312][ T5613] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 124.557343][ T5613] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 124.557357][ T5613] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.557370][ T5613] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 124.559776][ T5613] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 124.559799][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.559809][ T5613] usb 5-1: Product: syz [ 124.559816][ T5613] usb 5-1: Manufacturer: syz [ 124.559822][ T5613] usb 5-1: SerialNumber: syz [ 124.663294][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 124.675044][ T5613] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input7 [ 124.806610][ T5613] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 124.806629][ T5613] (id 0x00) [ 124.908606][ T5613] rc_core: IR keymap rc-imon-pad not found [ 124.908627][ T5613] Registered IR keymap rc-empty [ 124.908711][ T5613] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 124.908721][ T5613] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 125.026212][ T5613] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 125.053927][ T5613] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input8 [ 125.077497][ T6318] capability: warning: `syz.2.129' uses deprecated v2 capabilities in a way that may be insecure [ 125.083533][ T5613] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:2> initialized [ 125.348915][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.349984][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.528576][ T5718] usb 5-1: USB disconnect, device number 2 [ 125.620715][ T5764] usb 2-1: USB disconnect, device number 6 [ 126.138311][ T5701] usb 1-1: USB disconnect, device number 7 [ 126.606733][ T5701] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.767519][ T5701] usb 1-1: Using ep0 maxpacket: 8 [ 126.769860][ T5701] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 126.769910][ T5701] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 126.769936][ T5701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.769958][ T5701] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 126.769982][ T5701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 126.770002][ T5701] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.770039][ T5701] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.770059][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.100573][ T5701] usb 1-1: usb_control_msg returned -32 [ 127.100671][ T5701] usbtmc 1-1:16.0: can't read capabilities [ 127.199771][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.141'. [ 127.334164][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 127.407306][ T5718] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.464051][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 127.470618][ T6368] usbtmc 1-1:16.0: Unable to send data, error -71 [ 127.558044][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 127.560036][ T5718] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 127.560083][ T5718] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 127.560097][ T5718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.560108][ T5718] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 127.560120][ T5718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 127.560132][ T5718] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.560154][ T5718] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.560171][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.798769][ T5764] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 127.803960][ T5718] usb 2-1: usb_control_msg returned -32 [ 127.804005][ T5718] usbtmc 2-1:16.0: can't read capabilities [ 127.976673][ T5764] usb 3-1: Using ep0 maxpacket: 16 [ 127.979784][ T5764] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 127.979806][ T5764] usb 3-1: config 0 has no interface number 0 [ 127.979842][ T5764] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 127.979854][ T5764] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 127.982247][ T5764] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 127.982272][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.982290][ T5764] usb 3-1: Product: syz [ 127.982303][ T5764] usb 3-1: Manufacturer: syz [ 127.982312][ T5764] usb 3-1: SerialNumber: syz [ 128.068413][ T5764] usb 3-1: config 0 descriptor?? [ 128.070865][ T6371] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 128.070990][ T6371] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 128.165413][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 128.171112][ T6382] usbtmc 1-1:16.0: Unable to send data, error -71 [ 128.275604][ T6371] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 128.275728][ T6371] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 128.878388][ T5764] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 128.878603][ T5764] asix 3-1:0.34: probe with driver asix failed with error -61 [ 129.276902][ T5764] usb 1-1: USB disconnect, device number 8 [ 129.481332][ T6394] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 130.120375][ T5718] usb 2-1: USB disconnect, device number 7 [ 130.346617][ T5613] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.496594][ T5613] usb 1-1: Using ep0 maxpacket: 32 [ 130.501913][ T5613] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.501937][ T5613] usb 1-1: config 0 has no interface number 0 [ 130.504238][ T5613] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 130.504258][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.504267][ T5613] usb 1-1: Product: syz [ 130.504274][ T5613] usb 1-1: Manufacturer: syz [ 130.504281][ T5613] usb 1-1: SerialNumber: syz [ 130.514274][ T5613] usb 1-1: config 0 descriptor?? [ 130.564888][ T5613] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 130.566154][ T5613] usb 1-1: selecting invalid altsetting 1 [ 130.566172][ T5613] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 130.633330][ T5718] usb 3-1: USB disconnect, device number 14 [ 130.731370][ T5613] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.733094][ T5613] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 130.733187][ T5613] usb 1-1: media controller created [ 130.755136][ T5613] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.846046][ T5613] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 130.846081][ T5613] zl10353_read_register: readreg error (reg=127, ret==-71) [ 130.873448][ T5613] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 130.920402][ T5613] usb 1-1: USB disconnect, device number 9 [ 130.980168][ T5718] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 131.055860][ T6416] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 131.136571][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 131.153192][ T5718] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 131.153244][ T5718] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 131.153258][ T5718] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.153270][ T5718] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 131.153283][ T5718] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 131.153294][ T5718] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.153316][ T5718] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.153327][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.468376][ T5718] usb 3-1: usb_control_msg returned -32 [ 131.468422][ T5718] usbtmc 3-1:16.0: can't read capabilities [ 131.477607][ T5596] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 131.824167][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 131.831805][ T6441] usbtmc 3-1:16.0: Unable to send data, error -71 [ 131.906666][ T32] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 132.077390][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.077441][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 132.077465][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 132.077489][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 132.077510][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.080342][ T32] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 132.080366][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 132.080384][ T32] usb 2-1: Product: syz [ 132.080397][ T32] usb 2-1: Manufacturer: syz [ 132.080410][ T32] usb 2-1: SerialNumber: syz [ 132.189177][ T32] usb 2-1: config 0 descriptor?? [ 132.224143][ T6448] XFS (nbd0): SB validate failed with error -5. [ 132.401109][ T32] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 132.401125][ T32] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 132.477132][ T5596] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.602880][ T32] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 132.602903][ T32] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 132.602928][ T32] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 132.650680][ T5596] usb 5-1: Using ep0 maxpacket: 8 [ 132.662561][ T5596] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 132.662614][ T5596] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 132.662639][ T5596] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.662662][ T5596] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 132.662702][ T5596] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 132.662724][ T5596] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.662762][ T5596] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.662783][ T5596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.805789][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.811973][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.830057][ T32] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 133.030850][ T5596] usb 5-1: usb_control_msg returned -32 [ 133.030893][ T5596] usbtmc 5-1:16.0: can't read capabilities [ 133.393913][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 133.394050][ T6485] usbtmc 3-1:16.0: Unable to send data, error -71 [ 133.457567][ T32] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 133.457891][ T32] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 133.517307][ T32] usb 2-1: USB disconnect, device number 8 [ 133.696324][ T9] usb 3-1: USB disconnect, device number 15 [ 133.842479][ T6498] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 133.842501][ T6498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.166'. [ 133.844979][ T6498] veth1_macvtap: entered allmulticast mode [ 133.846024][ T6498] bridge0: port 3(veth1_macvtap) entered blocking state [ 133.847819][ T6498] bridge0: port 3(veth1_macvtap) entered disabled state [ 133.852904][ T6498] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 134.186636][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 134.336615][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 134.340984][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 134.341019][ T9] usb 3-1: can't read configurations, error -61 [ 134.526730][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 134.677250][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 134.680067][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 134.680100][ T9] usb 3-1: can't read configurations, error -61 [ 134.680668][ T9] usb usb3-port1: attempt power cycle [ 134.881915][ T5613] usb 5-1: USB disconnect, device number 4 [ 135.026672][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 135.047387][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 135.049503][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 135.049536][ T9] usb 3-1: can't read configurations, error -61 [ 135.096663][ T5596] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.181340][ T6534] netlink: 104 bytes leftover after parsing attributes in process `syz.1.174'. [ 135.188384][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 135.214575][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 135.228659][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 135.228695][ T9] usb 3-1: can't read configurations, error -61 [ 135.229177][ T9] usb usb3-port1: unable to enumerate USB device [ 135.247944][ T5596] usb 1-1: Using ep0 maxpacket: 32 [ 135.248702][ T5613] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.276747][ T5596] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 135.276762][ T5596] usb 1-1: config 0 has no interface number 0 [ 135.276786][ T5596] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.276900][ T5596] usb 1-1: config 0 interface 85 has no altsetting 0 [ 135.281067][ T6534] can0: slcan on ttyprintk. [ 135.283731][ T5596] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 135.283757][ T5596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.283774][ T5596] usb 1-1: Product: syz [ 135.283787][ T5596] usb 1-1: Manufacturer: syz [ 135.283801][ T5596] usb 1-1: SerialNumber: syz [ 135.295950][ T5596] usb 1-1: config 0 descriptor?? [ 135.446669][ T5613] usb 5-1: Using ep0 maxpacket: 16 [ 135.450009][ T5613] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.451705][ T5613] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.451755][ T5613] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 135.451979][ T5613] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 135.452004][ T5613] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.455502][ T5613] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.41 [ 135.455526][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.455543][ T5613] usb 5-1: Product: syz [ 135.455805][ T5613] usb 5-1: Manufacturer: syz [ 135.455822][ T5613] usb 5-1: SerialNumber: syz [ 135.737336][ T6533] can0 (unregistered): slcan off ttyprintk. [ 135.747547][ T5596] appletouch 1-1:0.85: Geyser mode initialized. [ 135.804047][ T5596] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input9 [ 135.844850][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.891357][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.944016][ T5613] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.944085][ T5613] usb 5-1: MIDIStreaming interface descriptor not found [ 136.228686][ T5613] usb 5-1: USB disconnect, device number 5 [ 136.245166][ C0] appletouch 1-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 136.288910][ T32] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 136.489725][ T32] usb 2-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 136.489753][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.489772][ T32] usb 2-1: Product: 卵࠮깛攒뀿齃窈ŭ볆㻖椰↷캰 [ 136.489787][ T32] usb 2-1: Manufacturer: 쏐谘沇䌝횃噗꺱圷荹긠鯧⍜臵幌鏵庐揶틴寍꿧ﲔ跘腿둊匆磻뼸僣疇렃ᯒ䤢떕쬓㪔澰鲉偅⚉簨朮螽鄲ﭝ㖑Ą愈ⱜሒ፮杝萷䖀퍧汓窼輄꜃簸¿߻薡髐揦雡翁訄뵽悁슅㷌㎜꣫붔䌏쎋鱿唚 [ 136.489812][ T32] usb 2-1: SerialNumber: syz [ 136.594602][ C1] BUG: workqueue function usb_giveback_urb_[ 136.594602][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 0 to 2 [ 136.594727][ T45] usb 1-1: USB disconnect, device number 10 [ 136.598626][ T12] BUG: workqueue function nsim_dev_trap_report_work changed kcov_mode from 0 to 2 [ 136.598819][ T12] ------------[ cut here ]------------ [ 136.598827][ T12] in_task() && kcov_mode_enabled(mode) [ 136.598860][ T12] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:0/12 [ 136.598897][ T12] Modules linked in: [ 136.598916][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 136.598942][ T12] Tainted: [L]=SOFTLOCKUP [ 136.598948][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.598961][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 136.598986][ T12] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 136.599010][ T12] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b2 27 f0 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ea 29 6d 09 89 c0 48 c7 c7 10 14 95 [ 136.599026][ T12] RSP: 0018:ffffc90000117a38 EFLAGS: 00010202 [ 136.599041][ T12] RAX: 0000000000000002 RBX: ffff88801d690000 RCX: 0000000000000000 [ 136.599055][ T12] RDX: 0000000000000000 RSI: ffffffff8baa6fc0 RDI: ffffffff8baa6f80 [ 136.599068][ T12] RBP: ffff88804116bc80 R08: ffffffff8b3457a0 R09: ffffffff8e1c8180 [ 136.599082][ T12] R10: dffffc0000000000 R11: fffffbfff1f58ebf R12: ffff88805ecd1e08 [ 136.599096][ T12] R13: ffff88805ee807c0 R14: 0000000000000000 R15: ffff88805ecd1e20 [ 136.599109][ T12] FS: 0000000000000000(0000) GS:ffff888125dd8000(0000) knlGS:0000000000000000 [ 136.599124][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.599137][ T12] CR2: 00005558a7523950 CR3: 0000000036ef4000 CR4: 00000000003526f0 [ 136.599153][ T12] Call Trace: [ 136.599161][ T12] [ 136.599173][ T12] ieee80211_iface_work+0x211/0x1390 [ 136.599213][ T12] cfg80211_wiphy_work+0x2cf/0x460 [ 136.599241][ T12] ? process_one_work+0x8b7/0x1710 [ 136.599271][ T12] process_one_work+0x9a3/0x1710 [ 136.599316][ T12] ? __pfx_process_one_work+0x10/0x10 [ 136.599337][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.599379][ T12] worker_thread+0xba8/0x11e0 [ 136.599429][ T12] kthread+0x388/0x470 [ 136.599457][ T12] ? __pfx_worker_thread+0x10/0x10 [ 136.599478][ T12] ? __pfx_kthread+0x10/0x10 [ 136.599507][ T12] ret_from_fork+0x514/0xb70 [ 136.599533][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 136.599558][ T12] ? __switch_to+0xc79/0x1410 [ 136.599581][ T12] ? __pfx_kthread+0x10/0x10 [ 136.599610][ T12] ret_from_fork_asm+0x1a/0x30 [ 136.599654][ T12] [ 136.599668][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 136.599684][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 136.599709][ T12] Tainted: [L]=SOFTLOCKUP [ 136.599716][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.599727][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 136.599749][ T12] Call Trace: [ 136.599757][ T12] [ 136.599765][ T12] vpanic+0x56c/0xa60 [ 136.599792][ T12] ? __pfx__printk+0x10/0x10 [ 136.599812][ T12] ? __pfx_vpanic+0x10/0x10 [ 136.599836][ T12] ? is_bpf_text_address+0x292/0x2b0 [ 136.599865][ T12] ? is_bpf_text_address+0x26/0x2b0 [ 136.599901][ T12] panic+0xc5/0xd0 [ 136.599927][ T12] ? __pfx_panic+0x10/0x10 [ 136.599962][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 136.599993][ T12] __warn+0x315/0x4c0 [ 136.600018][ T12] ? kcov_remote_start+0x5d8/0x710 [ 136.600041][ T12] ? kcov_remote_start+0x5d8/0x710 [ 136.600065][ T12] __report_bug+0x29a/0x540 [ 136.600094][ T12] ? kcov_remote_start+0x5d8/0x710 [ 136.600117][ T12] ? __pfx___report_bug+0x10/0x10 [ 136.600139][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.600162][ T12] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 136.600185][ T12] ? rt_spin_lock+0x1e0/0x400 [ 136.600216][ T12] ? rt_spin_lock+0x1e0/0x400 [ 136.600245][ T12] ? kcov_remote_start+0x5d8/0x710 [ 136.600273][ T12] report_bug+0x16a/0x220 [ 136.600296][ T12] ? kcov_remote_start+0x5d8/0x710 [ 136.600317][ T12] ? kcov_remote_start+0x5da/0x710 [ 136.600339][ T12] handle_bug+0x9c/0x200 [ 136.600365][ T12] exc_invalid_op+0x1a/0x50 [ 136.600392][ T12] asm_exc_invalid_op+0x1a/0x20 [ 136.600412][ T12] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 136.600434][ T12] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b2 27 f0 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ea 29 6d 09 89 c0 48 c7 c7 10 14 95 [ 136.600449][ T12] RSP: 0018:ffffc90000117a38 EFLAGS: 00010202 [ 136.600464][ T12] RAX: 0000000000000002 RBX: ffff88801d690000 RCX: 0000000000000000 [ 136.600476][ T12] RDX: 0000000000000000 RSI: ffffffff8baa6fc0 RDI: ffffffff8baa6f80 [ 136.600489][ T12] RBP: ffff88804116bc80 R08: ffffffff8b3457a0 R09: ffffffff8e1c8180 [ 136.600503][ T12] R10: dffffc0000000000 R11: fffffbfff1f58ebf R12: ffff88805ecd1e08 [ 136.600516][ T12] R13: ffff88805ee807c0 R14: 0000000000000000 R15: ffff88805ecd1e20 [ 136.600536][ T12] ? rt_spin_lock+0x1e0/0x400 [ 136.600571][ T12] ? kcov_remote_start+0xe0/0x710 [ 136.600595][ T12] ieee80211_iface_work+0x211/0x1390 [ 136.600634][ T12] cfg80211_wiphy_work+0x2cf/0x460 [ 136.600661][ T12] ? process_one_work+0x8b7/0x1710 [ 136.600682][ T12] process_one_work+0x9a3/0x1710 [ 136.600725][ T12] ? __pfx_process_one_work+0x10/0x10 [ 136.600745][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.600785][ T12] worker_thread+0xba8/0x11e0 [ 136.600833][ T12] kthread+0x388/0x470 [ 136.600860][ T12] ? __pfx_worker_thread+0x10/0x10 [ 136.600882][ T12] ? __pfx_kthread+0x10/0x10 [ 136.600910][ T12] ret_from_fork+0x514/0xb70 [ 136.600935][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 136.600959][ T12] ? __switch_to+0xc79/0x1410 [ 136.600981][ T12] ? __pfx_kthread+0x10/0x10 [ 136.601010][ T12] ret_from_fork_asm+0x1a/0x30 [ 136.601051][ T12] [ 136.601455][ T12] Kernel Offset: disabled