last executing test programs: 10m38.977988116s ago: executing program 1 (id=36): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) 10m36.035690184s ago: executing program 1 (id=40): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x62302) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) 10m34.769164749s ago: executing program 1 (id=42): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$inet(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0], 0x0) 10m26.024220602s ago: executing program 1 (id=53): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}]}}}]}, 0x3c}, 0x1, 0xd}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e26"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2000003d210007010000000000000000047c00000c001a8008000a80ef0771c3"], 0x20}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r4, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10m21.516295362s ago: executing program 1 (id=60): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000240)=""/1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000002380)={0x73622a85, 0x100}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x2020) 10m20.071695227s ago: executing program 1 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 10m4.82547244s ago: executing program 32 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8m4.915531144s ago: executing program 5 (id=75): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000240)=""/1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder1\x00', 0x800, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x2020) 8m3.524293549s ago: executing program 5 (id=241): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000340)=ANY=[], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2000003d210007010000000000000000047c00000c001a8008000a80ef0771c3"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r4, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 7m47.534113456s ago: executing program 33 (id=241): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000340)=ANY=[], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2000003d210007010000000000000000047c00000c001a8008000a80ef0771c3"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r4, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 1m28.61793412s ago: executing program 2 (id=825): syz_usb_connect$cdc_ecm(0x2, 0x171, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15f, 0x1, 0x1, 0xd, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "b8c2db26"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x5, 0x2}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim={0x0, 0x24, 0x1b, 0x2, 0x6, 0xfa, 0x1, 0xf1, 0x5}, @mdlm_detail={0xfe, 0x24, 0x13, 0x0, "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"}, @mbim={0xc, 0x24, 0x1b, 0x9b, 0x8, 0x9, 0x1, 0x1, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd3, 0xe9, 0x90}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xac, 0x6, 0x49}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x10}}}}}]}}]}}, &(0x7f0000000480)={0xc, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0xf, 0x0, 0xff, 0xf1}, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="050f0500ce3ad268660600000000000731a06d62ccf690bf045793"], 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140c}}]}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xc8, 0x29, 0x36, {0x5e, 0x16, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x280}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000f40)=[{&(0x7f0000000a00)=""/248, 0xf8}, {&(0x7f0000000e00)=""/252, 0xfc}, {&(0x7f0000000f00)=""/60, 0x3c}], 0x3, 0x4, 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x60, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x17, 0x4, 0x60, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0xff, 0x101, 0x4, 0x4, 0x8001, 0x4}, @dmm={0x7, 0x24, 0x14, 0xfd27, 0xe}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x80, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x4, 0x3, 0x9d, 0x10, 0x1}, 0xee, &(0x7f0000000600)={0x5, 0xf, 0xee, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x8, 0x870f, 0x5, [0x20b0, 0xcf]}, @generic={0xcb, 0x10, 0xb, "1f9177160ccaf5250adbed9f0af51b5dc953dd395e7c91441d4c1d1195555f3ffd56748a4fe0b5966d2dc81b275bcee1795f7796c1d8fadc82f85a26b57daff178e3d9663d4fc10728607fb76d8efb58bb5aa890cd89c94b0c33aa8dbce460c5fa3fb0279a47194fdaaf337ef84c6f687e50ec7bffb840064ee36de95d46d523c1de0bee62b7fee24d68079678275fdba5023999a74d0e2f1cb967493d74692eed84584de6fa0cceefa8d35c62ecfb0a561cb822859251dc0f43f938ce5378d8d982ec630293cd6c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x0, 0x1}]}, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x340a}}]}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m24.752045708s ago: executing program 2 (id=828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000c40)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m24.468167381s ago: executing program 2 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m23.146759041s ago: executing program 2 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(0x0, 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x11b}], 0x1}}], 0x1, 0x400c0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1m19.072575893s ago: executing program 2 (id=837): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x2020) 1m16.598548967s ago: executing program 2 (id=838): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32], 0x7) 1m1.357033811s ago: executing program 34 (id=838): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32], 0x7) 36.010020262s ago: executing program 4 (id=935): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$inet(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r2, @ANYRES16=r0], 0x0) 31.31487693s ago: executing program 4 (id=959): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000002380)={0x73622a85, 0x100}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002580)={0x2020}, 0x2020) 29.534619907s ago: executing program 4 (id=961): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRESHEX=r1], 0x34}}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 25.822704091s ago: executing program 4 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 24.097038868s ago: executing program 4 (id=981): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000240)=""/1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x2020) 22.467970898s ago: executing program 4 (id=990): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e26"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2000003d210007010000000000000000047c00000c001a80"], 0x20}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 18.190691699s ago: executing program 0 (id=1003): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.095552027s ago: executing program 0 (id=1006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, 0x0, 0x0, 0x40000101, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000040)=0x1f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 15.800671423s ago: executing program 0 (id=1008): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRESHEX=r1], 0x34}}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 7.64775509s ago: executing program 6 (id=1068): socket(0x1e, 0x4, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000040)='fuse\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x80002, 0x0) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000001180), 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x802, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7.459353747s ago: executing program 6 (id=1070): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) 6.04401584s ago: executing program 35 (id=990): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e26"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2000003d210007010000000000000000047c00000c001a80"], 0x20}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5.974556363s ago: executing program 6 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 4.016124261s ago: executing program 6 (id=1083): socket(0x1e, 0x4, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000040)='fuse\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x80002, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000001180), 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x802, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.897196608s ago: executing program 6 (id=1086): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setns(r2, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.374810984s ago: executing program 0 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x11b}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2.03106939s ago: executing program 3 (id=1114): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x11b}], 0x1}}], 0x1, 0x400c0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.810328083s ago: executing program 3 (id=1115): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e26"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2000003d210007010000000000000000047c00000c001a8008000a80ef0771c3"], 0x20}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r4, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.703221251s ago: executing program 3 (id=1116): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000240)={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x38, 0x3a, 0x1, @private1, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x4000, 0x33, 0x0, @loopback, @empty, [@srh={0x33, 0x0, 0x4, 0x0, 0x6, 0x70, 0xff}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xc7, 0xf, 0x79, 0x10, 0x17cc, 0x41c, 0x9924, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6b, 0x2, 0x0, 0x18, 0x70, 0x12}}]}}]}}, 0x0) 1.624127027s ago: executing program 6 (id=1117): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed277fac258083ca490d31f341236eccf4507576c4d033dfc3e4f695143a1ad", 0x36) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900"], 0xa8}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 1.489559986s ago: executing program 3 (id=1118): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) 1.447903136s ago: executing program 0 (id=1119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b0000000500000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000c40)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.40626755s ago: executing program 3 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1.302910681s ago: executing program 0 (id=1121): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000240)=""/1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x2020) 0s ago: executing program 3 (id=1122): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = inotify_init1(0x80000) inotify_add_watch(r1, 0x0, 0x36000002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(r2, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x3f, 0xff, "3eccd25569e20900"}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): es/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.418719][ T5977] ath6kl: Failed to submit usb control message: -110 [ 164.418827][ T5977] ath6kl: unable to send the bmi data to the device: -110 [ 164.418843][ T5977] ath6kl: Unable to send get target info: -110 [ 164.447781][ T5977] ath6kl: Failed to init ath6kl core: -110 [ 164.476681][ T5977] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 164.793485][ T5900] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 164.841791][ T5900] usb 1-1: USB disconnect, device number 3 [ 165.112310][ T6267] ubi31: attaching mtd0 [ 165.180008][ T6267] ubi31: scanning is finished [ 165.779885][ T61] Bluetooth: hci5: command tx timeout [ 167.467086][ T6267] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 167.668802][ T5893] usb 4-1: USB disconnect, device number 4 [ 167.842894][ T61] Bluetooth: hci5: command tx timeout [ 167.892078][ T6278] Bluetooth: MGMT ver 1.23 [ 167.892108][ T6278] Bluetooth: hci0: unsupported parameter 255 [ 167.892119][ T6278] Bluetooth: hci0: unsupported parameter 255 [ 167.979803][ T5900] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.070040][ T6282] No control pipe specified [ 169.199711][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 169.202356][ T5900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.202382][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.206184][ T5900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.206213][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.206232][ T5900] usb 3-1: Product: syz [ 169.206247][ T5900] usb 3-1: Manufacturer: syz [ 169.206262][ T5900] usb 3-1: SerialNumber: syz [ 169.373978][ T1540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.522694][ T5900] usb 3-1: 0:2 : does not exist [ 169.625881][ T5900] usb 3-1: USB disconnect, device number 6 [ 169.919765][ T61] Bluetooth: hci5: command tx timeout [ 169.928947][ T1540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.514752][ T1540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.792206][ T61] Bluetooth: hci5: command tx timeout [ 172.891653][ T1540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.653752][ T6305] syz.0.84 (6305): drop_caches: 2 [ 173.657352][ T6305] syz.0.84 (6305): drop_caches: 2 [ 174.170766][ T6307] 9p: Bad value for 'rfdno' [ 174.629974][ T6314] ubi31: attaching mtd0 [ 174.664930][ T6314] ubi31: scanning is finished [ 175.365753][ T6244] chnl_net:caif_netlink_parms(): no params data found [ 175.459185][ T6317] Bluetooth: hci0: unsupported parameter 255 [ 175.459209][ T6317] Bluetooth: hci0: unsupported parameter 255 [ 175.825312][ T6314] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 176.842433][ T5900] kernel read not supported for file /83/coredump_filter (pid: 5900 comm: kworker/0:6) [ 178.461431][ T6321] No control pipe specified [ 179.961895][ T5900] kernel read not supported for file /90/coredump_filter (pid: 5900 comm: kworker/0:6) [ 179.988079][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.988766][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.988930][ T6244] bridge_slave_0: entered allmulticast mode [ 179.990670][ T6244] bridge_slave_0: entered promiscuous mode [ 180.079131][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.079450][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.082178][ T6244] bridge_slave_1: entered allmulticast mode [ 181.056575][ T6244] bridge_slave_1: entered promiscuous mode [ 181.110844][ T1540] bridge_slave_1: left allmulticast mode [ 181.111034][ T1540] bridge_slave_1: left promiscuous mode [ 181.111685][ T1540] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.430577][ T1540] bridge_slave_0: left allmulticast mode [ 181.430606][ T1540] bridge_slave_0: left promiscuous mode [ 181.430842][ T1540] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.713979][ T6364] Bluetooth: hci0: unsupported parameter 255 [ 181.714002][ T6364] Bluetooth: hci0: unsupported parameter 255 [ 187.890089][ T6388] No control pipe specified [ 189.803310][ T6402] 9p: Bad value for 'rfdno' [ 190.530486][ T1540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.576437][ T1540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.612691][ T1540] bond0 (unregistering): Released all slaves [ 190.939090][ T6070] kernel read not supported for file /87/coredump_filter (pid: 6070 comm: kworker/1:13) [ 191.035232][ T5944] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 191.361502][ T5944] usb 5-1: not running at top speed; connect to a high speed hub [ 191.364964][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.365028][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.410150][ T5944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.410182][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.410202][ T5944] usb 5-1: Product: ᐌ [ 191.410216][ T5944] usb 5-1: Manufacturer: О [ 191.410230][ T5944] usb 5-1: SerialNumber: syz [ 191.827578][ T6415] No control pipe specified [ 191.966532][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.607958][ T6423] futex_wake_op: syz.3.119 tries to shift op by 36; fix this program [ 194.989156][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.990590][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.102516][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.421152][ T5944] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 195.480219][ T5944] usb 5-1: USB disconnect, device number 4 [ 196.556537][ T6244] team0: Port device team_slave_0 added [ 196.707100][ T6244] team0: Port device team_slave_1 added [ 196.724031][ T5893] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 196.889808][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 196.909806][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.909832][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.909866][ T5893] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 197.299884][ T5893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.299916][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.299935][ T5893] usb 5-1: Product: syz [ 197.299949][ T5893] usb 5-1: Manufacturer: syz [ 197.299963][ T5893] usb 5-1: SerialNumber: syz [ 198.367332][ T6460] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 199.708252][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.708271][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.708296][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.103233][ T1540] hsr_slave_0: left promiscuous mode [ 200.164635][ T1540] hsr_slave_1: left promiscuous mode [ 200.227921][ T1540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.261864][ T1540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.513724][ T1540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.513754][ T1540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.728253][ T6476] ubi31: attaching mtd0 [ 200.761321][ T6476] ubi31: scanning is finished [ 202.954130][ T5893] usb 5-1: 0:2 : does not exist [ 203.524434][ T6476] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 203.623041][ T1540] veth1_macvtap: left promiscuous mode [ 203.623318][ T1540] veth0_macvtap: left promiscuous mode [ 203.623607][ T1540] veth1_vlan: left promiscuous mode [ 203.623924][ T1540] veth0_vlan: left promiscuous mode [ 204.080728][ T6482] ubi31: attaching mtd0 [ 204.084441][ T6482] ubi31: scanning is finished [ 206.159917][ T6492] program syz.0.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.530950][ T6480] usb 5-1: USB disconnect, device number 5 [ 207.375924][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 207.375965][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 207.441671][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 207.458119][ T6482] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 208.084822][ T6504] ubi31: attaching mtd0 [ 208.123723][ T6504] ubi31: scanning is finished [ 209.933171][ T6504] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 214.409899][ T6531] program syz.0.152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.489811][ T5944] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 215.709699][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 215.716518][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.716535][ T5944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.722511][ T5944] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.722539][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.722559][ T5944] usb 4-1: Product: syz [ 215.722573][ T5944] usb 4-1: Manufacturer: syz [ 215.722587][ T5944] usb 4-1: SerialNumber: syz [ 215.983503][ T5944] usb 4-1: 0:2 : does not exist [ 216.075153][ T5944] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 216.211674][ T5944] usb 4-1: USB disconnect, device number 5 [ 216.479105][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.889820][ T5944] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 217.809996][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 217.812975][ T5944] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.813000][ T5944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.816272][ T5944] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.816300][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.816320][ T5944] usb 3-1: Product: syz [ 217.816335][ T5944] usb 3-1: Manufacturer: syz [ 217.816349][ T5944] usb 3-1: SerialNumber: syz [ 218.107899][ T5944] usb 3-1: 0:2 : does not exist [ 218.145664][ T5944] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 218.679536][ T6559] syz.3.160 (6559): drop_caches: 2 [ 218.681816][ T6559] syz.3.160 (6559): drop_caches: 2 [ 218.939394][ T5944] usb 3-1: USB disconnect, device number 7 [ 219.584180][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.439902][ T6565] program syz.2.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.993063][ T6567] Bluetooth: hci0: unsupported parameter 255 [ 220.993079][ T6567] Bluetooth: hci0: unsupported parameter 255 [ 223.328484][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.347763][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.348779][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.229866][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.277567][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.789727][ T5804] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 224.959770][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 224.985088][ T5804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.985115][ T5804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.989096][ T5804] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.989126][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.989146][ T5804] usb 4-1: Product: syz [ 224.989160][ T5804] usb 4-1: Manufacturer: syz [ 224.989174][ T5804] usb 4-1: SerialNumber: syz [ 225.250847][ T5804] usb 4-1: 0:2 : does not exist [ 225.272721][ T5804] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 225.550890][ T5804] usb 4-1: USB disconnect, device number 6 [ 225.863478][ T6597] syz.0.172 (6597): drop_caches: 2 [ 225.917921][ T6597] syz.0.172 (6597): drop_caches: 2 [ 226.399721][ T5815] Bluetooth: hci3: command tx timeout [ 227.209909][ T6599] program syz.0.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.611312][ T1540] team0 (unregistering): Port device team_slave_1 removed [ 227.961079][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.240550][ T1540] team0 (unregistering): Port device team_slave_0 removed [ 228.479796][ T5815] Bluetooth: hci3: command tx timeout [ 229.140417][ T5945] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 231.127342][ T5945] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.127378][ T5945] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 231.127399][ T5945] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 231.127438][ T5945] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.127461][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.128707][ T5815] Bluetooth: hci3: command tx timeout [ 231.197221][ T5945] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.515158][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.735147][ T6630] syz.4.180 (6630): drop_caches: 2 [ 231.741697][ T6630] syz.4.180 (6630): drop_caches: 2 [ 232.593246][ T5945] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 234.096584][ T5815] Bluetooth: hci3: command tx timeout [ 234.343859][ T6480] usb 3-1: USB disconnect, device number 8 [ 239.808028][ T6657] syz.3.188 (6657): drop_caches: 2 [ 239.808450][ T6657] syz.3.188 (6657): drop_caches: 2 [ 241.769740][ T5948] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 242.000978][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 242.034875][ T5948] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 242.034903][ T5948] usb 3-1: config 0 has no interface number 0 [ 242.034927][ T5948] usb 3-1: config 0 interface 196 has no altsetting 0 [ 242.066795][ T5948] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 242.066817][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.066828][ T5948] usb 3-1: Product: syz [ 242.066836][ T5948] usb 3-1: Manufacturer: syz [ 242.066844][ T5948] usb 3-1: SerialNumber: syz [ 242.249950][ T5948] usb 3-1: config 0 descriptor?? [ 242.853875][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.859396][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.859430][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.107281][ T5948] ipheth 3-1:0.196: Unable to find endpoints [ 244.127853][ T5948] usb 3-1: USB disconnect, device number 9 [ 246.176717][ T6586] chnl_net:caif_netlink_parms(): no params data found [ 247.399794][ T6719] syz.2.194 (6719): drop_caches: 2 [ 247.400665][ T6719] syz.2.194 (6719): drop_caches: 2 [ 248.869716][ T5892] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 248.970776][ T6722] syz.0.195 (6722): drop_caches: 2 [ 248.971642][ T6722] syz.0.195 (6722): drop_caches: 2 [ 250.818041][ T1540] bridge_slave_1: left allmulticast mode [ 250.818123][ T1540] bridge_slave_1: left promiscuous mode [ 250.820682][ T1540] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.931637][ T1540] bridge_slave_0: left allmulticast mode [ 250.931666][ T1540] bridge_slave_0: left promiscuous mode [ 250.934994][ T1540] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.321133][ T1540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.522047][ T1540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.577614][ T1540] bond0 (unregistering): Released all slaves [ 252.328038][ T1540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.351137][ T1540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.716884][ T5892] usb 4-1: device descriptor read/all, error -71 [ 252.910513][ T1540] team0 (unregistering): Port device team_slave_1 removed [ 253.570671][ T1540] team0 (unregistering): Port device team_slave_0 removed [ 255.731293][ T6774] 9p: Bad value for 'rfdno' [ 256.360213][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.360286][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.589750][ T5892] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 256.689752][ T885] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 256.739717][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 256.749349][ T5892] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 256.749380][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.749402][ T5892] usb 3-1: Product: syz [ 256.749416][ T5892] usb 3-1: Manufacturer: syz [ 256.749431][ T5892] usb 3-1: SerialNumber: syz [ 256.796249][ T5892] usb 3-1: config 0 descriptor?? [ 256.813594][ T5892] gspca_main: se401-2.14.0 probing 047d:5003 [ 256.845027][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.845347][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.845670][ T6586] bridge_slave_0: entered allmulticast mode [ 256.875810][ T885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.875838][ T885] usb 4-1: config 0 has no interface number 0 [ 256.875956][ T885] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 256.875980][ T885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.914066][ T6586] bridge_slave_0: entered promiscuous mode [ 256.935319][ T885] usb 4-1: config 0 descriptor?? [ 257.263681][ T885] usb 4-1: selecting invalid altsetting 1 [ 257.283136][ T885] dvb_ttusb_budget: ttusb_init_controller: error [ 257.284123][ T885] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 257.341328][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.342168][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.343131][ T6586] bridge_slave_1: entered allmulticast mode [ 257.382826][ T6586] bridge_slave_1: entered promiscuous mode [ 257.541733][ T5892] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 257.541839][ T5892] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 257.593827][ T5892] usb 3-1: USB disconnect, device number 10 [ 257.728607][ T885] DVB: Unable to find symbol cx22700_attach() [ 257.814832][ T885] DVB: Unable to find symbol tda10046_attach() [ 257.814848][ T885] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 257.842559][ T885] usb 4-1: USB disconnect, device number 9 [ 258.011042][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.015359][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.339750][ T5944] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 259.778316][ T5944] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.778341][ T5944] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 259.778354][ T5944] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 259.778377][ T5944] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 259.778389][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.996265][ T6802] syz.3.212 (6802): drop_caches: 2 [ 260.000625][ T6802] syz.3.212 (6802): drop_caches: 2 [ 260.584053][ T5944] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.666274][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.666829][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.024382][ T6737] udevd[6737]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.065472][ T5944] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 262.141686][ T5944] usb 1-1: USB disconnect, device number 4 [ 262.312650][ T6586] team0: Port device team_slave_0 added [ 262.333363][ T6586] team0: Port device team_slave_1 added [ 262.509698][ T5892] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 262.583465][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.583483][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.583507][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.585765][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.585780][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.585805][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.733214][ T5892] usb 3-1: not running at top speed; connect to a high speed hub [ 262.737709][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.737743][ T5892] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.834041][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.834072][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.834093][ T5892] usb 3-1: Product: ᐌ [ 262.834108][ T5892] usb 3-1: Manufacturer: О [ 262.834121][ T5892] usb 3-1: SerialNumber: syz [ 263.233229][ T6586] hsr_slave_0: entered promiscuous mode [ 263.234583][ T6586] hsr_slave_1: entered promiscuous mode [ 263.235541][ T6586] debugfs: 'hsr0' already exists in 'hsr' [ 263.235562][ T6586] Cannot create hsr debugfs directory [ 264.850184][ T5892] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 264.900959][ T5892] usb 3-1: USB disconnect, device number 11 [ 265.469747][ T6480] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 265.701517][ T6586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.745086][ T6480] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.745125][ T6480] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 265.745147][ T6480] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 265.745187][ T6480] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.745211][ T6480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.825089][ T6848] 9p: Bad value for 'rfdno' [ 265.978681][ T6586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.034615][ T6586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.098007][ T6480] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.613236][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.613779][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.617473][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.618009][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.649920][ T37] audit: type=1326 audit(1765988926.165:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292435f749 code=0x7ffc0000 [ 266.649976][ T37] audit: type=1326 audit(1765988926.165:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f292435df90 code=0x7ffc0000 [ 266.650016][ T37] audit: type=1326 audit(1765988926.165:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f292435f34b code=0x7ffc0000 [ 266.650059][ T37] audit: type=1326 audit(1765988926.165:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f292435f34b code=0x7ffc0000 [ 266.650098][ T37] audit: type=1326 audit(1765988926.165:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292435f749 code=0x7ffc0000 [ 266.650135][ T37] audit: type=1326 audit(1765988926.165:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f292435f749 code=0x7ffc0000 [ 266.650171][ T37] audit: type=1326 audit(1765988926.165:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292435f749 code=0x7ffc0000 [ 266.650207][ T37] audit: type=1326 audit(1765988926.165:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292435f749 code=0x7ffc0000 [ 266.650243][ T37] audit: type=1326 audit(1765988926.165:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f292435f749 code=0x7ffc0000 [ 266.650282][ T37] audit: type=1326 audit(1765988926.165:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6835 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292435f749 code=0x7ffc0000 [ 266.727570][ T6586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.078179][ T6480] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 268.223550][ T6737] udevd[6737]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.068465][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.269221][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.398584][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.398732][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.608768][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.609477][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.230257][ T6904] 9p: Bad value for 'rfdno' [ 272.723367][ T5977] usb 4-1: USB disconnect, device number 10 [ 274.887588][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.084708][ T6586] veth0_vlan: entered promiscuous mode [ 276.382435][ T6586] veth1_vlan: entered promiscuous mode [ 277.200531][ T6941] syz.0.235 (6941): drop_caches: 2 [ 277.214789][ T6941] syz.0.235 (6941): drop_caches: 2 [ 277.406166][ T6586] veth0_macvtap: entered promiscuous mode [ 277.433359][ T6586] veth1_macvtap: entered promiscuous mode [ 277.517907][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.541578][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.585074][ T3573] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.585310][ T3573] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.585514][ T3573] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.585714][ T3573] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.160311][ T885] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 278.482867][ T885] usb 4-1: Using ep0 maxpacket: 32 [ 278.487546][ T885] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 278.487572][ T885] usb 4-1: config 0 has no interface number 0 [ 278.487605][ T885] usb 4-1: config 0 interface 196 has no altsetting 0 [ 278.494368][ T885] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 278.494399][ T885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.494420][ T885] usb 4-1: Product: syz [ 278.494435][ T885] usb 4-1: Manufacturer: syz [ 278.494449][ T885] usb 4-1: SerialNumber: syz [ 278.518460][ T885] usb 4-1: config 0 descriptor?? [ 278.638470][ T6076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.638494][ T6076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.167137][ T6648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.167159][ T6648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.326987][ T6964] syz.2.234 (6964): drop_caches: 2 [ 280.330972][ T6964] syz.2.234 (6964): drop_caches: 2 [ 280.747933][ T885] ipheth 4-1:0.196: Unable to find endpoints [ 280.779360][ T885] usb 4-1: USB disconnect, device number 11 [ 284.512399][ T6985] warning: `syz.0.243' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.580556][ T6990] futex_wake_op: syz.0.245 tries to shift op by 36; fix this program [ 286.487636][ T6991] 9p: Bad value for 'rfdno' [ 288.569720][ T885] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 288.639762][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 288.751888][ T885] usb 1-1: not running at top speed; connect to a high speed hub [ 288.753522][ T885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.753584][ T885] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.756686][ T885] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.756716][ T885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.756737][ T885] usb 1-1: Product: ᐌ [ 288.756752][ T885] usb 1-1: Manufacturer: О [ 288.756767][ T885] usb 1-1: SerialNumber: syz [ 288.789709][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 288.830047][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.830074][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.832933][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.832962][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.832981][ T43] usb 4-1: Product: syz [ 288.832996][ T43] usb 4-1: Manufacturer: syz [ 288.833011][ T43] usb 4-1: SerialNumber: syz [ 289.075295][ T43] usb 4-1: 0:2 : does not exist [ 289.075438][ T43] usb 4-1: unit 6 not found! [ 289.151137][ T43] usb 4-1: USB disconnect, device number 12 [ 289.369443][ T6742] udevd[6742]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.188268][ T5977] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 292.707155][ T5977] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.707193][ T5977] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 292.707273][ T5977] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 292.707315][ T5977] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.707337][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.972822][ T885] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 292.993628][ T885] usb 1-1: USB disconnect, device number 5 [ 293.183578][ T7048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.254'. [ 295.430522][ T7066] syz.0.258 (7066): drop_caches: 2 [ 295.447805][ T7066] syz.0.258 (7066): drop_caches: 2 [ 297.762153][ T5977] usb 6-1: can't set config #27, error -110 [ 298.059082][ T7087] syz.2.263 (7087): drop_caches: 2 [ 298.076057][ T7087] syz.2.263 (7087): drop_caches: 2 [ 298.909587][ T7088] syz.4.262 (7088): drop_caches: 2 [ 298.911690][ T7088] syz.4.262 (7088): drop_caches: 2 [ 299.608627][ T7097] 9p: Bad value for 'rfdno' [ 300.041847][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.072549][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.099949][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.107741][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.108400][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.472738][ T7104] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 302.319797][ T5815] Bluetooth: hci5: command tx timeout [ 303.146508][ T5944] usb 6-1: USB disconnect, device number 2 [ 304.399748][ T5815] Bluetooth: hci5: command tx timeout [ 304.769304][ T7143] syz.4.272 (7143): drop_caches: 2 [ 304.773412][ T7143] syz.4.272 (7143): drop_caches: 2 [ 306.175583][ T7151] process 'syz.2.273' launched '/dev/fd/8' with NULL argv: empty string added [ 306.479770][ T5815] Bluetooth: hci5: command tx timeout [ 306.595396][ T7148] futex_wake_op: syz.0.274 tries to shift op by 36; fix this program [ 307.011770][ T7157] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 309.076375][ T5815] Bluetooth: hci5: command tx timeout [ 310.715646][ T6643] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.968411][ T7100] chnl_net:caif_netlink_parms(): no params data found [ 311.303041][ T7178] 9p: Bad value for 'rfdno' [ 311.512950][ T6643] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.193887][ T6643] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.776368][ T6643] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.293110][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.293180][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.297682][ T7222] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 317.641693][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.641935][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.642195][ T7100] bridge_slave_0: entered allmulticast mode [ 317.670508][ T7100] bridge_slave_0: entered promiscuous mode [ 317.679517][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.708926][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.709172][ T7100] bridge_slave_1: entered allmulticast mode [ 317.749118][ T7100] bridge_slave_1: entered promiscuous mode [ 320.181329][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.261595][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.722613][ T7100] team0: Port device team_slave_0 added [ 320.757611][ T7100] team0: Port device team_slave_1 added [ 320.985688][ T6643] bridge_slave_1: left allmulticast mode [ 320.985717][ T6643] bridge_slave_1: left promiscuous mode [ 320.986533][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.119751][ T885] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 322.121722][ T6643] bridge_slave_0: left allmulticast mode [ 322.121747][ T6643] bridge_slave_0: left promiscuous mode [ 322.121986][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.289691][ T885] usb 4-1: Using ep0 maxpacket: 16 [ 322.292400][ T885] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.292429][ T885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.292463][ T885] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 322.292486][ T885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.297735][ T885] usb 4-1: config 0 descriptor?? [ 322.831908][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 322.831952][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 322.831981][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 322.832010][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 322.832038][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 322.832066][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 322.832094][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 322.832122][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 322.832150][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 322.832179][ T885] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 323.201883][ T885] cougar 0003:060B:500A.0001: hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.3-1/input0 [ 323.341794][ T7246] ubi31: attaching mtd0 [ 323.371795][ T7246] ubi31: scanning is finished [ 323.911406][ T885] usb 4-1: USB disconnect, device number 13 [ 324.318600][ T7248] fido_id[7248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 324.505790][ T7246] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 324.606336][ T7252] 9p: Bad value for 'rfdno' [ 330.489873][ T7274] binder: 7273:7274 ioctl 4018620d 0 returned -22 [ 330.713131][ T6185] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 332.401016][ T6185] usb 5-1: device descriptor read/64, error -71 [ 335.559051][ T7300] ubi31: attaching mtd0 [ 335.562605][ T7300] ubi31: scanning is finished [ 336.707197][ T7300] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 336.821930][ T5982] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 337.009715][ T5982] usb 1-1: Using ep0 maxpacket: 16 [ 337.012451][ T5982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.012478][ T5982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.016138][ T5982] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.016166][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.016186][ T5982] usb 1-1: Product: syz [ 337.016200][ T5982] usb 1-1: Manufacturer: syz [ 337.016214][ T5982] usb 1-1: SerialNumber: syz [ 337.496389][ T5982] usb 1-1: 0:2 : does not exist [ 337.502567][ T5982] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 338.347094][ T5982] usb 1-1: USB disconnect, device number 6 [ 339.469741][ T6643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.984252][ T6643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.783264][ T7334] ubi31: attaching mtd0 [ 341.786840][ T7334] ubi31: scanning is finished [ 341.808537][ T6643] bond0 (unregistering): Released all slaves [ 343.280558][ T7334] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 346.021633][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.021650][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.021676][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.199695][ T5892] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 346.204755][ T7369] binder: 7368:7369 ioctl c0306201 200000004a40 returned -14 [ 346.354034][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 346.357893][ T5892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.357917][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.357952][ T5892] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 346.363138][ T5892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.363169][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.363190][ T5892] usb 4-1: Product: syz [ 346.363204][ T5892] usb 4-1: Manufacturer: syz [ 346.363219][ T5892] usb 4-1: SerialNumber: syz [ 346.682424][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.682441][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.692118][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.031061][ T7371] ubi31: attaching mtd0 [ 349.057946][ T7371] ubi31: scanning is finished [ 349.505215][ T7371] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 349.646168][ T7378] input: syz1 as /devices/virtual/input/input5 [ 351.443201][ T5892] usb 4-1: 0:2 : does not exist [ 351.802815][ T7392] ubi31: attaching mtd0 [ 351.805809][ T7392] ubi31: scanning is finished [ 351.915756][ T7100] hsr_slave_0: entered promiscuous mode [ 351.932950][ T7100] hsr_slave_1: entered promiscuous mode [ 351.933578][ T7100] debugfs: 'hsr0' already exists in 'hsr' [ 351.933603][ T7100] Cannot create hsr debugfs directory [ 352.006209][ T7392] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 352.006235][ T7392] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 352.006246][ T7392] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 352.006255][ T7392] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 352.006264][ T7392] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 352.006273][ T7392] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 352.006282][ T7392] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1550150853 [ 352.006293][ T7392] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 352.007773][ T7395] ubi31: background thread "ubi_bgt31d" started, PID 7395 [ 352.185248][ T6643] hsr_slave_0: left promiscuous mode [ 352.233916][ T6643] hsr_slave_1: left promiscuous mode [ 352.235299][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.235327][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.275301][ T885] usb 4-1: USB disconnect, device number 14 [ 352.289878][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.289907][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.630126][ T6643] veth1_macvtap: left promiscuous mode [ 352.630237][ T6643] veth0_macvtap: left promiscuous mode [ 352.630605][ T6643] veth1_vlan: left promiscuous mode [ 352.706054][ T6643] veth0_vlan: left promiscuous mode [ 356.989889][ T5892] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 357.164065][ T5892] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 357.164095][ T5892] usb 1-1: config 0 has no interface number 0 [ 357.164133][ T5892] usb 1-1: config 0 interface 107 has no altsetting 0 [ 357.168383][ T5892] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=99.24 [ 357.168412][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.168433][ T5892] usb 1-1: Product: syz [ 357.168448][ T5892] usb 1-1: Manufacturer: syz [ 357.168462][ T5892] usb 1-1: SerialNumber: syz [ 357.212606][ T5892] usb 1-1: config 0 descriptor?? [ 357.248012][ T5892] snd-usb-caiaq 1-1:0.107: can't set alt interface. [ 357.248037][ T5892] usb 1-1: unable to init card! (ret=-5) [ 357.248959][ T5892] snd-usb-caiaq 1-1:0.107: probe with driver snd-usb-caiaq failed with error -5 [ 357.622254][ T7431] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 357.622357][ T7431] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 357.625384][ T7431] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 357.625504][ T7431] kvm: requested 49447 ns i8254 timer period limited to 200000 ns [ 357.625811][ T7431] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 357.625922][ T7431] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 357.626273][ T7431] kvm: requested 156723 ns i8254 timer period limited to 200000 ns [ 357.626421][ T7431] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 357.626642][ T7431] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 357.626751][ T7431] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 362.260398][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.265646][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.284005][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.380750][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.391566][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.481438][ T61] Bluetooth: hci3: command tx timeout [ 364.505323][ T5946] usb 1-1: USB disconnect, device number 7 [ 365.485780][ T7499] syz.3.362 (7499): drop_caches: 2 [ 365.653262][ T7499] syz.3.362 (7499): drop_caches: 2 [ 367.292858][ T61] Bluetooth: hci3: command tx timeout [ 369.420511][ T61] Bluetooth: hci3: command tx timeout [ 371.570006][ T5815] Bluetooth: hci3: command tx timeout [ 373.410374][ T7536] syz.0.373 (7536): drop_caches: 2 [ 373.422364][ T7536] syz.0.373 (7536): drop_caches: 2 [ 374.711570][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 377.640374][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 378.910526][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.910598][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.491847][ T7571] syz.4.383 (7571): drop_caches: 2 [ 379.493159][ T7571] syz.4.383 (7571): drop_caches: 2 [ 383.552779][ T5944] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 384.632283][ T5944] usb 4-1: not running at top speed; connect to a high speed hub [ 384.633419][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.633454][ T5944] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.635841][ T5944] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.635859][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.635869][ T5944] usb 4-1: Product: ᐌ [ 384.635877][ T5944] usb 4-1: Manufacturer: О [ 384.635885][ T5944] usb 4-1: SerialNumber: syz [ 386.185398][ T7612] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 386.569929][ T43] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 386.771954][ T43] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 386.771983][ T43] usb 3-1: config 0 has no interface number 0 [ 386.772014][ T43] usb 3-1: config 0 interface 107 has no altsetting 0 [ 386.777176][ T43] usb 3-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=99.24 [ 386.777401][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.777422][ T43] usb 3-1: Product: syz [ 386.777436][ T43] usb 3-1: Manufacturer: syz [ 386.777450][ T43] usb 3-1: SerialNumber: syz [ 386.874390][ T43] usb 3-1: config 0 descriptor?? [ 386.892939][ T43] snd-usb-caiaq 3-1:0.107: can't set alt interface. [ 386.892964][ T43] usb 3-1: unable to init card! (ret=-5) [ 386.895626][ T43] snd-usb-caiaq 3-1:0.107: probe with driver snd-usb-caiaq failed with error -5 [ 387.061970][ T5944] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 387.087562][ T5944] usb 4-1: USB disconnect, device number 15 [ 390.259660][ T5948] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 390.424295][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 390.499928][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.499949][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.499972][ T5948] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 390.710501][ T5948] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.710543][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.710563][ T5948] usb 5-1: Product: syz [ 390.710576][ T5948] usb 5-1: Manufacturer: syz [ 390.710590][ T5948] usb 5-1: SerialNumber: syz [ 393.165427][ T7612] netlink: 'syz.2.395': attribute type 12 has an invalid length. [ 393.165450][ T7612] netlink: 'syz.2.395': attribute type 29 has an invalid length. [ 393.165464][ T7612] netlink: 148 bytes leftover after parsing attributes in process `syz.2.395'. [ 393.165496][ T7612] netlink: 59 bytes leftover after parsing attributes in process `syz.2.395'. [ 393.165984][ T7612] Zero length message leads to an empty skb [ 393.322888][ T6070] usb 3-1: USB disconnect, device number 12 [ 394.881864][ T6070] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 395.271470][ T7659] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.404'. [ 395.275334][ T7659] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.404'. [ 395.844245][ T5948] usb 5-1: can't set config #1, error -71 [ 395.846648][ T5948] usb 5-1: USB disconnect, device number 8 [ 395.907262][ T7650] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 395.926976][ T6070] usb 4-1: not running at top speed; connect to a high speed hub [ 395.943341][ T6070] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.943399][ T6070] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.120744][ T6070] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.120777][ T6070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.120798][ T6070] usb 4-1: Product: ᐌ [ 396.120813][ T6070] usb 4-1: Manufacturer: О [ 396.120827][ T6070] usb 4-1: SerialNumber: syz [ 396.474573][ T7664] capability: warning: `syz.4.406' uses deprecated v2 capabilities in a way that may be insecure [ 402.243420][ T6070] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 402.269442][ T6070] usb 4-1: USB disconnect, device number 16 [ 402.749680][ T5944] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 403.142169][ T5944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.142197][ T5944] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 403.142235][ T5944] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 403.142259][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.153076][ T5944] usb 1-1: config 0 descriptor?? [ 403.401386][ T7685] binder: BINDER_SET_CONTEXT_MGR already set [ 403.401403][ T7685] binder: 7683:7685 ioctl 4018620d 2000000000c0 returned -16 [ 403.489737][ T5944] usb 1-1: USB disconnect, device number 8 [ 405.373707][ T6643] bridge_slave_1: left allmulticast mode [ 405.373729][ T6643] bridge_slave_1: left promiscuous mode [ 405.373902][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.521883][ T6643] bridge_slave_0: left allmulticast mode [ 405.521913][ T6643] bridge_slave_0: left promiscuous mode [ 405.522170][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.862608][ T6643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.269455][ T7732] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 409.301046][ T5977] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 409.341428][ T6643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.564582][ T6643] bond0 (unregistering): Released all slaves [ 409.595645][ T5977] usb 1-1: not running at top speed; connect to a high speed hub [ 409.599998][ T5977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.600054][ T5977] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.403566][ T5977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.403604][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.403624][ T5977] usb 1-1: Product: ᐌ [ 410.403639][ T5977] usb 1-1: Manufacturer: О [ 410.403654][ T5977] usb 1-1: SerialNumber: syz [ 410.979906][ T6643] hsr_slave_0: left promiscuous mode [ 411.357657][ T6643] hsr_slave_1: left promiscuous mode [ 411.374938][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.415785][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.130653][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 412.330417][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 412.957721][ T5977] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 412.990506][ T5977] usb 1-1: USB disconnect, device number 9 [ 413.439648][ T5944] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 413.626371][ T5944] usb 5-1: not running at top speed; connect to a high speed hub [ 413.628079][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.628138][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.663651][ T5944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.663681][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.663702][ T5944] usb 5-1: Product: ᐌ [ 413.663716][ T5944] usb 5-1: Manufacturer: О [ 413.663731][ T5944] usb 5-1: SerialNumber: syz [ 414.069098][ T7468] chnl_net:caif_netlink_parms(): no params data found [ 418.369792][ T5944] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 418.409655][ T5944] usb 5-1: USB disconnect, device number 9 [ 418.704949][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.705108][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.705236][ T7468] bridge_slave_0: entered allmulticast mode [ 418.706710][ T7468] bridge_slave_0: entered promiscuous mode [ 418.708848][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.708991][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.709102][ T7468] bridge_slave_1: entered allmulticast mode [ 418.777729][ T7468] bridge_slave_1: entered promiscuous mode [ 418.829655][ T5948] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 419.073328][ T5948] usb 3-1: device descriptor read/64, error -71 [ 420.069619][ T5948] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 420.674304][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.699970][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.792797][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.797586][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.859376][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.877729][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.894053][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 425.547187][ T5815] Bluetooth: hci5: command tx timeout [ 425.714321][ T5948] usb 3-1: device descriptor read/64, error -110 [ 425.821572][ T5948] usb usb3-port1: attempt power cycle [ 427.874950][ T5815] Bluetooth: hci5: command tx timeout [ 430.079309][ T61] Bluetooth: hci5: command tx timeout [ 430.417205][ T13] bridge_slave_1: left allmulticast mode [ 430.417231][ T13] bridge_slave_1: left promiscuous mode [ 430.417437][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.710692][ T13] bridge_slave_0: left allmulticast mode [ 430.710721][ T13] bridge_slave_0: left promiscuous mode [ 430.710985][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.569665][ T5948] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 431.729657][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 431.732173][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.732199][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.738224][ T5948] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.738254][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.738274][ T5948] usb 5-1: Product: syz [ 431.738289][ T5948] usb 5-1: Manufacturer: syz [ 431.738303][ T5948] usb 5-1: SerialNumber: syz [ 432.021764][ T5948] usb 5-1: 0:2 : does not exist [ 432.021859][ T5948] usb 5-1: unit 6 not found! [ 432.065398][ T5948] usb 5-1: USB disconnect, device number 10 [ 432.080490][ T5815] Bluetooth: hci5: command tx timeout [ 432.149585][ T6161] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 432.220737][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.289767][ T6161] usb 4-1: device descriptor read/64, error -71 [ 433.429685][ T6161] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 433.430561][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.533085][ T13] bond0 (unregistering): Released all slaves [ 433.599677][ T6161] usb 4-1: device descriptor read/64, error -71 [ 433.795343][ T6161] usb usb4-port1: attempt power cycle [ 433.809695][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 434.290468][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 434.805141][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.805160][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 434.805181][ T43] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 434.805193][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.846497][ T43] usb 3-1: config 0 descriptor?? [ 434.960745][ T6161] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 436.037365][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.037881][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.296620][ T43] hid_parser_main: 1255 callbacks suppressed [ 436.296646][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.296675][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.296691][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.296709][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.296736][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.298277][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.298314][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.298341][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.298359][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.298374][ T43] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 436.424075][ T43] cougar 0003:060B:500A.0002: unbalanced collection at end of report description [ 436.440102][ T43] cougar 0003:060B:500A.0002: parse failed [ 436.440217][ T43] cougar 0003:060B:500A.0002: probe with driver cougar failed with error -22 [ 436.470158][ T43] usb 3-1: USB disconnect, device number 16 [ 437.315127][ T7904] block nbd2: shutting down sockets [ 439.515764][ T6161] usb 4-1: device descriptor read/8, error -71 [ 439.692160][ T7819] chnl_net:caif_netlink_parms(): no params data found [ 440.167368][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.167456][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.009692][ T6161] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 441.037800][ T6161] usb 4-1: Using ep0 maxpacket: 16 [ 441.047151][ T6161] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.047177][ T6161] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.061778][ T6161] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.061807][ T6161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.061827][ T6161] usb 4-1: Product: syz [ 441.061841][ T6161] usb 4-1: Manufacturer: syz [ 441.061855][ T6161] usb 4-1: SerialNumber: syz [ 442.415689][ T6161] usb 4-1: 0:2 : does not exist [ 442.415777][ T6161] usb 4-1: unit 6 not found! [ 442.430570][ T6161] usb 4-1: USB disconnect, device number 20 [ 443.950276][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.950391][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.950591][ T7819] bridge_slave_0: entered allmulticast mode [ 443.985455][ T7819] bridge_slave_0: entered promiscuous mode [ 443.989927][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.989998][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.990138][ T7819] bridge_slave_1: entered allmulticast mode [ 443.996844][ T7819] bridge_slave_1: entered promiscuous mode [ 444.810111][ T5900] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 446.351145][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.355429][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.054637][ T7819] team0: Port device team_slave_0 added [ 448.024007][ T7819] team0: Port device team_slave_1 added [ 451.026401][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.026421][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.026446][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.041058][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.041075][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.041099][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.829555][ T7819] hsr_slave_0: entered promiscuous mode [ 452.627885][ T7819] hsr_slave_1: entered promiscuous mode [ 452.628955][ T7819] debugfs: 'hsr0' already exists in 'hsr' [ 452.628980][ T7819] Cannot create hsr debugfs directory [ 453.069681][ T5947] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 453.199600][ T5947] usb 1-1: device descriptor read/64, error -71 [ 453.439618][ T5947] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 453.569622][ T5947] usb 1-1: device descriptor read/64, error -71 [ 453.696810][ T5947] usb usb1-port1: attempt power cycle [ 455.035927][ T5947] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 458.207289][ T6070] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 458.417310][ T6070] usb 5-1: not running at top speed; connect to a high speed hub [ 458.430985][ T6070] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.431022][ T6070] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.511191][ T6070] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.511855][ T6070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.511878][ T6070] usb 5-1: Product: ᐌ [ 458.511892][ T6070] usb 5-1: Manufacturer: О [ 458.511905][ T6070] usb 5-1: SerialNumber: syz [ 459.966027][ T7819] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 460.080844][ T5947] usb 1-1: device descriptor read/8, error -110 [ 460.113031][ T7819] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 460.197259][ T7819] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 460.333423][ T5947] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 460.354206][ T7819] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 460.392064][ T6070] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 460.399303][ T6070] usb 5-1: USB disconnect, device number 11 [ 460.679856][ T5947] usb 1-1: device not accepting address 14, error -71 [ 460.680268][ T5947] usb usb1-port1: unable to enumerate USB device [ 461.504763][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.632123][ T7819] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.676138][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.676360][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.728723][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.763818][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.089611][ T5900] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 464.830080][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 467.449397][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.847164][ T5900] usb 1-1: device descriptor read/all, error -110 [ 470.019658][ T5900] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 470.149658][ T5947] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 470.149681][ T5900] usb 1-1: device descriptor read/64, error -32 [ 470.271521][ T5900] usb usb1-port1: attempt power cycle [ 470.353045][ T5947] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 470.353074][ T5947] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 470.353110][ T5947] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.353132][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.598723][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.599183][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.620350][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.620765][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.683060][ T5977] usb 4-1: USB disconnect, device number 21 [ 470.861113][ T7819] veth0_vlan: entered promiscuous mode [ 470.977435][ T7819] veth1_vlan: entered promiscuous mode [ 471.210758][ T7819] veth0_macvtap: entered promiscuous mode [ 471.254797][ T7819] veth1_macvtap: entered promiscuous mode [ 471.315854][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.376415][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.395236][ T6064] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.395286][ T6064] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.395318][ T6064] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.395349][ T6064] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.250036][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.250059][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.270783][ T8122] syz.0.498 (8122): drop_caches: 2 [ 473.271708][ T8122] syz.0.498 (8122): drop_caches: 2 [ 473.585836][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.585859][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.215040][ T8130] syz.3.501 (8130): drop_caches: 2 [ 475.217259][ T8130] syz.3.501 (8130): drop_caches: 2 [ 476.424090][ T8161] create_pit_timer: 27 callbacks suppressed [ 476.424111][ T8161] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 476.424238][ T8161] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 476.473849][ T8161] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 476.474004][ T8161] kvm: requested 49447 ns i8254 timer period limited to 200000 ns [ 476.497244][ T8161] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 476.497383][ T8161] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 476.497712][ T8161] kvm: requested 156723 ns i8254 timer period limited to 200000 ns [ 476.498040][ T8161] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 476.498177][ T8161] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 476.498310][ T8161] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 477.668227][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 477.889663][ T5804] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 477.969622][ T5900] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 478.737976][ T5900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.738004][ T5900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.764049][ T5900] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.764299][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 478.764320][ T5900] usb 1-1: SerialNumber: syz [ 478.855117][ T5804] usb 7-1: not running at top speed; connect to a high speed hub [ 478.867880][ T5804] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.868010][ T5804] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.905837][ T5804] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.905856][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.905867][ T5804] usb 7-1: Product: ᐌ [ 478.905874][ T5804] usb 7-1: Manufacturer: О [ 478.905882][ T5804] usb 7-1: SerialNumber: syz [ 479.239632][ T5948] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 479.326385][ T5900] usb 1-1: 0:2 : does not exist [ 479.338718][ T5900] usb 1-1: 0:0: failed to get current value for ch 0 (-22) [ 479.403488][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 480.195220][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.195247][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.224610][ T5900] usb 1-1: USB disconnect, device number 18 [ 480.280580][ T5948] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.280612][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.280632][ T5948] usb 5-1: Product: syz [ 480.280647][ T5948] usb 5-1: Manufacturer: syz [ 480.280660][ T5948] usb 5-1: SerialNumber: syz [ 480.419612][ T5982] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 480.598643][ T5982] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 480.598720][ T5982] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 480.598853][ T5982] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 480.598899][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.653347][ T5948] usb 5-1: 0:2 : does not exist [ 480.674723][ T5948] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 480.734389][ T5948] usb 5-1: USB disconnect, device number 12 [ 481.111899][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.113307][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.149643][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.152729][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.205411][ T5948] usb 3-1: USB disconnect, device number 17 [ 482.511541][ T5804] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 482.514794][ T5804] usb 7-1: USB disconnect, device number 2 [ 484.224031][ T8215] syz.3.516 (8215): drop_caches: 2 [ 484.224611][ T8215] syz.3.516 (8215): drop_caches: 2 [ 490.129605][ T8190] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 490.339626][ T8190] usb 5-1: Using ep0 maxpacket: 16 [ 490.346304][ T8190] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.346330][ T8190] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.422320][ T8190] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.422340][ T8190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.422351][ T8190] usb 5-1: Product: syz [ 490.422359][ T8190] usb 5-1: Manufacturer: syz [ 490.422366][ T8190] usb 5-1: SerialNumber: syz [ 490.929939][ T8190] usb 5-1: 0:2 : does not exist [ 490.981220][ T8190] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 491.041824][ T5804] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 491.083384][ T8190] usb 5-1: USB disconnect, device number 13 [ 491.322517][ T5804] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 491.322545][ T5804] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 491.322581][ T5804] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.322604][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.578815][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.579062][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.603750][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.603980][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.791891][ T8126] usb 3-1: USB disconnect, device number 18 [ 494.939629][ T5982] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 495.136389][ T5982] usb 1-1: Using ep0 maxpacket: 16 [ 495.140511][ T5982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.140539][ T5982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.140573][ T5982] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 495.431636][ T5982] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.431657][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.431668][ T5982] usb 1-1: Product: syz [ 495.431676][ T5982] usb 1-1: Manufacturer: syz [ 495.431684][ T5982] usb 1-1: SerialNumber: syz [ 496.669691][ T5804] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 496.912462][ T5804] usb 3-1: not running at top speed; connect to a high speed hub [ 496.914292][ T5804] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.914341][ T5804] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.964065][ T5804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.964097][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.964118][ T5804] usb 3-1: Product: ᐌ [ 496.964129][ T5804] usb 3-1: Manufacturer: О [ 496.964136][ T5804] usb 3-1: SerialNumber: syz [ 500.432598][ T5804] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 500.468074][ T5804] usb 3-1: USB disconnect, device number 19 [ 500.499412][ T5982] usb 1-1: 0:2 : does not exist [ 501.612469][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.612540][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.772125][ T804] usb 1-1: USB disconnect, device number 19 [ 508.509254][ T8358] block nbd2: shutting down sockets [ 509.660179][ T5944] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 510.589590][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 510.593594][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.593626][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 510.593661][ T5944] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 510.593684][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.662975][ T5944] usb 5-1: config 0 descriptor?? [ 511.790306][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.790629][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.831044][ T5944] hid_parser_main: 1198 callbacks suppressed [ 511.831063][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.831083][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.831099][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.831114][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.831130][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.831146][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.831162][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.831178][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.831194][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.831209][ T5944] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 511.971760][ T5944] cougar 0003:060B:500A.0003: unbalanced collection at end of report description [ 511.972678][ T5944] cougar 0003:060B:500A.0003: parse failed [ 511.972793][ T5944] cougar 0003:060B:500A.0003: probe with driver cougar failed with error -22 [ 512.016851][ T5944] usb 5-1: USB disconnect, device number 14 [ 513.339636][ T6038] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 514.231515][ T8400] binder: BINDER_SET_CONTEXT_MGR already set [ 514.231527][ T8400] binder: 8398:8400 ioctl 4018620d 200000000040 returned -16 [ 523.894150][ T5944] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 524.778247][ T5944] usb 5-1: not running at top speed; connect to a high speed hub [ 525.088657][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.088718][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.304578][ T5944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.304669][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.304690][ T5944] usb 5-1: Product: ᐌ [ 525.304705][ T5944] usb 5-1: Manufacturer: О [ 525.304720][ T5944] usb 5-1: SerialNumber: syz [ 526.705473][ T5944] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 526.729737][ T5944] usb 5-1: USB disconnect, device number 15 [ 532.129771][ T5947] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 532.279658][ T5947] usb 7-1: Using ep0 maxpacket: 8 [ 532.288623][ T5947] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 532.288655][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.288675][ T5947] usb 7-1: Product: syz [ 532.288690][ T5947] usb 7-1: Manufacturer: syz [ 532.288704][ T5947] usb 7-1: SerialNumber: syz [ 532.342812][ T5947] usb 7-1: config 0 descriptor?? [ 532.349042][ T5947] gspca_main: se401-2.14.0 probing 047d:5003 [ 532.489693][ T5944] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 532.660055][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 532.663576][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.663601][ T5944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.671090][ T5944] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.671120][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.671141][ T5944] usb 4-1: Product: syz [ 532.682325][ T5944] usb 4-1: Manufacturer: syz [ 532.682347][ T5944] usb 4-1: SerialNumber: syz [ 532.790913][ T5947] gspca_se401: Wrong descriptor type [ 532.986699][ T5944] usb 4-1: 0:2 : does not exist [ 532.998681][ T5944] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 533.030231][ T5944] usb 4-1: USB disconnect, device number 22 [ 533.034339][ T8508] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 533.067307][ T5977] usb 7-1: USB disconnect, device number 4 [ 539.213499][ T8537] binder: BINDER_SET_CONTEXT_MGR already set [ 539.213510][ T8537] binder: 8534:8537 ioctl 4018620d 200000000040 returned -16 [ 540.202123][ T5947] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 541.585643][ T8546] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 543.610321][ T5948] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 545.083066][ T5948] usb 7-1: device descriptor read/all, error -71 [ 551.335138][ T8604] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.632'. [ 551.335315][ T8604] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.632'. [ 552.879915][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 555.889837][ T8626] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 562.604002][ T8661] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 563.277830][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.281058][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.896651][ T8669] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 565.409207][ T8190] kernel read not supported for file /494/coredump_filter (pid: 8190 comm: kworker/1:0) [ 570.110454][ T5892] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 570.798217][ T8707] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 572.965861][ T8640] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 573.136872][ T8640] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 573.136936][ T8640] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 573.136952][ T8640] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 573.136967][ T8640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.192237][ T8640] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 573.192322][ T8640] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 573.192342][ T8640] usb 5-1: Product: syz [ 573.192356][ T8640] usb 5-1: Manufacturer: syz [ 573.192369][ T8640] usb 5-1: SerialNumber: syz [ 573.233760][ T8640] usb 5-1: config 0 descriptor?? [ 573.234793][ T8718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 573.273301][ T8640] usb 5-1: selecting invalid altsetting 0 [ 573.637635][ T8640] usb 5-1: USB disconnect, device number 16 [ 573.972300][ T8724] binder: BINDER_SET_CONTEXT_MGR already set [ 573.972317][ T8724] binder: 8723:8724 ioctl 4018620d 200000000040 returned -16 [ 578.911438][ T8750] 9p: Bad value for 'rfdno' [ 581.179567][ T8126] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 581.366511][ T8126] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 581.366549][ T8126] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 581.366571][ T8126] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 581.366612][ T8126] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 581.366636][ T8126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.417832][ T8769] create_pit_timer: 27 callbacks suppressed [ 581.417854][ T8769] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 581.417973][ T8769] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 581.440340][ T8769] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 581.440650][ T8769] kvm: requested 49447 ns i8254 timer period limited to 200000 ns [ 581.441063][ T8769] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 581.441202][ T8769] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 581.441449][ T8769] kvm: requested 156723 ns i8254 timer period limited to 200000 ns [ 581.441591][ T8769] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 581.441808][ T8769] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 581.441952][ T8769] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 581.545959][ T8126] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 581.782047][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.782484][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.787274][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.793746][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.878855][ T8126] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 581.907071][ T8126] usb 4-1: USB disconnect, device number 24 [ 582.079864][ T8776] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 585.569572][ T5948] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 590.293125][ T8820] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 596.580128][ T1228] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 596.580398][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 596.639595][ T8640] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 596.720862][ T1228] usb 5-1: device descriptor read/64, error -32 [ 596.802921][ T8640] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 596.802941][ T8640] usb 4-1: config 0 has no interface number 0 [ 596.802959][ T8640] usb 4-1: config 0 interface 107 has no altsetting 0 [ 596.805747][ T8640] usb 4-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=99.24 [ 596.805778][ T8640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.805798][ T8640] usb 4-1: Product: syz [ 596.805813][ T8640] usb 4-1: Manufacturer: syz [ 596.805828][ T8640] usb 4-1: SerialNumber: syz [ 596.811101][ T8640] usb 4-1: config 0 descriptor?? [ 596.883738][ T8640] snd-usb-caiaq 4-1:0.107: can't set alt interface. [ 596.883753][ T8640] usb 4-1: unable to init card! (ret=-5) [ 596.884016][ T8640] snd-usb-caiaq 4-1:0.107: probe with driver snd-usb-caiaq failed with error -5 [ 597.009639][ T1228] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 597.106731][ T8640] usb 4-1: USB disconnect, device number 25 [ 598.020742][ T5893] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 598.357879][ T5893] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.357918][ T5893] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 598.357981][ T5893] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 598.358060][ T5893] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.358164][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.372399][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 599.411550][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.411954][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.413984][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.414722][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.629678][ T8875] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 599.723978][ T5893] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 599.755707][ T5893] usb 3-1: USB disconnect, device number 20 [ 601.002374][ T8881] netlink: 'syz.0.711': attribute type 12 has an invalid length. [ 601.002397][ T8881] netlink: 'syz.0.711': attribute type 29 has an invalid length. [ 601.002411][ T8881] netlink: 148 bytes leftover after parsing attributes in process `syz.0.711'. [ 601.002435][ T8881] netlink: 39 bytes leftover after parsing attributes in process `syz.0.711'. [ 602.279546][ T1228] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 602.431932][ T1228] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 602.431953][ T1228] usb 1-1: config 0 has no interface number 0 [ 602.431973][ T1228] usb 1-1: config 0 interface 107 has no altsetting 0 [ 602.433997][ T1228] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=99.24 [ 602.434015][ T1228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.434027][ T1228] usb 1-1: Product: syz [ 602.434034][ T1228] usb 1-1: Manufacturer: syz [ 602.434042][ T1228] usb 1-1: SerialNumber: syz [ 602.437212][ T1228] usb 1-1: config 0 descriptor?? [ 602.523038][ T1228] snd-usb-caiaq 1-1:0.107: can't set alt interface. [ 602.523063][ T1228] usb 1-1: unable to init card! (ret=-5) [ 602.523525][ T1228] snd-usb-caiaq 1-1:0.107: probe with driver snd-usb-caiaq failed with error -5 [ 602.684435][ T5944] usb 1-1: USB disconnect, device number 22 [ 603.863758][ T8902] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.716'. [ 603.866284][ T8902] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.716'. [ 605.391845][ T8907] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 605.700270][ T5948] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 605.856972][ T5948] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 605.857007][ T5948] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 605.857032][ T5948] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 605.857047][ T5948] usb 1-1: config 0 interface 0 has no altsetting 0 [ 605.902347][ T43] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 605.910389][ T5948] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 605.910421][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 605.910441][ T5948] usb 1-1: Product: syz [ 605.910455][ T5948] usb 1-1: Manufacturer: syz [ 605.910470][ T5948] usb 1-1: SerialNumber: syz [ 605.936222][ T5948] usb 1-1: config 0 descriptor?? [ 605.964062][ T8912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 605.982362][ T5948] usb 1-1: selecting invalid altsetting 0 [ 606.051767][ T43] usb 7-1: not running at top speed; connect to a high speed hub [ 606.052763][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.052796][ T43] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.054813][ T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.054830][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.054842][ T43] usb 7-1: Product: ᐌ [ 606.054850][ T43] usb 7-1: Manufacturer: О [ 606.054858][ T43] usb 7-1: SerialNumber: syz [ 606.235220][ T5948] usb 1-1: USB disconnect, device number 23 [ 606.292244][ T43] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 606.334353][ T43] usb 7-1: USB disconnect, device number 7 [ 606.956798][ T5948] kernel read not supported for file /579/coredump_filter (pid: 5948 comm: kworker/1:10) [ 608.764553][ T5977] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 609.953500][ T8946] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.730'. [ 609.957407][ T8946] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.730'. [ 611.759793][ T1228] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 613.547035][ T5948] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 613.702717][ T5948] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 613.702754][ T5948] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 613.702781][ T5948] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 613.702810][ T5948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 613.756479][ T5948] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 613.756510][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 613.756533][ T5948] usb 5-1: Product: syz [ 613.756547][ T5948] usb 5-1: Manufacturer: syz [ 613.756623][ T5948] usb 5-1: SerialNumber: syz [ 613.798291][ T5948] usb 5-1: config 0 descriptor?? [ 613.805097][ T8950] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 613.828932][ T6480] kernel read not supported for file /179/coredump_filter (pid: 6480 comm: kworker/0:12) [ 613.849748][ T5948] usb 5-1: selecting invalid altsetting 0 [ 614.059915][ T5948] usb 5-1: USB disconnect, device number 19 [ 617.126076][ T1228] usb 1-1: device descriptor read/64, error -110 [ 617.589236][ T8984] netlink: 'syz.6.741': attribute type 12 has an invalid length. [ 617.589252][ T8984] netlink: 'syz.6.741': attribute type 29 has an invalid length. [ 617.589259][ T8984] netlink: 148 bytes leftover after parsing attributes in process `syz.6.741'. [ 617.589274][ T8984] netlink: 51 bytes leftover after parsing attributes in process `syz.6.741'. [ 617.759574][ T5977] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 617.799877][ T6480] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 617.829631][ T5892] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 617.947607][ T5977] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 617.947637][ T5977] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 617.947649][ T5977] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 617.947672][ T5977] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.947684][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.960511][ T6480] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.960538][ T6480] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.961731][ T6480] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 617.961757][ T6480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 617.961776][ T6480] usb 3-1: SerialNumber: syz [ 617.991790][ T5892] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 617.991819][ T5892] usb 7-1: config 0 has no interface number 0 [ 617.991856][ T5892] usb 7-1: config 0 interface 107 has no altsetting 0 [ 618.015773][ T5977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.022699][ T5892] usb 7-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=99.24 [ 618.022847][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.022867][ T5892] usb 7-1: Product: syz [ 618.022882][ T5892] usb 7-1: Manufacturer: syz [ 618.022896][ T5892] usb 7-1: SerialNumber: syz [ 618.111151][ T5892] usb 7-1: config 0 descriptor?? [ 618.176840][ T5892] snd-usb-caiaq 7-1:0.107: can't set alt interface. [ 618.176858][ T5892] usb 7-1: unable to init card! (ret=-5) [ 618.194755][ T5892] snd-usb-caiaq 7-1:0.107: probe with driver snd-usb-caiaq failed with error -5 [ 618.351571][ T5892] usb 7-1: USB disconnect, device number 9 [ 618.378236][ T6480] usb 3-1: 0:2 : does not exist [ 618.389606][ T5977] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 618.395750][ T6480] usb 3-1: 0:0: failed to get current value for ch 0 (-22) [ 618.484104][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.484343][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.524326][ T6480] usb 3-1: USB disconnect, device number 21 [ 619.340942][ T8990] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.742'. [ 619.341700][ T8990] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.742'. [ 620.089908][ T5893] usb 4-1: USB disconnect, device number 26 [ 621.620295][ T5892] kernel read not supported for file /629/coredump_filter (pid: 5892 comm: kworker/0:5) [ 624.599248][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.608639][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.272302][ T9025] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 626.389592][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 626.885496][ T9031] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.754'. [ 626.886221][ T9031] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.754'. [ 627.548662][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.548686][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 627.548699][ T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 627.548722][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 627.548735][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.448667][ T9052] 9p: Bad value for 'rfdno' [ 632.732557][ T43] usb 4-1: can't set config #27, error -110 [ 632.949610][ T8640] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 633.030988][ T1228] usb 4-1: USB disconnect, device number 27 [ 633.129297][ T8640] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 633.129322][ T8640] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 633.129335][ T8640] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 633.129358][ T8640] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 633.129370][ T8640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.183683][ T8640] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.390557][ T8640] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 633.435774][ T9070] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 633.595627][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.596051][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.625864][ T5948] usb 5-1: USB disconnect, device number 20 [ 635.542400][ T9078] binder: BINDER_SET_CONTEXT_MGR already set [ 635.542412][ T9078] binder: 9077:9078 ioctl 4018620d 200000000040 returned -16 [ 636.891478][ T5944] kernel read not supported for file /207/coredump_filter (pid: 5944 comm: kworker/1:6) [ 636.919722][ T5982] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 637.205686][ T5982] usb 4-1: Using ep0 maxpacket: 8 [ 637.802203][ T5982] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 637.802239][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.802260][ T5982] usb 4-1: Product: syz [ 637.802275][ T5982] usb 4-1: Manufacturer: syz [ 637.802291][ T5982] usb 4-1: SerialNumber: syz [ 637.901514][ T5982] usb 4-1: config 0 descriptor?? [ 637.951666][ T5982] gspca_main: se401-2.14.0 probing 047d:5003 [ 639.526624][ T5977] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 639.612744][ T9101] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 640.962968][ T5977] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 640.963567][ T5977] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 640.963593][ T5977] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 640.963633][ T5977] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 640.963654][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.227764][ T5982] gspca_se401: read req failed req 0x06 error -19 [ 641.239108][ T5982] usb 4-1: USB disconnect, device number 28 [ 642.429077][ T9117] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.767'. [ 642.429959][ T9117] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.767'. [ 645.447030][ T5977] usb 1-1: can't set config #27, error -71 [ 645.451159][ T5977] usb 1-1: USB disconnect, device number 26 [ 645.832082][ T5977] kernel read not supported for file /652/coredump_filter (pid: 5977 comm: kworker/0:9) [ 654.200111][ T804] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 654.454806][ T9182] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.790'. [ 654.455578][ T9182] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.790'. [ 655.235605][ T804] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.235645][ T804] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 655.235669][ T804] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 655.235730][ T804] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 655.235755][ T804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.250276][ T804] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.481550][ T804] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 655.941656][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.942087][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.944592][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.945047][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.955332][ T8640] usb 7-1: USB disconnect, device number 10 [ 662.551481][ T9231] syz.6.805 (9231) used greatest stack depth: 12632 bytes left [ 667.870006][ T5900] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 670.359525][ T5859] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 671.453684][ T5859] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 671.453713][ T5859] usb 1-1: config 0 has no interface number 0 [ 671.453747][ T5859] usb 1-1: config 0 interface 107 has no altsetting 0 [ 671.457838][ T5859] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=99.24 [ 671.457871][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.457891][ T5859] usb 1-1: Product: syz [ 671.457906][ T5859] usb 1-1: Manufacturer: syz [ 671.457920][ T5859] usb 1-1: SerialNumber: syz [ 671.552259][ T5859] usb 1-1: config 0 descriptor?? [ 671.567499][ T5859] snd-usb-caiaq 1-1:0.107: can't set alt interface. [ 671.567523][ T5859] usb 1-1: unable to init card! (ret=-5) [ 671.568578][ T5859] snd-usb-caiaq 1-1:0.107: probe with driver snd-usb-caiaq failed with error -5 [ 671.785198][ T5900] usb 1-1: USB disconnect, device number 27 [ 673.726578][ T9282] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.819'. [ 673.726835][ T9282] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.819'. [ 674.949615][ T5859] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 675.099577][ T5859] usb 3-1: Using ep0 maxpacket: 8 [ 676.187191][ T5859] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 676.187212][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.187229][ T5859] usb 3-1: Product: syz [ 676.187243][ T5859] usb 3-1: Manufacturer: syz [ 676.187257][ T5859] usb 3-1: SerialNumber: syz [ 676.235063][ T5859] usb 3-1: config 0 descriptor?? [ 676.267865][ T5859] gspca_main: se401-2.14.0 probing 047d:5003 [ 677.678463][ T5859] gspca_se401: read req failed req 0x06 error -19 [ 677.714175][ T5859] usb 3-1: USB disconnect, device number 22 [ 678.069554][ T5859] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 679.461067][ T5859] usb 3-1: not running at top speed; connect to a high speed hub [ 679.501147][ T5859] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.501210][ T5859] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.585278][ T5859] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 679.585319][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.585341][ T5859] usb 3-1: Product: ᐌ [ 679.585357][ T5859] usb 3-1: Manufacturer: О [ 679.585371][ T5859] usb 3-1: SerialNumber: syz [ 681.199621][ T5892] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 681.354997][ T5892] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 681.355027][ T5892] usb 5-1: config 0 has no interface number 0 [ 681.355059][ T5892] usb 5-1: config 0 interface 107 has no altsetting 0 [ 681.356008][ T5859] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 681.358877][ T5892] usb 5-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=99.24 [ 681.358905][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.358925][ T5892] usb 5-1: Product: syz [ 681.358939][ T5892] usb 5-1: Manufacturer: syz [ 681.358954][ T5892] usb 5-1: SerialNumber: syz [ 681.405647][ T5892] usb 5-1: config 0 descriptor?? [ 681.444335][ T5859] usb 3-1: USB disconnect, device number 23 [ 681.459169][ T5892] snd-usb-caiaq 5-1:0.107: can't set alt interface. [ 681.459186][ T5892] usb 5-1: unable to init card! (ret=-5) [ 681.474762][ T5892] snd-usb-caiaq 5-1:0.107: probe with driver snd-usb-caiaq failed with error -5 [ 681.615647][ T5892] usb 5-1: USB disconnect, device number 21 [ 683.448918][ T8190] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 683.612267][ T8190] usb 1-1: not running at top speed; connect to a high speed hub [ 683.617112][ T8190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.617171][ T8190] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.655313][ T8190] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 683.655343][ T8190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.655364][ T8190] usb 1-1: Product: ᐌ [ 683.655378][ T8190] usb 1-1: Manufacturer: О [ 683.655392][ T8190] usb 1-1: SerialNumber: syz [ 686.242364][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.242526][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.719627][ T5945] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 686.879752][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 686.909171][ T5945] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 686.909262][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.909284][ T5945] usb 4-1: Product: syz [ 686.933393][ T5945] usb 4-1: Manufacturer: syz [ 686.933407][ T5945] usb 4-1: SerialNumber: syz [ 686.961394][ T5945] usb 4-1: config 0 descriptor?? [ 686.983548][ T5945] gspca_main: se401-2.14.0 probing 047d:5003 [ 687.514048][ T8190] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 687.549048][ T8190] usb 1-1: USB disconnect, device number 28 [ 689.814505][ T5945] gspca_se401: read req failed req 0x06 error -19 [ 689.831435][ T5945] usb 4-1: USB disconnect, device number 29 [ 690.311123][ T9359] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.832'. [ 690.311257][ T9359] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.832'. [ 697.159830][ T5859] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 697.991002][ T5859] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.991033][ T5859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 697.994510][ T5859] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 697.994540][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 697.994561][ T5859] usb 5-1: SerialNumber: syz [ 698.436680][ T9388] 9p: Bad value for 'rfdno' [ 700.734215][ T5859] usb 5-1: 0:2 : does not exist [ 700.745518][ T5859] usb 5-1: 0:0: failed to get current value for ch 0 (-22) [ 700.808290][ T5859] usb 5-1: USB disconnect, device number 22 [ 702.630541][ T8640] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 705.083333][ T8640] usb 5-1: device not accepting address 23, error -71 [ 705.374030][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 705.413037][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 705.415635][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 705.421735][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 705.423077][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 706.608810][ T9415] chnl_net:caif_netlink_parms(): no params data found [ 708.200379][ T5815] Bluetooth: hci3: command tx timeout [ 708.489580][ T885] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 708.674873][ T885] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 708.674903][ T885] usb 7-1: config 0 has no interface number 0 [ 708.674937][ T885] usb 7-1: config 0 interface 107 has no altsetting 0 [ 708.677507][ T885] usb 7-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=99.24 [ 708.677526][ T885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.677537][ T885] usb 7-1: Product: syz [ 708.677545][ T885] usb 7-1: Manufacturer: syz [ 708.677553][ T885] usb 7-1: SerialNumber: syz [ 708.682305][ T885] usb 7-1: config 0 descriptor?? [ 708.745670][ T885] snd-usb-caiaq 7-1:0.107: can't set alt interface. [ 708.745693][ T885] usb 7-1: unable to init card! (ret=-5) [ 708.746155][ T885] snd-usb-caiaq 7-1:0.107: probe with driver snd-usb-caiaq failed with error -5 [ 708.910283][ T885] usb 7-1: USB disconnect, device number 12 [ 709.081737][ T9415] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.082337][ T9415] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.082575][ T9415] bridge_slave_0: entered allmulticast mode [ 709.121695][ T9415] bridge_slave_0: entered promiscuous mode [ 709.140205][ T9415] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.140418][ T9415] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.140647][ T9415] bridge_slave_1: entered allmulticast mode [ 709.143319][ T9415] bridge_slave_1: entered promiscuous mode [ 710.859864][ T5815] Bluetooth: hci3: command tx timeout [ 711.072930][ T9442] 9p: Bad value for 'rfdno' [ 711.410925][ T9415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.441941][ T9415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.526078][ T6064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.354483][ T5815] Bluetooth: hci3: command tx timeout [ 716.723318][ T61] Bluetooth: hci3: command tx timeout [ 717.028239][ T9415] team0: Port device team_slave_0 added [ 718.941026][ T9415] team0: Port device team_slave_1 added [ 720.358095][ T6064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.560454][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 721.560472][ T37] audit: type=1326 audit(1765989381.115:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 721.569888][ T37] audit: type=1326 audit(1765989381.125:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 721.604499][ T37] audit: type=1326 audit(1765989381.135:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 721.608852][ T37] audit: type=1326 audit(1765989381.155:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 721.610020][ T37] audit: type=1326 audit(1765989381.165:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 721.611769][ T37] audit: type=1326 audit(1765989381.165:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 721.612667][ T37] audit: type=1326 audit(1765989381.165:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 721.613000][ T37] audit: type=1326 audit(1765989381.165:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 721.613585][ T37] audit: type=1326 audit(1765989381.165:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 721.613923][ T37] audit: type=1326 audit(1765989381.165:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99b964f749 code=0x7ffc0000 [ 724.325183][ T6064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.539984][ T9415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.539997][ T9415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.540013][ T9415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.902715][ T6064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.982949][ T9415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.982966][ T9415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.982990][ T9415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.127856][ T9548] syz.0.891 (9548): drop_caches: 2 [ 725.128112][ T9548] syz.0.891 (9548): drop_caches: 2 [ 725.504302][ T9415] hsr_slave_0: entered promiscuous mode [ 725.508411][ T9415] hsr_slave_1: entered promiscuous mode [ 725.514581][ T9415] debugfs: 'hsr0' already exists in 'hsr' [ 725.514611][ T9415] Cannot create hsr debugfs directory [ 728.139571][ T8640] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 728.849530][ T9595] autofs: Unknown parameter '0x0000000000000000' [ 729.422651][ T8640] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 729.422681][ T8640] usb 5-1: config 0 has no interface number 0 [ 729.422723][ T8640] usb 5-1: config 0 interface 107 has no altsetting 0 [ 729.427331][ T8640] usb 5-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=99.24 [ 729.427362][ T8640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.427383][ T8640] usb 5-1: Product: syz [ 729.427398][ T8640] usb 5-1: Manufacturer: syz [ 729.427413][ T8640] usb 5-1: SerialNumber: syz [ 729.432802][ T8640] usb 5-1: config 0 descriptor?? [ 729.455176][ T8640] snd-usb-caiaq 5-1:0.107: can't set alt interface. [ 729.455199][ T8640] usb 5-1: unable to init card! (ret=-5) [ 729.456291][ T8640] snd-usb-caiaq 5-1:0.107: probe with driver snd-usb-caiaq failed with error -5 [ 729.632029][ T6064] bridge_slave_1: left allmulticast mode [ 729.632057][ T6064] bridge_slave_1: left promiscuous mode [ 729.632290][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.643254][ T8640] usb 5-1: USB disconnect, device number 25 [ 729.761539][ T6064] bridge_slave_0: left allmulticast mode [ 729.761569][ T6064] bridge_slave_0: left promiscuous mode [ 729.761826][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.313524][ T9590] syz.6.924 (9590): drop_caches: 2 [ 730.313777][ T9590] syz.6.924 (9590): drop_caches: 2 [ 731.192520][ T9617] autofs: Unknown parameter '0x0000000000000000' [ 733.755039][ T8640] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 733.899629][ T8640] usb 5-1: Using ep0 maxpacket: 16 [ 733.901865][ T8640] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.901892][ T8640] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 733.903773][ T8640] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.903791][ T8640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.903802][ T8640] usb 5-1: Product: syz [ 733.903810][ T8640] usb 5-1: Manufacturer: syz [ 733.903818][ T8640] usb 5-1: SerialNumber: syz [ 734.127082][ T8640] usb 5-1: 0:2 : does not exist [ 734.182072][ T9653] binder: BINDER_SET_CONTEXT_MGR already set [ 734.182085][ T9653] binder: 9649:9653 ioctl 4018620d 200000000040 returned -16 [ 734.212187][ T8640] usb 5-1: USB disconnect, device number 26 [ 737.236935][ T8640] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 737.425931][ T8640] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 737.425971][ T8640] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 737.426190][ T8640] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 737.426273][ T8640] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 737.426299][ T8640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.736879][ T8640] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 737.974080][ T8640] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 738.047740][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.051745][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.001225][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.209845][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.290217][ T8126] usb 1-1: USB disconnect, device number 29 [ 739.441734][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.566826][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.628900][ T6064] bond0 (unregistering): Released all slaves [ 744.040798][ T9415] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 744.130030][ T9415] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 744.249866][ T9415] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 744.325317][ T9415] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 744.347535][ T9752] syz.0.986 (9752): drop_caches: 2 [ 744.348840][ T9752] syz.0.986 (9752): drop_caches: 2 [ 744.502374][ T6064] hsr_slave_0: left promiscuous mode [ 744.532195][ T6064] hsr_slave_1: left promiscuous mode [ 745.654206][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.654229][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.770790][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.770820][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.176254][ T6064] veth1_macvtap: left promiscuous mode [ 746.176365][ T6064] veth0_macvtap: left promiscuous mode [ 746.176636][ T6064] veth1_vlan: left promiscuous mode [ 746.176811][ T6064] veth0_vlan: left promiscuous mode [ 748.000959][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.001033][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.296483][ T804] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 749.445111][ T804] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.445151][ T804] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 749.445173][ T804] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 749.445213][ T804] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 749.445237][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.623040][ T9793] ubi: mtd0 is already attached to ubi31 [ 750.286707][ T804] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.637644][ T804] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 751.819815][ T9805] No control pipe specified [ 756.841544][ T9883] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 756.870229][ T6064] team0 (unregistering): Port device team_slave_1 removed [ 757.290476][ T6064] team0 (unregistering): Port device team_slave_0 removed [ 758.720151][ T9931] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 759.371795][ T9936] No control pipe specified [ 760.584000][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 760.602321][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 760.603979][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 760.605328][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 760.606520][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 762.266495][ T9966] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 762.375045][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 762.375065][ T37] audit: type=1326 audit(1765989421.925:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.383072][ T37] audit: type=1326 audit(1765989421.935:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.383126][ T37] audit: type=1326 audit(1765989421.935:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.383166][ T37] audit: type=1326 audit(1765989421.935:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.383205][ T37] audit: type=1326 audit(1765989421.935:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.383242][ T37] audit: type=1326 audit(1765989421.935:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.383283][ T37] audit: type=1326 audit(1765989421.935:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.383321][ T37] audit: type=1326 audit(1765989421.935:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.391585][ T37] audit: type=1326 audit(1765989421.945:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.391856][ T37] audit: type=1326 audit(1765989421.945:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.6.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9076cf749 code=0x7ffc0000 [ 762.639582][ T61] Bluetooth: hci2: command tx timeout [ 764.761657][ T61] Bluetooth: hci2: command tx timeout [ 766.314360][ T5945] ------------[ cut here ]------------ [ 766.314380][ T5945] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d9/0x710, CPU#1: kworker/1:7/5945 [ 766.314425][ T5945] Modules linked in: [ 766.314458][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 766.314484][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.314499][ T5945] Workqueue: usb_hub_wq hub_event [ 766.314531][ T5945] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 766.314555][ T5945] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 2c be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 89 3a 13 09 89 c0 48 c7 c7 a0 83 b2 [ 766.314574][ T5945] RSP: 0018:ffffc90004767728 EFLAGS: 00010202 [ 766.314593][ T5945] RAX: 0000000000000002 RBX: ffff888027679e40 RCX: 0000000000000000 [ 766.314609][ T5945] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 766.314625][ T5945] RBP: ffffc90004767a30 R08: ffffffff8ad5e5d1 R09: ffffffff8d5ae8c0 [ 766.314641][ T5945] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff888145359000 [ 766.314657][ T5945] R13: dffffc0000000000 R14: 0100000000000005 R15: ffff888145347000 [ 766.314674][ T5945] FS: 0000000000000000(0000) GS:ffff888126e01000(0000) knlGS:0000000000000000 [ 766.314692][ T5945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.314707][ T5945] CR2: 000055559459b808 CR3: 0000000038ee4000 CR4: 00000000003526f0 [ 766.314726][ T5945] Call Trace: [ 766.314742][ T5945] [ 766.314755][ T5945] hub_event+0x158/0x4f30 [ 766.314786][ T5945] ? __lock_acquire+0x6b6/0x2cf0 [ 766.314819][ T5945] ? look_up_lock_class+0x74/0x150 [ 766.314850][ T5945] ? __lock_acquire+0x6b6/0x2cf0 [ 766.314886][ T5945] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 766.314930][ T5945] ? __pfx_hub_event+0x10/0x10 [ 766.314958][ T5945] ? process_scheduled_works+0x9ef/0x1770 [ 766.314989][ T5945] ? _raw_spin_unlock_irq+0x23/0x50 [ 766.315009][ T5945] ? process_scheduled_works+0x9ef/0x1770 [ 766.315032][ T5945] ? process_scheduled_works+0x9ef/0x1770 [ 766.315058][ T5945] process_scheduled_works+0xad1/0x1770 [ 766.315120][ T5945] ? __pfx_process_scheduled_works+0x10/0x10 [ 766.315163][ T5945] worker_thread+0x8a0/0xda0 [ 766.315216][ T5945] kthread+0x711/0x8a0 [ 766.315249][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 766.315274][ T5945] ? __pfx_kthread+0x10/0x10 [ 766.315301][ T5945] ? rt_spin_unlock+0x150/0x200 [ 766.315334][ T5945] ? rt_spin_unlock+0x161/0x200 [ 766.315360][ T5945] ? __pfx_kthread+0x10/0x10 [ 766.315390][ T5945] ret_from_fork+0x599/0xb30 [ 766.315417][ T5945] ? __pfx_ret_from_fork+0x10/0x10 [ 766.315452][ T5945] ? __switch_to_asm+0x39/0x70 [ 766.315482][ T5945] ? __switch_to_asm+0x33/0x70 [ 766.315511][ T5945] ? __pfx_kthread+0x10/0x10 [ 766.315541][ T5945] ret_from_fork_asm+0x1a/0x30 [ 766.315590][ T5945] [ 766.315609][ T5945] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 766.315625][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 766.315650][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.315664][ T5945] Workqueue: usb_hub_wq hub_event [ 766.315689][ T5945] Call Trace: [ 766.315698][ T5945] [ 766.315706][ T5945] dump_stack_lvl+0x99/0x250 [ 766.315734][ T5945] ? __asan_memcpy+0x40/0x70 [ 766.315760][ T5945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.315787][ T5945] ? __pfx__printk+0x10/0x10 [ 766.315810][ T5945] vpanic+0x237/0x6d0 [ 766.315825][ T5945] ? __pfx_vpanic+0x10/0x10 [ 766.315840][ T5945] ? is_bpf_text_address+0x292/0x2b0 [ 766.315855][ T5945] ? is_bpf_text_address+0x26/0x2b0 [ 766.315874][ T5945] panic+0xb9/0xc0 [ 766.315888][ T5945] ? __pfx_panic+0x10/0x10 [ 766.315907][ T5945] ? ret_from_fork_asm+0x1a/0x30 [ 766.315925][ T5945] __warn+0x317/0x4b0 [ 766.315939][ T5945] ? kcov_remote_start+0x5d9/0x710 [ 766.315953][ T5945] ? kcov_remote_start+0x5d9/0x710 [ 766.315964][ T5945] __report_bug+0x288/0x500 [ 766.315982][ T5945] ? kcov_remote_start+0x5d9/0x710 [ 766.315997][ T5945] ? __pfx___report_bug+0x10/0x10 [ 766.316019][ T5945] ? rt_spin_lock+0x1c1/0x3e0 [ 766.316035][ T5945] ? kcov_remote_start+0x5d9/0x710 [ 766.316046][ T5945] report_bug+0x16a/0x220 [ 766.316062][ T5945] ? kcov_remote_start+0x5d9/0x710 [ 766.316073][ T5945] ? kcov_remote_start+0x5db/0x710 [ 766.316084][ T5945] handle_bug+0x98/0x200 [ 766.316103][ T5945] exc_invalid_op+0x1a/0x50 [ 766.316117][ T5945] asm_exc_invalid_op+0x1a/0x20 [ 766.316128][ T5945] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 766.316140][ T5945] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 2c be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 89 3a 13 09 89 c0 48 c7 c7 a0 83 b2 [ 766.316150][ T5945] RSP: 0018:ffffc90004767728 EFLAGS: 00010202 [ 766.316160][ T5945] RAX: 0000000000000002 RBX: ffff888027679e40 RCX: 0000000000000000 [ 766.316168][ T5945] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 766.316176][ T5945] RBP: ffffc90004767a30 R08: ffffffff8ad5e5d1 R09: ffffffff8d5ae8c0 [ 766.316184][ T5945] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff888145359000 [ 766.316193][ T5945] R13: dffffc0000000000 R14: 0100000000000005 R15: ffff888145347000 [ 766.316205][ T5945] ? rt_spin_lock+0x1c1/0x3e0 [ 766.316223][ T5945] ? kcov_remote_start+0xe1/0x710 [ 766.316236][ T5945] hub_event+0x158/0x4f30 [ 766.316251][ T5945] ? __lock_acquire+0x6b6/0x2cf0 [ 766.316268][ T5945] ? look_up_lock_class+0x74/0x150 [ 766.316285][ T5945] ? __lock_acquire+0x6b6/0x2cf0 [ 766.316302][ T5945] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 766.316323][ T5945] ? __pfx_hub_event+0x10/0x10 [ 766.316337][ T5945] ? process_scheduled_works+0x9ef/0x1770 [ 766.316353][ T5945] ? _raw_spin_unlock_irq+0x23/0x50 [ 766.316364][ T5945] ? process_scheduled_works+0x9ef/0x1770 [ 766.316375][ T5945] ? process_scheduled_works+0x9ef/0x1770 [ 766.316389][ T5945] process_scheduled_works+0xad1/0x1770 [ 766.316416][ T5945] ? __pfx_process_scheduled_works+0x10/0x10 [ 766.316437][ T5945] worker_thread+0x8a0/0xda0 [ 766.316463][ T5945] kthread+0x711/0x8a0 [ 766.316479][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 766.316492][ T5945] ? __pfx_kthread+0x10/0x10 [ 766.316505][ T5945] ? rt_spin_unlock+0x150/0x200 [ 766.316522][ T5945] ? rt_spin_unlock+0x161/0x200 [ 766.316535][ T5945] ? __pfx_kthread+0x10/0x10 [ 766.316550][ T5945] ret_from_fork+0x599/0xb30 [ 766.316563][ T5945] ? __pfx_ret_from_fork+0x10/0x10 [ 766.316581][ T5945] ? __switch_to_asm+0x39/0x70 [ 766.316595][ T5945] ? __switch_to_asm+0x33/0x70 [ 766.316610][ T5945] ? __pfx_kthread+0x10/0x10 [ 766.316625][ T5945] ret_from_fork_asm+0x1a/0x30 [ 766.316649][ T5945] [ 766.317011][ T5945] Kernel Offset: disabled