last executing test programs: 8m12.626253828s ago: executing program 4 (id=13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}, 0x0, 0x0, 0x2b, 0x0, "aeb81d8ee3a82d67eea9e50000247481041a5b9cdd45d296a285859a891a3b4e7bff572ef69992da867f406182d70f0794350400628d62a3b45bb98872fb1900000000f800"}, 0xd8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x200009, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7177}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x8000, @empty}}, 0x5, 0x1}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}, 0x0) 8m11.557459768s ago: executing program 4 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, &(0x7f0000002240)=""/4097}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m9.904373932s ago: executing program 4 (id=20): timer_settime(0x0, 0x0, 0x0, 0x0) userfaultfd(0x801) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000429609000000000000000100000d000000000600000002000000070000000000000800000000002e302e5f01615f00"], 0x0, 0x41}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) setns(r3, 0x10000000) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 8m8.066639093s ago: executing program 4 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c044) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 8m2.122138356s ago: executing program 4 (id=27): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x4, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000080), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x397) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) truncate(&(0x7f0000000040)='./file0\x00', 0x7) syz_fuse_handle_req(r5, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x4, 0x1, 0x0, {0x1, 0x0, 0x5, 0x80000001, 0x0, 0x200000000001, 0x9e9, 0x0, 0x1, 0x8000, 0x7893b06e, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400020000000000080004", @ANYRES32, @ANYBLOB], 0x3c, 0x3) 7m58.500906995s ago: executing program 4 (id=28): r0 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="6e65b5567647142feaee000000"], 0xd) readahead(r1, 0x2a91, 0x7ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0xfffffffffffffffc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000280)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000eeff00a50000006d00000095", @ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020}, 0x2020) sendmmsg$unix(r8, &(0x7f0000008840), 0x0, 0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000000)=0x80320) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r9 = memfd_secret(0x80000) mmap(&(0x7f0000133000/0x2000)=nil, 0x2000, 0xa, 0x12, r8, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ftruncate(r8, 0x51a9497) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000000)={0x40000001}) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0) 7m43.365056735s ago: executing program 32 (id=28): r0 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="6e65b5567647142feaee000000"], 0xd) readahead(r1, 0x2a91, 0x7ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0xfffffffffffffffc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000280)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000eeff00a50000006d00000095", @ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020}, 0x2020) sendmmsg$unix(r8, &(0x7f0000008840), 0x0, 0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000000)=0x80320) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r9 = memfd_secret(0x80000) mmap(&(0x7f0000133000/0x2000)=nil, 0x2000, 0xa, 0x12, r8, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ftruncate(r8, 0x51a9497) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000000)={0x40000001}) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0) 7m17.018685349s ago: executing program 0 (id=88): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0x1, &(0x7f0000000240)={0x8, 0x100020008b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008cd6f620b5abdff00000004dbdcadae53b0092e146dc09", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYRES32=r3, @ANYBLOB="35f12739a6469452f01046d68f331ca4cf1d144cf2a6ad783a1255ff8198389aaf5c1f5a0c78080d17977674387e06eb6ee2ee2a1ea71d20378fba31a7b14dbf03c89d27ed52c0eedc165df09ca3682120285982c9857a35cef0b7f31026ebeb2f7ceae5d886c43d61ffa04f8349a13310ee90a163f509d8657ba249a2cb7c9e1a15b13e820171da299619ca9ab219232e6e2dc24c80e94a01690bad36a2524dd7ac8a5873ad0d01b2f4f7f2532b176a8c1ab63ac483f0efbe1701bb88adedc2df3ad66d954474d7b2010bcd4812cfb5a7326a9c05377c1c186cb724390d202ccf0b26cde0e950", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRESHEX], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0x158, 0x30, 0x401, 0x0, 0x0, {}, [{0x144, 0x1, [@m_xt={0x140, 0xa, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8}]}, {0xda, 0x6, "3b5cd247c2489afed09b1d830c7c52a49547676c0a2d1ec47205cfe323929837f415c9f8ffe43e17162ccc78873a892b3740959ad815c0d44bae8b4ef92c1c82d94d0bb832c9350e9156b72ff242a20a73a4416bf0e28ec2f99d44b8f92569be1770e3435fc456f0b576865b4367550447af4329007cc2afbae6c0b7d6bee2d3fee2e1e83b5d6b2ef4506e1b690329b3f8ecae214670d5b8438e755f0a3809ca406a33b3779e34683934bdec577dc79e5946a20ab083ceb9d09f75faf1c12acaaa8a069b6db715c78b062378cf1e53e979ed3c2f303b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r9, &(0x7f00000000c0)=""/66, 0x42) 7m11.690482229s ago: executing program 0 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x4b564d03, 0x0, 0xa3}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 7m10.711840046s ago: executing program 0 (id=94): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x800, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x81, 0x0, 0x10}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0xff}}, 0xe8) close(r1) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000200)={0x0, 0x8, 0x100, 0x200, 0x20, 0x6, 0x0, 0x1ff, 0x10, 0x101, 0x2, 0x9, &(0x7f0000000040)=[0x40], 0x1, 0x0}) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) io_setup(0x3, 0x0) 7m2.401576855s ago: executing program 0 (id=103): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3, 0x2, 0x0, 0x0, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x40, 0x5, 0x25, {0x25, 0x0, "11060f6d23c3b2b5d037fd47e26e8fc247711f3131ea386ac43248ed135649d7ad3fa4"}}, 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x7f, 0x2, "48c4281a", "a41500"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x15, 0x8, 0x6, 0x2, 0x8, 0x3f7, 0xa013}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x20, 0x17, 0xd2, "83a24b1a71240b123d2e6af3e1ed4eb4b610aedc2d464a9b45166241fefb034d81b4b3766e552d22191cd3a136e7e1e9fab15dacd5e817f9ea030678096b6c9630f96d2c00a861bdac0284658664ee673dd62b99f6f3aacb152ac89d678d52cfdc399f7ba3d184383c8bbf8c09db573ca5072a37a7cf6a6f1f675e8aeb675edd80c2cdcc24db749a6a798e56fa627bd5431d283755eacd8dae2ba1245c99e2e44d1118ce23314a1587bdd03e8f219810b0a3a18dd709b33f7c127bb40e7ad3557e53ba633668821cf4333e1335d48f8d68e6"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x4e}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x5e53}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0xb, 0x2, "f638"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @random="34df1b54a4e1"}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x19, 0x2, "3016"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xad}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x89}, &(0x7f00000008c0)={0x40, 0x1e, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x5}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x18) 7m0.596314729s ago: executing program 0 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) syz_open_pts(r3, 0x800) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d09901020301090236000100000000090475"], 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') 6m57.068787995s ago: executing program 0 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ptrace(0x10, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r6) socket$netlink(0x10, 0x3, 0xb) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x100d001, 0x0) 6m41.435147323s ago: executing program 33 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ptrace(0x10, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(0xffffffffffffffff, r6) socket$netlink(0x10, 0x3, 0xb) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x100d001, 0x0) 23.871629903s ago: executing program 5 (id=520): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffff0f92, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @sdr={0x584e4f53, 0x8}}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(r3, 0x25, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, 0x0) 18.638618929s ago: executing program 5 (id=530): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (fail_nth: 6) r0 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3d}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 16.304978995s ago: executing program 1 (id=537): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$char_usb(r0, &(0x7f0000000180)="dcaa73987a7a1717522373f6cdcc3ba92efa5f2702ecf4eaaccfa6b9ac0bd195b17fc0ca79", 0x25) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001800000008000000ffffffff42000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000005ec8baaa50fcb61600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="cb16000241000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000040)={0xffe0000, 0x2, 0x2}) 16.031370113s ago: executing program 1 (id=539): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0xfff}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback={0x201}, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54) 15.854634231s ago: executing program 5 (id=540): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffff0f92, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @sdr={0x584e4f53, 0x8}}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(r2, 0x25, 0x0) 12.883947314s ago: executing program 1 (id=541): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0x1, &(0x7f0000000240)={0x8, 0x100020008b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008cd6f620b5abdff00000004dbdcadae53b0092e146dc09", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYRES32=r3, @ANYBLOB="35f12739a6469452f01046d68f331ca4cf1d144cf2a6ad783a1255ff8198389aaf5c1f5a0c78080d17977674387e06eb6ee2ee2a1ea71d20378fba31a7b14dbf03c89d27ed52c0eedc165df09ca3682120285982c9857a35cef0b7f31026ebeb2f7ceae5d886c43d61ffa04f8349a13310ee90a163f509d8657ba249a2cb7c9e1a15b13e820171", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRESHEX], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0x158, 0x30, 0x401, 0x0, 0x0, {}, [{0x144, 0x1, [@m_xt={0x140, 0xa, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8}]}, {0xda, 0x6, "3b5cd247c2489afed09b1d830c7c52a49547676c0a2d1ec47205cfe323929837f415c9f8ffe43e17162ccc78873a892b3740959ad815c0d44bae8b4ef92c1c82d94d0bb832c9350e9156b72ff242a20a73a4416bf0e28ec2f99d44b8f92569be1770e3435fc456f0b576865b4367550447af4329007cc2afbae6c0b7d6bee2d3fee2e1e83b5d6b2ef4506e1b690329b3f8ecae214670d5b8438e755f0a3809ca406a33b3779e34683934bdec577dc79e5946a20ab083ceb9d09f75faf1c12acaaa8a069b6db715c78b062378cf1e53e979ed3c2f303b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r9, &(0x7f00000000c0)=""/66, 0x42) 12.732405717s ago: executing program 5 (id=543): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="42a69187683764ea9453f21430e69d59b8bd898174734589e827bb2088fc86e24dfd84ba2f9853f35e61e7f0d40dae065dbeb03c4fc4cbb0c75cca96a6277bcabb9c203677791ac89c9e59ebe292466d938ee29a83c9fd17596ca0d0d0723bc3fc40fb7947a7e3c524ac0de9", @ANYRESHEX, @ANYBLOB=',\x00']) syz_open_dev$vbi(0x0, 0x1, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100facaf7719c000008080002406e8d000008000140000000100900010073797a3000"], 0xd0}}, 0x0) 12.565126473s ago: executing program 3 (id=544): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000500)=[{0x18, 0x4000, 0x0, 0x0}, {0x2, 0xd2abb020e81848cd, 0x0, 0x0}], 0x2}) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 12.30518963s ago: executing program 6 (id=546): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r4, r4, 0x0, 0x2) io_cancel(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000180)="bb6ba2cc8a24e1788135a34e2ef37962d1845d179236b456a2556386ab9fabcd4842bcd0bd5f047e762e6213d5d180ed6fc0e25e3b366b2a3e51103ed996327b44dc8d949f325962225b9b0100658fc0a6b1c459b232b9ba89822b4fd8d65de7231b9eeb1a9af7cc3cd1eaef947de905fc1012037af3", 0x76, 0x8, 0x0, 0x1, r4}, &(0x7f00000000c0)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) 9.760935441s ago: executing program 1 (id=548): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x16c4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mprotect(&(0x7f0000742000/0x1000)=nil, 0x1000, 0x1000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2f, 0x8b, 0x4a, 0x20, 0x10c4, 0x826b, 0x6ea2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0x6c, 0x77, 0x73}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x10243, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000003c0)={&(0x7f0000000400)=[{0xd0, 0x4201, 0x0, 0x0}, {0x6, 0x1201, 0x0, 0x0}, {0xfff, 0x9801, 0x0, 0x0}], 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) r10 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r9, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r10}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r9, 0x4020aed2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9.208722931s ago: executing program 6 (id=549): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$char_usb(r0, &(0x7f0000000180)="dcaa73987a7a1717522373f6cdcc3ba92efa5f2702ecf4eaaccfa6b9ac0bd195b17fc0ca79", 0x25) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001800000008000000ffffffff42000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000005ec8baaa50fcb61600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000040)={0xffe0000, 0x2, 0x2}) 9.139886733s ago: executing program 2 (id=550): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="200000000b1401002abd7000fcdbdf25080001000100000008003f000400000020b21b2e64976cc834d52158455ca9946ef57be8a6e13b2ca06d06274a5959d5a5a02a892736d677d6f9851663ee9f154267c50b129ffeef"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) io_uring_setup(0x3abc, &(0x7f0000000000)={0x0, 0xc76, 0x100, 0x0, 0x115, 0x0, r2}) 8.897129411s ago: executing program 5 (id=551): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x119, 0x487, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040601020000000000000000020000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 8.763041667s ago: executing program 6 (id=552): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x16, 0x47, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4", 0x0, 0x3}, 0x50) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000e880)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000006c0)="7eeebe1a279c7758c4f060ee389455883d60901cc0d40d51a644d208b218abd6a0938a8a45a6b112dfbbf86123154e5849a680c1ba342efdf0c800c6db3d8823ab92d5a7e0b85014a73ee878643a8764ecdd55dffa4672e4bbf07106234e9e1814d47bb7ea713266c2e4fbe5c848039845dc3fcd98573180fe410bb3ec4409a373f19e34739d818dfae5fe96791ae26b13073ca243721166f18039c6f835a88d23a7e3a2249e5da14a20adaca53d9b49c7e942fd90", 0xb5}, {&(0x7f0000000780)="7ba269b54fb94e3b21b5a5dcd06dec60f7d1d2be11592470408589a55db9e3cb179b18e42803287f6f1d9536474b95f94fb9a36051814c18e94fb95e8d972e15fd86b92504f5749c153f0669785b6e577ed873ea724e0a33b08fab8cd3e042822ad71903a0ea72b8de327792a3a37050bfccae213fd22fd5adb3508bb53cc6cb60ee6becb4c48be0d940c10d292ad1d8d29ec54c4cd71c03aaada5f2022cc21de53b53941c917b0b98cc43", 0xab}, {&(0x7f0000000940)="663cd09449378303cd0907752a61b36250158441d1dd09f04e64a60a0eccdcfc0a48b5502b63ff4eaf9962a62cd1f4a85a3ba4548ae8201018ddfb15b7e071d5c5ec8c9af169c8cd8e7a85860d462a8c287219b96b28e903e79b976863e2355d9b72281d5103c3d2afc41784e54e24a90c2d7dbed319c4f35e208dd892e0ff11eb2b27cee651d07239c50ff965b76da36433b13901538f515981ab4546aeb171b3595092658ab40c64da529c04c68ffd98d021", 0xb3}, {&(0x7f0000000a00)="860533a5baba871956b5a851fafbdc23f9824716337fe4fe48bad288f677310643c97d110347836c087aebd30c910a0e8b", 0x31}, {&(0x7f0000000a40)="2b232f2833cd59032dfd77899729ccced5fee12f97ed822908ff78a882505769c8121fe65a950c8bac1119d3dce0bcb0d41f104246db667894f35e6713513ce35df6c3b12c2e7d57619e9fe5c28de6ddae5f2de5f7f89dcfd8b9939152986c863579ee2bcbe424cf203c299df69baed1fdaf5e2649cb779b2af8ebe3ba8da757eb57341204752fcb47d5d0a28f780f768f7773503ad86d980e56ff9526ee1e", 0x9f}], 0x6, 0x0, 0x0, 0x4801}}, {{&(0x7f0000000b80)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000c00)="a0bb73f13278c23017ca", 0xa}], 0x1, 0x0, 0x108}}], 0x3, 0x4008805) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x1, 0xe3}, &(0x7f0000000580)=0x10) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 8.446854836s ago: executing program 3 (id=553): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffff0f92, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @sdr={0x584e4f53, 0x8}}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 8.372574818s ago: executing program 2 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x4, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0x5, 0x0, 0x6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000580)="75727fa6996b4b34dbe6ad5eac92b8596dd65e081f8817322ee863278ad463357c21618b332c10c6c0d931906b1249c3c8a91dd716ddf791af4cf36f297070ad15f5e59096b2b18c2b5852ee5aa1c45c4ab4eeeade3b6e86ce8d9b19f2ed498c4736fa0072fee75bb63c0e8a470656b9b6b66a881a79c27d73d14b7aba", 0x7d, 0x40}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="f63dfbc7e6515c562afdc2f735a6a3dab77968c33f6aa30c92b5", 0x1a, 0x10000, 0x0, 0x1}]) 6.677965517s ago: executing program 3 (id=555): r0 = socket(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00'}, 0x18) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x8000002) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffc, 0xffffffff, 0x6}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x4b67, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 6.580206006s ago: executing program 6 (id=556): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000002400)={0x1, [{0x3, 0x620, 0x0, &(0x7f0000000a80)="0dff70e306b9d18854049b467aeaf0b039cf37ca78dfc06cdc0bc956f0e377f8df0d61ce07b4b15696f34678672e583ef042e7447338f1e887436ac2de5437789ca901dc9778796ac27106cc427d0f6a6f73e08951acd8139af44e54c3c6282748d6b06e6a743f0568ea332a5cb772bbad56e280b0f506a25ee41271571e5aabd5f5257eab6ac1fba032bdb8b1c9dd98f27f6c0971d56838330f4512fd55f9e0285962ca2d0b82cb3cfd65783762d447f4075e1b146c7ed99cf2fa6b59aa4de167faec92"}, {0x1, 0x340, 0x5, &(0x7f0000000b80)="59f7e57d6af9d94f7c31126bd36699a4c872b3b84cd6e2170dd4d006c7368adb1974106ba5e15ed685c11643fc3d6e204818b9f35a7c6af08204d04d184ba919fe6bee91edeb9c7b4668850e97ed771c269b6d300f0676743f2b2b33f6e0a8e33fcdb20b7d46d2ff"}, {0x1, 0x610, 0x4, &(0x7f0000000c00)="fe5e2f300997e1cc9a19e9227e517189a604de2d3e7049cccf19fcc313b4c844c81115d3d946d39b5330dfb3daa101128793a02cb3306ee7bc23c8653be9ca0c5ea43f951ecb38b2b2d66dd468eba8366b20086d81f7454b699c69f0694e1fa583ad9cd19507bac1a75faf6a8a8b95bc4b93ff4ed5e74f864e5d2498ca1630707532e0523f5afb75ec8061fc3e0597e163eddbf7c9d3fc7651e53bed61fa9e0e3f3f27c2b75404e1c69114209305be0724f93e1061fb93feb3a11ad7aaec4258ab70"}, {0x2, 0x4f8, 0x8, &(0x7f0000000d00)="48d4261ecf48634354dd2d6c7259ef0eb6762883f7860da88a47eef171690ef39146444a2e3ab0803acbbbd9c1813e0a45a7db590ad9e4214e184243366e6d4602c36b2fa1ec9d9a9e226eedbdc5cc5b7a573dad6409e9288c3bf6088c6aa5acbcc1f12235a84d874caac6d3fa5209306ac683e214f8a3a6d9a4ab0cd0fdc71e44d641e997fa62b12c1c98deda352e2545d6907c4d0b48f2237c365d3ebd12"}, {0x1, 0x488, 0x4, &(0x7f0000000dc0)="9db5e84d2e074155315598448cf0bb09aa3b6e4fca2008d577be066536e72193b9f7b760bffce05b63d244d1df89194a3274f7f3082067802581810f6492ce11860b3d20dc6bee466f7c10ff7c8c3d0cd11546eca68cd800e4316eddcf4d9b2eb36885a9c848708f77c62ee0ae4db67ce9a36c5ae21c0fcd4b6a39c6f4612906fe453a15bbc7d02063a24a1c251b29925e"}, {0x2, 0x360, 0x3, &(0x7f0000000e80)="842d0ddb2f878abee934254bdaf367ce5ad400761a3893b16a48b895d8a29c69d562035a5905937dc5df5174ca5c4a86d2361948db3895c4745d57c0c57d73074a8078c7fdcb153f17304bbed42a2303cfec96d8170c20404a120702daf7e27fd0b8559fc55ee061a23b9fc7"}, {0x1, 0x788, 0x2, &(0x7f0000000f00)="7548ccf409b626a0b070b83ca3bb8a7f622d2281c7696252a91ead6e4879829952197ba1a4f1fc88df43296e14fc599d1cc889b4dbbac32dbe035e5da12508230285bb1f86df175be0a75a5e304ada344a4ae996a3403a62733d7fc6ea3a187788b2ab990adfc721504cff580982bc0cbc4d5e0ffad8321bf7a1fdbd40f3d47fa1dc43f20d7bb617e24c6fc4ccb32cb8c8da878e866c3ccd90512f0cb4f73142233401511ceac5e1e2a80162268522d456ac271ee7e7980f13839424c16d3e471e5cba7237a491ac1a3b96f37bd8fbe2cb9ec289e8a2a9371e12651f3902fdddfca6382c68d168d8d6bf65530228ccb4b7"}, {0x1, 0x7d0, 0x400, &(0x7f0000001000)="136027f4b9948ca335f34d2103629cd5d58295bfae8773f81143b66d9b9b412aa4a6b83fab38e62698167200fa0e44d636ae9a0e8569f790f530ec19c503904f19aacf4392524fdb275c56d56146dd4280c404d1ebaa09e577fea30ca7451d09df356d8c6e7cbacb018b0549a35fb092271a09c849dd29cafe4047af2bf61e8afb4cc5e9c58d82d0ca0d60e886bf1cbd5ffa67953e71a2d0ff16e303fb71ff7cc331e0d5ae7d171e61e936301aa99c628c2d83680e6c67eeef074a3b5a2fa9b04e54ccc1dfa0633d883446b53ff1b76175ae9e362285fe11f66dd0b6124d9af0de22362228d79aa0fac2a6684ff1f7f9056d71854a8f565b05bd"}, {0x0, 0x0, 0x211, 0x0}, {0x3, 0x358, 0xffff, &(0x7f0000001140)="e5a6109c458b5f4659914dfd07451a8281fe0a4466ff0d2bd14ed9514d2a55b3668361cec0a6ea1d5ebcfe13e58ccccec58e80b72591d2910585c16d05b28a53bfaf0370c86f81ad08afe268408fe11e4d07392eb1e027084511397956407b37e9b7dba869875a1721fe28"}, {0x3, 0x108, 0x3, &(0x7f00000011c0)="2341dc58ece9a322d36d9d239370b93e4c2802aeb68415a2676710aa14857d333a"}, {0x3, 0x138, 0xffffffff, &(0x7f0000001200)="41c83171ad3e429ecd7b3b6684a3ec2b32b2082481642050e2039cccf8fa83ba6a891d7709faa2"}, {0x0, 0x650, 0x1, &(0x7f0000001240)="af87b7af1a6865b9070dab06ab8b37a37073002219cf5ae0d5a48b3192d992cf2f0a082dad780cd7e0d36c157e46ce0455d918027c4ddf6f0069e2f0580393caf2ee72063d140546ede96c80570c3ba17af98d11b6752ffe0ef3d1a20573298f3d8e8863863572db330942da6c697f47031bbf5dd46406b8ca866d239e120c0b1a5cea0c7f44b546209b5e84171e256817e5422618ac0371aee62cac29c0ee11831de0387aa10ed14e38fae2e836690b99fb1ff35d7d1926d2e81e6c157f7c38a5d8b27b139b603636d2"}, {0x0, 0x8000, 0x905, &(0x7f0000001340)="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"}, {0x3, 0x2b8, 0x1ca5c0ac, &(0x7f0000002340)="91ca2505a986d9387dd9b0bb47ae7e99a354b8167768c259b49e3220a5e75caf3da7d91e5fbb4fde6ed18dcefec8f6f98d8a72d91898a5f1dddc093636364885d06c0e5397561780a18b415afcebab16d624a76ae78032"}, {0x1, 0x0, 0x1, 0x0}]}) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x4044000, 0x80000001, 0x2, 0x81, 0x0, [{0x6, 0x81, 0x7c, '\x00', 0x6}, {0x2, 0x5, 0x5, '\x00', 0x10}, {0x4, 0x4, 0x85, '\x00', 0x6}, {0x7, 0x7, 0x9}, {0x9, 0xb1, 0x5e, '\x00', 0x7}, {0xc3, 0xa, 0x6, '\x00', 0xe}, {0x2, 0x8, 0x2, '\x00', 0x5}, {0xed, 0x4, 0x0, '\x00', 0x53}, {0x28, 0x2, 0xfb, '\x00', 0x3}, {0x1, 0x8, 0x20, '\x00', 0xfa}, {0xfc, 0x0, 0x5, '\x00', 0x7}, {0x8, 0x76, 0x0, '\x00', 0xdf}, {0x7, 0xf6, 0x14, '\x00', 0x4}, {0x1, 0x1, 0x46, '\x00', 0xa}, {0x4, 0x7b, 0x40, '\x00', 0x9}, {0x7a, 0x80, 0xc, '\x00', 0x2}, {0x6, 0x8, 0x8, '\x00', 0x9}, {0x5, 0x0, 0x0, '\x00', 0x9}, {0x5, 0x2, 0x5, '\x00', 0x6}, {0x6, 0x5, 0xff}, {0x7, 0xc, 0x7, '\x00', 0x3}, {0x2, 0xff, 0x2, '\x00', 0xfc}, {0xb, 0xff, 0x2, '\x00', 0x3}, {0xb, 0x0, 0x8a, '\x00', 0x1}]}}) fsetxattr(r2, &(0x7f0000002640)=@known='security.selinux\x00', &(0x7f0000002680)='GPL\x00', 0x4, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000002600)=[0x8, 0x2, 0x3, 0x1, 0x6, 0x5, 0x2577, 0x400]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_change_rule(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="5e7b202e2d902d232072a6f0206c"], 0xf) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x7, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @generic={0x75, 0x3, 0x8, 0x2, 0xf}], &(0x7f0000000080)='GPL\x00', 0x63c10158, 0x83, &(0x7f00000000c0)=""/131, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[r4, r5], &(0x7f0000000940)=[{0x0, 0x3, 0x5, 0x9}, {0x2, 0x5, 0x10, 0x8}, {0x2, 0x2, 0xd, 0x1}, {0x0, 0x2, 0x9, 0x1}], 0x10, 0x7}, 0x94) syz_usb_connect$uac1(0x6, 0x10a, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x5, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd51, 0x7f}, [@extension_unit={0xb, 0x24, 0x8, 0x6, 0x7, 0x81, '8ZQV'}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x64, "9e7b5a06"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0xc, 0x81, 0x1, 0x5, 0x6}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x1, "26131129"}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x78, "dabc925fc5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xff, 0x8, 0xe, '[;[2'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xff, 0x1, 0x1, 0x8, '%'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x40, 0x7, "b000"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0xe2, 0x1, "eb6332b661036a"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xf7}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xa0, 0x4, 0x12, 0xe, "770e", "ac5886"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfa, 0x4, 0xff, {0x7, 0x25, 0x1, 0x81, 0xe, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x61, 0x8, "", "fb"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x5, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x6, 0x0, "f862b77cc30d7a5143"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x4, {0x7, 0x25, 0x1, 0x83, 0xe, 0x101b}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x6, 0x7, 0xff, 0x8, 0x7}, 0x45, &(0x7f00000001c0)={0x5, 0xf, 0x45, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x6, 0x5, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf000, 0xff, [0xc030, 0x34b4daadf45ac307, 0xc0, 0xf, 0x101c030]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x7, 0x9, 0x8, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x1, 0x2379}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}, {0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "4de1477926c27b39ca3535f9de4c403268d75c21c1f19747eb70f1f4f6196f335c7491ffe76c27fda82a559ffd999d3ced6eea6f246ab785fcfbba8cf61f4eba496ba862758db431cc23cfeb992ef772c2609a9337b8ea8fdb982e66d67e37efbacf4802f8783f503635d12e9017c005a7081388614cd0c9658f6be634f9a5e39bc324abdb0ffb9a7957ea77cd477a50f088b3736465b585d39a25f95a47ad6f08ede67cf3f9b9652fe54515045b43acaac89c29f9b9f69cdb94f46028485614b3c45611ea6489ee4a85f94f870c9a6e7bfae7"}}, {0xaf, &(0x7f0000000380)=@string={0xaf, 0x3, "368bcc29498ad8ee7aab2a7ed77936bb032c5799abd5e6f954f4828149c74be1b29953fc76582f9a895d10326cb7c16f4ee57d003122e6e2753a2ae95000f9f5a30bb670f7bc201e39be96d58fce74c4b3b0bb6fef2672fde042b9045c1fb4be40846aff06af9c009ec34c160042f88a4c4b9b2d8559d7cb7d56e6f9a6ec1e7a0771b6db3ede82ca6441627948e6ea37f9a249520afcc8a75eea90a119ccdb8202e709d26937c49b415e8e2b3d"}}, {0x4f, &(0x7f0000000440)=@string={0x4f, 0x3, "19af775be24b2bbd1b830ef62eb8123b06e44b5ad962f2adca5fa9f50081f9636f8a2b53a6415cd7e307a9904cf0016f28797031f429d048d03346f83d366b3e8d177734be6376435c4626468f"}}, {0x4c, &(0x7f00000004c0)=@string={0x4c, 0x3, "d65d92ae563ffc16d23382b97880e52041214c82d7c0f22253303f481537a61b356c1c7ddf1ce9d03a33d8c32a9f47e4e2e61a2d7ae221413e8850a668d1b4780750dd5d45798f8c5dcc"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x813}}, {0x20, &(0x7f0000000580)=@string={0x20, 0x3, "796ea8a50b3337b283a6e0475f42f5bce098fceb87f679af891c99bf5f58"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x813}}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000025c0)) 6.182595274s ago: executing program 2 (id=557): socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03fe6044238cb89e14f080350de0ffff00184000632f77fbac14140ee000000d62079f4b4d0f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000, 0x3f, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380), 0x0, 0x3}, 0x50) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000e880)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000680)="2732a737db484d7499ce19fed779bbc00399be0c104de809e22056b64cfe23e326e06171053c6e87e0", 0x29}, {&(0x7f00000006c0)="7eeebe1a279c7758c4f060ee389455883d60901cc0d40d51a644d208b218abd6a0938a8a45a6b112dfbbf86123154e5849a680c1ba342efdf0c800c6db3d8823ab92d5a7e0b85014a73ee878643a8764ecdd55dffa4672e4bbf07106234e9e1814d47bb7ea713266c2e4fbe5c848039845dc3fcd98573180fe410bb3ec4409a373f19e34739d818dfae5fe96791ae26b13073ca243721166f18039c6f835a88d23a7e3a2249e5da14a20adaca53d9b49c7e942fd90", 0xb5}, {0x0}, {&(0x7f0000000880)="023929f290e7c9df3836ada30322547c28918074fb5226cff53f29ab4c4d24fdaf57130fc78a553daa4d65ba387e900efc21f3a7ecd920caa93550cc8837a8f1b86cdc743abb450da2c864475788eb84c40fa995a685fe00b141b8a58b6329caa0860a009d5502334282b62b7e6d622be947924289d80e7b87281c68e3368d47999809990f833ec5e19ec9dbcdddc203a67fea7d681a4e13", 0x98}, {&(0x7f0000000940)="663cd09449378303cd0907752a61b36250158441d1dd09f04e64a60a0eccdcfc0a48b5502b63ff4eaf9962a62cd1f4a85a3ba4548ae8201018ddfb15b7e071d5c5ec8c9af169c8cd8e7a85860d462a8c287219b96b28e903e79b976863e2355d9b72281d5103c3d2afc41784e54e24a90c2d7dbed319c4f35e208dd892e0ff11eb2b27cee651d07239c50ff965b76da36433b13901538f515981ab4546aeb171b3595092658ab40c64da529c04c68ffd98d021", 0xb3}, {&(0x7f0000000a00)="860533a5baba871956b5a851fafbdc23f9824716337fe4fe48bad288f677310643c97d110347836c087aebd30c910a0e8b", 0x31}, {&(0x7f0000000a40)="2b232f2833cd59032dfd77899729ccced5fee12f97ed822908ff78a882505769c8121fe65a950c8bac1119d3dce0bcb0d41f104246db667894f35e6713513ce35df6c3b12c2e7d57619e9fe5c28de6ddae5f2de5f7f89dcfd8b9939152986c863579ee2bcbe424cf203c299df69baed1fdaf5e2649cb779b2af8ebe3ba8da757eb57341204752fcb47d5d0a28f780f768f7773503ad86d980e56ff9526ee1e", 0x9f}], 0x7, 0x0, 0x0, 0x4801}}, {{&(0x7f0000000b80)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000c00)="a0bb73f13278c23017cacaf294c8110a03a85f8abd6e220dfdba80", 0x1b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000015b2cf1d4fbed1dc28d3682c718a3d1eeb591e976740def9cb24f77f3a6aed6bbaf831cf025b5b9bbb05f85a0c4db3523d2b9aabcd83207d9fa181a9fc5a57f2b6e1948509cad429940a406bdcf5b97e"], 0x108}}], 0x3, 0x4008805) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x1, 0xe3}, &(0x7f0000000580)=0x10) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 5.054979722s ago: executing program 3 (id=558): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0x1, &(0x7f0000000240)={0x8, 0x100020008b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008cd6f620b5abdff00000004dbdcadae53b0092e146dc09", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="35f12739a6469452f01046d68f331ca4cf1d144cf2a6ad783a1255ff8198389aaf5c1f5a0c78080d17977674387e06eb6ee2ee2a1ea71d20378fba31a7b14dbf03c89d27ed52c0eedc165df09ca3682120285982c9857a35cef0b7f31026ebeb2f7ceae5d886c43d61ffa04f8349a13310ee90a163f509d8657ba249a2cb7c9e1a15b13e820171da", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRESHEX], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0x158, 0x30, 0x401, 0x0, 0x0, {}, [{0x144, 0x1, [@m_xt={0x140, 0xa, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8}]}, {0xda, 0x6, "3b5cd247c2489afed09b1d830c7c52a49547676c0a2d1ec47205cfe323929837f415c9f8ffe43e17162ccc78873a892b3740959ad815c0d44bae8b4ef92c1c82d94d0bb832c9350e9156b72ff242a20a73a4416bf0e28ec2f99d44b8f92569be1770e3435fc456f0b576865b4367550447af4329007cc2afbae6c0b7d6bee2d3fee2e1e83b5d6b2ef4506e1b690329b3f8ecae214670d5b8438e755f0a3809ca406a33b3779e34683934bdec577dc79e5946a20ab083ceb9d09f75faf1c12acaaa8a069b6db715c78b062378cf1e53e979ed3c2f303b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r9, &(0x7f00000000c0)=""/66, 0x42) 4.635835232s ago: executing program 1 (id=559): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r3, r3, 0x0, 0x2) io_cancel(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000180)="bb6ba2cc8a24e1788135a34e2ef37962d1845d179236b456a2556386ab9fabcd4842bcd0bd5f047e762e6213d5d180ed6fc0e25e3b366b2a3e51103ed996327b44dc8d949f325962225b9b0100658fc0a6b1c459b232b9ba89822b4fd8d65de7231b9eeb1a9af7cc3cd1eaef947de905fc1012037af3", 0x76, 0x8, 0x0, 0x1, r3}, &(0x7f00000000c0)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) 3.782886365s ago: executing program 3 (id=560): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x100) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x11, 0x2, 0x10001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8955, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0x11, 0x30000080}]}}) 3.389052097s ago: executing program 6 (id=561): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="42a69187683764ea9453f21430e69d59b8bd898174734589e827bb2088fc86e24dfd84ba2f9853f35e61e7f0d40dae065dbeb03c4fc4cbb0c75cca96a6277bcabb9c203677791ac89c9e59ebe292466d938ee29a83c9fd17596ca0d0d0723bc3fc40fb7947a7e3c524ac0de9", @ANYRESHEX, @ANYBLOB=',\x00']) syz_open_dev$vbi(0x0, 0x1, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100facaf7719c000008080002406e8d000008000140000000100900010073797a3000"], 0xd0}}, 0x0) 3.27915382s ago: executing program 2 (id=562): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$char_usb(r0, &(0x7f0000000180)="dcaa73987a7a1717522373f6cdcc3ba92efa5f2702ecf4eaaccfa6b9ac0bd195b17fc0ca79", 0x25) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001800000008000000ffffffff42000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000005ec8baaa50fcb61600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000040)={0xffe0000, 0x2, 0x2}) 3.144250764s ago: executing program 3 (id=563): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000400)=[{0x1900, 0x9a11, 0x0, 0x0}, {0x8001, 0xeda48936eabe28f0, 0x0, 0x0}, {0x5, 0xd811, 0x0, 0x0}], 0x3}) 2.035855417s ago: executing program 1 (id=564): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000500)=[{0x18, 0x4000, 0x0, 0x0}, {0x2, 0xd2abb020e81848cd, 0x0, 0x0}], 0x2}) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 2.03482647s ago: executing program 2 (id=565): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffff0f92, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @sdr={0x584e4f53, 0x8}}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 238.558424ms ago: executing program 6 (id=566): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffc, 0x10000, 0x0, 0x371}, &(0x7f0000000180), &(0x7f0000000040)) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 223.281823ms ago: executing program 2 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x4, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0x5, 0x0, 0x6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000580)="75727fa6996b4b34dbe6ad5eac92b8596dd65e081f8817322ee863278ad463357c21618b332c10c6c0d931906b1249c3c8a91dd716ddf791af4cf36f297070ad15f5e59096b2b18c2b5852ee5aa1c45c4ab4eeeade3b6e86ce8d9b19f2ed498c4736fa0072fee75bb63c0e8a470656b9b6b66a881a79c27d73d14b7aba", 0x7d, 0x40}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="f63dfbc7e6515c562afdc2f735a6a3dab77968c33f6aa30c92b5", 0x1a, 0x10000, 0x0, 0x1}]) 0s ago: executing program 5 (id=568): connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x12bc80, 0x0) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x79000004) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="4006450000004524"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): invalid interface number: 117 but max is 0 [ 225.058752][ T6273] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.058773][ T6273] usb 1-1: config 0 has no interface number 0 [ 225.061771][ T6273] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 225.061805][ T6273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.061828][ T6273] usb 1-1: Product: syz [ 225.061844][ T6273] usb 1-1: Manufacturer: syz [ 225.061860][ T6273] usb 1-1: SerialNumber: syz [ 225.107531][ T6273] usb 1-1: config 0 descriptor?? [ 225.330807][ T6311] overlayfs: missing 'lowerdir' [ 225.679109][ T6117] Bluetooth: Error in BCSP hdr checksum [ 226.545866][ T13] hsr_slave_0: left promiscuous mode [ 226.549559][ T75] Bluetooth: Error in BCSP hdr checksum [ 226.611092][ T13] hsr_slave_1: left promiscuous mode [ 226.629376][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.629471][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.683070][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.683105][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.816577][ T2255] Bluetooth: Error in BCSP hdr checksum [ 227.025266][ T6273] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 227.092096][ T75] Bluetooth: Error in BCSP hdr checksum [ 227.176083][ T6273] usb 2-1: Using ep0 maxpacket: 32 [ 227.198527][ T6273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.198555][ T6273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.215609][ T6273] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.215646][ T6273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.215670][ T6273] usb 2-1: Product: 킉퓏궅羢鯇⒕鰵諭扱㊮ࠎ걫깍ᑁ溶﨨㈽鉬∲褺邈즠㺚첎쐒冻媥쟋쁼厃駸푃秣줊뻟ￜ轏䃅缼恐ꪈ퐸始◮ய炘궝晏犁실ꑫ鯘ᦍѵ◗溗Җٖк紘 [ 227.215704][ T6273] usb 2-1: Manufacturer: 耨嚧䫹ⲹ쎎眠㖗튁阹搒䅓ᐄ≶ࡠ㊥╅跴墨⢻㺷ꀌᵃ辚붥䠁 [ 227.215727][ T6273] usb 2-1: SerialNumber: ࠧ [ 227.342662][ T6075] usb 1-1: USB disconnect, device number 9 [ 227.351041][ T13] veth1_macvtap: left promiscuous mode [ 227.396482][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 227.403663][ T13] veth0_macvtap: left promiscuous mode [ 227.404028][ T13] veth1_vlan: left promiscuous mode [ 227.435762][ T13] veth0_vlan: left promiscuous mode [ 227.552871][ T6273] usb 2-1: 0:2 : does not exist [ 227.585263][ T6273] usb 2-1: USB disconnect, device number 14 [ 227.918709][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.426617][ T6352] FAULT_INJECTION: forcing a failure. [ 235.426617][ T6352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.426709][ T6352] CPU: 0 UID: 0 PID: 6352 Comm: syz.1.113 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.426738][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.426751][ T6352] Call Trace: [ 235.426765][ T6352] [ 235.426779][ T6352] dump_stack_lvl+0xe8/0x150 [ 235.426809][ T6352] should_fail_ex+0x46c/0x600 [ 235.426836][ T6352] _copy_to_user+0x31/0xb0 [ 235.426855][ T6352] video_usercopy+0xd93/0x13f0 [ 235.426882][ T6352] ? __pfx___video_do_ioctl+0x10/0x10 [ 235.426900][ T6352] ? __pfx_video_usercopy+0x10/0x10 [ 235.426931][ T6352] ? __pfx_v4l2_ioctl+0x10/0x10 [ 235.426951][ T6352] v4l2_ioctl+0x190/0x1e0 [ 235.426968][ T6352] ? __pfx_v4l2_ioctl+0x10/0x10 [ 235.427170][ T6352] __se_sys_ioctl+0xff/0x170 [ 235.427199][ T6352] do_syscall_64+0xec/0xf80 [ 235.427217][ T6352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.427234][ T6352] ? clear_bhb_loop+0x60/0xb0 [ 235.427255][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.427272][ T6352] RIP: 0033:0x7f309c18f749 [ 235.427289][ T6352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.427302][ T6352] RSP: 002b:00007f309a3cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.427320][ T6352] RAX: ffffffffffffffda RBX: 00007f309c3e6090 RCX: 00007f309c18f749 [ 235.427333][ T6352] RDX: 0000200000000600 RSI: 00000000c0d05605 RDI: 0000000000000004 [ 235.427344][ T6352] RBP: 00007f309a3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 235.427354][ T6352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.427364][ T6352] R13: 00007f309c3e6128 R14: 00007f309c3e6090 R15: 00007ffdbf13d138 [ 235.427391][ T6352] [ 238.188200][ T6252] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 238.360830][ T6252] usb 2-1: Using ep0 maxpacket: 8 [ 238.372550][ T6252] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 238.372582][ T6252] usb 2-1: config 2 has no interface number 0 [ 238.372639][ T6252] usb 2-1: config 2 interface 31 has no altsetting 0 [ 238.424474][ T6252] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 238.424506][ T6252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.424523][ T6252] usb 2-1: Product: syz [ 238.424535][ T6252] usb 2-1: Manufacturer: syz [ 238.424546][ T6252] usb 2-1: SerialNumber: syz [ 238.766094][ T13] team0 (unregistering): Port device team_slave_1 removed [ 238.901787][ T6252] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 238.945552][ T6252] usb 2-1: USB disconnect, device number 15 [ 239.108155][ T13] team0 (unregistering): Port device team_slave_0 removed [ 241.225410][ T5642] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 241.400565][ T5642] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 241.400597][ T5642] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.400622][ T5642] usb 2-1: config 0 has no interface number 0 [ 241.403235][ T5642] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 241.403269][ T5642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.403285][ T5642] usb 2-1: Product: syz [ 241.403296][ T5642] usb 2-1: Manufacturer: syz [ 241.403307][ T5642] usb 2-1: SerialNumber: syz [ 241.458029][ T5642] usb 2-1: config 0 descriptor?? [ 241.681502][ T6368] overlayfs: missing 'lowerdir' [ 241.966006][ T6156] Bluetooth: Error in BCSP hdr checksum [ 241.969897][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.001036][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.004476][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.030320][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.047825][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.230045][ T2280] Bluetooth: Error in BCSP hdr checksum [ 242.490391][ T1014] Bluetooth: Error in BCSP hdr checksum [ 242.767305][ T2255] Bluetooth: Error in BCSP hdr checksum [ 243.035722][ T2280] Bluetooth: Error in BCSP hdr checksum [ 243.305951][ T75] Bluetooth: Error in BCSP hdr checksum [ 244.738019][ T6273] usb 2-1: USB disconnect, device number 16 [ 244.756677][ T5812] Bluetooth: hci1: command 0x1003 tx timeout [ 244.759499][ T5823] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 244.759701][ T5812] Bluetooth: hci6: command tx timeout [ 246.789489][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.808514][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.811314][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.815573][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.818092][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.835195][ T5823] Bluetooth: hci6: command tx timeout [ 248.533773][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 248.533793][ T37] audit: type=1326 audit(1766702980.028:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f309c18f749 code=0x0 [ 248.915097][ T5823] Bluetooth: hci6: command tx timeout [ 248.995353][ T5823] Bluetooth: hci1: command tx timeout [ 249.931033][ T6370] chnl_net:caif_netlink_parms(): no params data found [ 250.995316][ T5823] Bluetooth: hci6: command tx timeout [ 251.085135][ T5823] Bluetooth: hci1: command tx timeout [ 253.095194][ T5642] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 253.155200][ T62] Bluetooth: hci1: command tx timeout [ 253.192825][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.245634][ T5642] usb 3-1: Using ep0 maxpacket: 32 [ 253.262647][ T5642] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.262677][ T5642] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.270794][ T5642] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.270975][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.271015][ T5642] usb 3-1: Product: 킉퓏궅羢鯇⒕鰵諭扱㊮ࠎ걫깍ᑁ溶﨨㈽鉬∲褺邈즠㺚첎쐒冻媥쟋쁼厃駸푃秣줊뻟ￜ轏䃅缼恐ꪈ퐸始◮ய炘궝晏犁실ꑫ鯘ᦍѵ◗溗Җٖк紘 [ 253.271047][ T5642] usb 3-1: Manufacturer: 耨嚧䫹ⲹ쎎眠㖗튁阹搒䅓ᐄ≶ࡠ㊥╅跴墨⢻㺷ꀌᵃ辚붥䠁 [ 253.271067][ T5642] usb 3-1: SerialNumber: ࠧ [ 253.833174][ T5642] usb 3-1: 0:2 : does not exist [ 253.895327][ T5642] usb 3-1: USB disconnect, device number 5 [ 254.069973][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.140962][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.179498][ T37] audit: type=1326 audit(1766702985.678:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.179560][ T37] audit: type=1326 audit(1766702985.678:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.240956][ T37] audit: type=1326 audit(1766702985.738:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.241016][ T37] audit: type=1326 audit(1766702985.738:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.241061][ T37] audit: type=1326 audit(1766702985.738:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.241110][ T37] audit: type=1326 audit(1766702985.738:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.241158][ T37] audit: type=1326 audit(1766702985.738:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.241208][ T37] audit: type=1326 audit(1766702985.738:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.285150][ T37] audit: type=1326 audit(1766702985.738:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.285580][ T37] audit: type=1326 audit(1766702985.748:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 254.516820][ T6458] kvm: Disabled LAPIC found during irq injection [ 256.553452][ T62] Bluetooth: hci3: command 0x0406 tx timeout [ 256.553501][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 256.553530][ T62] Bluetooth: hci1: command tx timeout [ 256.553601][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 256.738328][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.755574][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.755852][ T6370] bridge_slave_0: entered allmulticast mode [ 256.758857][ T6370] bridge_slave_0: entered promiscuous mode [ 258.688505][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.777163][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.777332][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.777623][ T6370] bridge_slave_1: entered allmulticast mode [ 258.801103][ T6370] bridge_slave_1: entered promiscuous mode [ 258.993143][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 259.139148][ T31] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 259.139179][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.139199][ T31] usb 4-1: config 0 has no interface number 0 [ 259.141852][ T31] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 259.141885][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.141911][ T31] usb 4-1: Product: syz [ 259.141922][ T31] usb 4-1: Manufacturer: syz [ 259.141933][ T31] usb 4-1: SerialNumber: syz [ 259.191462][ T31] usb 4-1: config 0 descriptor?? [ 259.420028][ T6465] overlayfs: missing 'lowerdir' [ 259.918719][ T6474] FAULT_INJECTION: forcing a failure. [ 259.918719][ T6474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.918785][ T6474] CPU: 0 UID: 0 PID: 6474 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.918814][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.918827][ T6474] Call Trace: [ 259.918838][ T6474] [ 259.918848][ T6474] dump_stack_lvl+0xe8/0x150 [ 259.918888][ T6474] should_fail_ex+0x46c/0x600 [ 259.918916][ T6474] _copy_to_user+0x31/0xb0 [ 259.918935][ T6474] simple_read_from_buffer+0xe1/0x170 [ 259.918956][ T6474] proc_fail_nth_read+0x1b6/0x220 [ 259.918984][ T6474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.919012][ T6474] ? rw_verify_area+0x2ac/0x4e0 [ 259.919035][ T6474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.919061][ T6474] vfs_read+0x206/0xa30 [ 259.919091][ T6474] ? __pfx_vfs_read+0x10/0x10 [ 259.919116][ T6474] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 259.919134][ T6474] ? lockdep_hardirqs_on+0x7b/0x110 [ 259.919149][ T6474] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 259.919166][ T6474] ? mutex_lock_nested+0x154/0x1d0 [ 259.919193][ T6474] ? fdget_pos+0x253/0x320 [ 259.919218][ T6474] ksys_read+0x14b/0x260 [ 259.919243][ T6474] ? __pfx_ksys_read+0x10/0x10 [ 259.919275][ T6474] do_syscall_64+0xec/0xf80 [ 259.919291][ T6474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.919307][ T6474] ? clear_bhb_loop+0x60/0xb0 [ 259.919327][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.919343][ T6474] RIP: 0033:0x7f309c18e15c [ 259.919358][ T6474] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 259.919372][ T6474] RSP: 002b:00007f309a3cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.919389][ T6474] RAX: ffffffffffffffda RBX: 00007f309c3e6090 RCX: 00007f309c18e15c [ 259.919401][ T6474] RDX: 000000000000000f RSI: 00007f309a3cd0a0 RDI: 0000000000000006 [ 259.919411][ T6474] RBP: 00007f309a3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 259.919421][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.919430][ T6474] R13: 00007f309c3e6128 R14: 00007f309c3e6090 R15: 00007ffdbf13d138 [ 259.919456][ T6474] [ 261.475144][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 261.650035][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.666185][ T6273] usb 4-1: USB disconnect, device number 2 [ 262.002789][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.179042][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.702553][ T6370] team0: Port device team_slave_0 added [ 262.740869][ T6370] team0: Port device team_slave_1 added [ 263.358493][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.358511][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.358540][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.457395][ T6391] chnl_net:caif_netlink_parms(): no params data found [ 263.479778][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.479800][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.479820][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.483803][ T6485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.144'. [ 264.113791][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 264.473951][ T13] bridge_slave_1: left allmulticast mode [ 264.473997][ T13] bridge_slave_1: left promiscuous mode [ 264.474281][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.536874][ T13] bridge_slave_0: left allmulticast mode [ 266.536909][ T13] bridge_slave_0: left promiscuous mode [ 266.537244][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.555118][ T6063] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 266.602845][ T13] bridge_slave_1: left allmulticast mode [ 266.602879][ T13] bridge_slave_1: left promiscuous mode [ 266.603732][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.656218][ T13] bridge_slave_0: left allmulticast mode [ 266.656241][ T13] bridge_slave_0: left promiscuous mode [ 266.656498][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.725111][ T6063] usb 2-1: Using ep0 maxpacket: 8 [ 266.729536][ T6063] usb 2-1: config 0 has no interfaces? [ 266.734354][ T6063] usb 2-1: New USB device found, idVendor=12d1, idProduct=e416, bcdDevice=72.41 [ 266.734387][ T6063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.734409][ T6063] usb 2-1: Product: syz [ 266.734424][ T6063] usb 2-1: Manufacturer: syz [ 266.734440][ T6063] usb 2-1: SerialNumber: syz [ 266.781513][ T6063] usb 2-1: config 0 descriptor?? [ 267.554461][ T5973] usb 2-1: USB disconnect, device number 17 [ 267.984617][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.984713][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.376170][ T6063] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 268.567554][ T6063] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.567586][ T6063] usb 4-1: config 0 has no interface number 0 [ 268.575272][ T6063] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 268.575304][ T6063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.575326][ T6063] usb 4-1: Product: syz [ 268.575342][ T6063] usb 4-1: Manufacturer: syz [ 268.575357][ T6063] usb 4-1: SerialNumber: syz [ 268.671046][ T6063] usb 4-1: config 0 descriptor?? [ 268.866093][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.897143][ T6063] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 268.903067][ T6063] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 268.903495][ T6063] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 268.903552][ T6063] usb 4-1: media controller created [ 268.953378][ T6063] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.958715][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.982013][ T13] bond0 (unregistering): Released all slaves [ 269.099438][ T6532] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 269.236053][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.306009][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.368299][ T13] bond0 (unregistering): Released all slaves [ 269.633946][ T6370] hsr_slave_0: entered promiscuous mode [ 269.655743][ T6370] hsr_slave_1: entered promiscuous mode [ 271.894002][ T6063] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 273.254901][ T6063] usb 4-1: USB disconnect, device number 3 [ 274.015157][ T5973] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 274.165149][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 274.168072][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 274.168106][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 274.168140][ T5973] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 274.168185][ T5973] usb 4-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=5c.30 [ 274.168210][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.457059][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.457414][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.457683][ T6391] bridge_slave_0: entered allmulticast mode [ 274.543311][ T6391] bridge_slave_0: entered promiscuous mode [ 275.297184][ T5973] usb 4-1: config 0 descriptor?? [ 275.329660][ T5973] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 275.329751][ T5973] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 275.607077][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.607192][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.607354][ T6391] bridge_slave_1: entered allmulticast mode [ 275.609226][ T6391] bridge_slave_1: entered promiscuous mode [ 276.212087][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 276.258643][ T5642] usb 4-1: USB disconnect, device number 4 [ 276.368844][ T43] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 276.368874][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.368895][ T43] usb 3-1: config 0 has no interface number 0 [ 276.373424][ T43] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 276.373457][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.373478][ T43] usb 3-1: Product: syz [ 276.373494][ T43] usb 3-1: Manufacturer: syz [ 276.373509][ T43] usb 3-1: SerialNumber: syz [ 276.445215][ T43] usb 3-1: config 0 descriptor?? [ 276.665562][ T6553] overlayfs: missing 'lowerdir' [ 276.925784][ T207] Bluetooth: Error in BCSP hdr checksum [ 276.959453][ T6391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.992058][ T6391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.186410][ T207] Bluetooth: Error in BCSP hdr checksum [ 277.195231][ T13] hsr_slave_0: left promiscuous mode [ 277.247924][ T13] hsr_slave_1: left promiscuous mode [ 277.248976][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.249004][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.283088][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.283121][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.683013][ T5116] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 278.858325][ T815] Bluetooth: Error in BCSP hdr checksum [ 278.946228][ T10] usb 3-1: USB disconnect, device number 6 [ 279.015162][ T13] hsr_slave_0: left promiscuous mode [ 280.835174][ T13] hsr_slave_1: left promiscuous mode [ 280.837387][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.064154][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.299354][ T13] veth1_macvtap: left promiscuous mode [ 281.299469][ T13] veth0_macvtap: left promiscuous mode [ 281.299748][ T13] veth1_vlan: left promiscuous mode [ 281.299947][ T13] veth0_vlan: left promiscuous mode [ 289.090366][ T6613] ALSA: mixer_oss: invalid OSS volume '' [ 290.055434][ T805] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 290.209726][ T805] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 290.209759][ T805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.209781][ T805] usb 3-1: config 0 has no interface number 0 [ 290.212656][ T805] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 290.212679][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.212694][ T805] usb 3-1: Product: syz [ 290.212706][ T805] usb 3-1: Manufacturer: syz [ 290.212717][ T805] usb 3-1: SerialNumber: syz [ 290.274847][ T805] usb 3-1: config 0 descriptor?? [ 290.516337][ T6612] overlayfs: missing 'lowerdir' [ 290.726980][ T13] team0 (unregistering): Port device team_slave_1 removed [ 290.776141][ T6569] Bluetooth: Error in BCSP hdr checksum [ 290.947512][ T13] team0 (unregistering): Port device team_slave_0 removed [ 291.054911][ T2280] Bluetooth: Error in BCSP hdr checksum [ 291.317859][ T6117] Bluetooth: Error in BCSP hdr checksum [ 291.575741][ T6117] Bluetooth: Error in BCSP hdr checksum [ 291.830099][ T10] usb 3-1: USB disconnect, device number 7 [ 292.595135][ T5821] Bluetooth: hci0: command 0x1003 tx timeout [ 292.599703][ T5116] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.098422][ T6063] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 294.277349][ T6063] usb 3-1: Using ep0 maxpacket: 16 [ 294.283437][ T6063] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 294.283460][ T6063] usb 3-1: config 1 has no interface number 0 [ 294.283494][ T6063] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 294.283562][ T6063] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 294.283581][ T6063] usb 3-1: config 1 interface 105 has no altsetting 0 [ 294.286740][ T6063] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 294.286771][ T6063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.286793][ T6063] usb 3-1: Product: syz [ 294.286810][ T6063] usb 3-1: Manufacturer: syz [ 294.286826][ T6063] usb 3-1: SerialNumber: syz [ 294.338975][ T6629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.339245][ T6629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.492934][ T5642] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 294.669799][ T5642] usb 2-1: Using ep0 maxpacket: 16 [ 294.672875][ T5642] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 294.672902][ T5642] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.672922][ T5642] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.672944][ T5642] usb 2-1: config 1 has no interface number 1 [ 294.672997][ T5642] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 294.673042][ T5642] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.698759][ T5642] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.698846][ T5642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.698882][ T5642] usb 2-1: Product: syz [ 294.698898][ T5642] usb 2-1: Manufacturer: syz [ 294.698915][ T5642] usb 2-1: SerialNumber: syz [ 294.779515][ T6629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.779721][ T6629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.518532][ T6637] binder: 6628:6637 ioctl c0306201 200000000cc0 returned -14 [ 295.522970][ T6637] binder: 6628:6637 ioctl c0205649 2000000001c0 returned -22 [ 296.860249][ T13] team0 (unregistering): Port device team_slave_1 removed [ 297.056458][ T13] team0 (unregistering): Port device team_slave_0 removed [ 297.331362][ T5642] usb 2-1: USB disconnect, device number 18 [ 297.403678][ T6639] ALSA: mixer_oss: invalid OSS volume '' [ 298.046427][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 298.218211][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.218241][ T10] usb 2-1: config 0 has no interface number 0 [ 298.223077][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 298.223111][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.223133][ T10] usb 2-1: Product: syz [ 298.223148][ T10] usb 2-1: Manufacturer: syz [ 298.223163][ T10] usb 2-1: SerialNumber: syz [ 298.234303][ T10] usb 2-1: config 0 descriptor?? [ 298.416850][ T6063] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 298.417538][ T6063] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 298.418790][ T6063] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 298.505165][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 298.508442][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.508714][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 298.508750][ T10] usb 2-1: media controller created [ 298.635563][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.668575][ T6391] team0: Port device team_slave_0 added [ 300.171911][ T6644] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 300.235706][ T6063] aqc111 3-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a2:bf:8d:12:0c:9e [ 300.241299][ T6063] usb 3-1: USB disconnect, device number 8 [ 300.271867][ T6063] aqc111 3-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 300.329873][ T6391] team0: Port device team_slave_1 added [ 300.592061][ T6644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.986007][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 301.070984][ T10] usb 2-1: USB disconnect, device number 19 [ 301.124561][ T6063] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 301.124654][ T6063] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 301.124748][ T6063] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 301.125104][ T6062] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 301.283206][ T6062] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 301.283237][ T6062] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.283257][ T6062] usb 4-1: config 0 has no interface number 0 [ 301.315855][ T6062] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 301.315888][ T6062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.315911][ T6062] usb 4-1: Product: syz [ 301.315937][ T6062] usb 4-1: Manufacturer: syz [ 301.315953][ T6062] usb 4-1: SerialNumber: syz [ 301.376742][ T6062] usb 4-1: config 0 descriptor?? [ 301.559023][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.559041][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.559068][ T6391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.597961][ T6653] overlayfs: missing 'lowerdir' [ 301.650742][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.650760][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.650786][ T6391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.876436][ T3595] Bluetooth: Error in BCSP hdr checksum [ 302.779432][ T44] Bluetooth: Error in BCSP hdr checksum [ 304.492936][ T5948] usb 4-1: USB disconnect, device number 5 [ 304.500492][ T5116] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 305.105073][ T5642] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 305.127027][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.168391][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.169999][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.196066][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.198829][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.007134][ T5642] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.007162][ T5642] usb 2-1: config 0 has no interface number 0 [ 307.100848][ T5642] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 307.100881][ T5642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.100902][ T5642] usb 2-1: Product: syz [ 307.100917][ T5642] usb 2-1: Manufacturer: syz [ 307.100932][ T5642] usb 2-1: SerialNumber: syz [ 307.207788][ T5642] usb 2-1: config 0 descriptor?? [ 307.463108][ T5642] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 307.468483][ T5642] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 307.468844][ T5642] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 307.468897][ T5642] usb 2-1: media controller created [ 307.598196][ T5642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.688338][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.706901][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.708505][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.733061][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.764197][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.798117][ T6678] bond1: option mode: unable to set because the bond device is up [ 308.765542][ T6667] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 308.765627][ T5642] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 308.876489][ T5642] usb 2-1: USB disconnect, device number 20 [ 309.168424][ T5116] Bluetooth: hci0: command tx timeout [ 311.372544][ T5116] Bluetooth: hci5: command tx timeout [ 311.372984][ T5892] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 311.394146][ T5821] Bluetooth: hci0: command tx timeout [ 311.555141][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 311.557632][ T5892] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 311.557659][ T5892] usb 3-1: config 2 has no interface number 0 [ 311.557710][ T5892] usb 3-1: config 2 interface 31 has no altsetting 0 [ 311.560339][ T5892] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 311.560367][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.560387][ T5892] usb 3-1: Product: syz [ 311.560402][ T5892] usb 3-1: Manufacturer: syz [ 311.560417][ T5892] usb 3-1: SerialNumber: syz [ 312.084452][ T5892] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 312.139090][ T5892] usb 3-1: USB disconnect, device number 9 [ 314.013655][ T5116] Bluetooth: hci5: command tx timeout [ 314.013895][ T5821] Bluetooth: hci0: command tx timeout [ 314.021771][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 315.671058][ T6668] chnl_net:caif_netlink_parms(): no params data found [ 316.247014][ T5116] Bluetooth: hci5: command tx timeout [ 316.247099][ T5821] Bluetooth: hci0: command tx timeout [ 316.535099][ T805] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 316.719925][ T805] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 316.719957][ T805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.719979][ T805] usb 2-1: config 0 has no interface number 0 [ 316.724745][ T805] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 316.724777][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.724798][ T805] usb 2-1: Product: syz [ 316.724814][ T805] usb 2-1: Manufacturer: syz [ 316.724888][ T805] usb 2-1: SerialNumber: syz [ 316.797520][ T805] usb 2-1: config 0 descriptor?? [ 317.011586][ T6725] overlayfs: missing 'lowerdir' [ 317.116685][ T6735] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 317.140540][ T37] kauditd_printk_skb: 47 callbacks suppressed [ 317.140561][ T37] audit: type=1326 audit(1766703048.628:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.140613][ T37] audit: type=1326 audit(1766703048.628:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.140659][ T37] audit: type=1326 audit(1766703048.628:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.140705][ T37] audit: type=1326 audit(1766703048.628:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.140753][ T37] audit: type=1326 audit(1766703048.628:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.140800][ T37] audit: type=1326 audit(1766703048.628:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.140846][ T37] audit: type=1326 audit(1766703048.628:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.140893][ T37] audit: type=1326 audit(1766703048.628:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.141065][ T37] audit: type=1326 audit(1766703048.628:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.141111][ T37] audit: type=1326 audit(1766703048.638:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2376f749 code=0x7ffc0000 [ 317.242516][ T6735] cramfs: wrong magic [ 317.264166][ T6732] kvm: Disabled LAPIC found during irq injection [ 318.965871][ T5116] Bluetooth: hci5: command tx timeout [ 319.075149][ T5116] Bluetooth: hci1: command 0x1003 tx timeout [ 319.078309][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 319.226016][ T6063] usb 2-1: USB disconnect, device number 21 [ 320.567510][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 321.989623][ T6676] chnl_net:caif_netlink_parms(): no params data found [ 322.311344][ T6756] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 322.312226][ T6756] cramfs: wrong magic [ 327.568150][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.568383][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.568593][ T6668] bridge_slave_0: entered allmulticast mode [ 327.576561][ T6668] bridge_slave_0: entered promiscuous mode [ 327.807657][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.807803][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.808050][ T6668] bridge_slave_1: entered allmulticast mode [ 327.813154][ T6668] bridge_slave_1: entered promiscuous mode [ 328.243502][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.898964][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 330.081184][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.081259][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.219257][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.776128][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.776836][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.777068][ T6676] bridge_slave_0: entered allmulticast mode [ 332.846699][ T6676] bridge_slave_0: entered promiscuous mode [ 333.053818][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.053967][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.054178][ T6676] bridge_slave_1: entered allmulticast mode [ 333.079867][ T6676] bridge_slave_1: entered promiscuous mode [ 333.097780][ T6668] team0: Port device team_slave_0 added [ 333.459371][ T6668] team0: Port device team_slave_1 added [ 333.625265][ T6010] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 333.916056][ T6676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.928377][ T6010] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 333.928420][ T6010] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.928467][ T6010] usb 3-1: config 0 has no interface number 0 [ 333.932616][ T6010] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 333.932696][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.932748][ T6010] usb 3-1: Product: syz [ 333.932781][ T6010] usb 3-1: Manufacturer: syz [ 333.932821][ T6010] usb 3-1: SerialNumber: syz [ 334.015241][ T6010] usb 3-1: config 0 descriptor?? [ 335.159734][ T6808] overlayfs: missing 'lowerdir' [ 335.360272][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 335.471229][ T6676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.485699][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.485727][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.485755][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.485888][ T6156] Bluetooth: Error in BCSP hdr checksum [ 335.707247][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.707266][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.707294][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.752775][ T1130] Bluetooth: Error in BCSP hdr checksum [ 336.008572][ T1130] Bluetooth: Error in BCSP hdr checksum [ 336.074122][ T6676] team0: Port device team_slave_0 added [ 336.132468][ T6676] team0: Port device team_slave_1 added [ 336.145358][ T13] bridge_slave_1: left allmulticast mode [ 336.145379][ T13] bridge_slave_1: left promiscuous mode [ 336.150312][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.225973][ T13] bridge_slave_0: left allmulticast mode [ 336.225996][ T13] bridge_slave_0: left promiscuous mode [ 336.226185][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.275947][ T5955] Bluetooth: Error in BCSP hdr checksum [ 336.352752][ T805] usb 3-1: USB disconnect, device number 10 [ 336.425765][ T13] bridge_slave_1: left allmulticast mode [ 336.425787][ T13] bridge_slave_1: left promiscuous mode [ 336.425962][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.527352][ T13] bridge_slave_0: left allmulticast mode [ 336.527376][ T13] bridge_slave_0: left promiscuous mode [ 336.527565][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.612873][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 338.760761][ T5821] Bluetooth: hci1: command 0x1003 tx timeout [ 338.761117][ T5116] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 339.086289][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.312115][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.368192][ T13] bond0 (unregistering): Released all slaves [ 339.395176][ T6062] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 339.557170][ T6062] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 339.557211][ T6062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.632735][ T6062] usb 3-1: config 0 descriptor?? [ 339.839708][ T6828] capability: warning: `syz.2.221' uses 32-bit capabilities (legacy support in use) [ 339.840857][ T6828] program syz.2.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.032365][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.467452][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.555896][ T13] bond0 (unregistering): Released all slaves [ 341.903866][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.903889][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.903908][ T6676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.011150][ T6668] hsr_slave_0: entered promiscuous mode [ 342.012823][ T6668] hsr_slave_1: entered promiscuous mode [ 342.029313][ T6668] debugfs: 'hsr0' already exists in 'hsr' [ 342.029371][ T6668] Cannot create hsr debugfs directory [ 342.033867][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.033880][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.033899][ T6676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.558631][ T13] hsr_slave_0: left promiscuous mode [ 342.615083][ T13] hsr_slave_1: left promiscuous mode [ 342.617016][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.045968][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.547139][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.612317][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.066579][ T6062] usb 3-1: Cannot read MAC address [ 345.067128][ T6062] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 346.689004][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.689635][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.695909][ T6859] overlayfs: missing 'lowerdir' [ 347.207246][ T6541] Bluetooth: Error in BCSP hdr checksum [ 347.376843][ T13] team0 (unregistering): Port device team_slave_1 removed [ 347.465990][ T6541] Bluetooth: Error in BCSP hdr checksum [ 347.487100][ T13] team0 (unregistering): Port device team_slave_0 removed [ 347.726023][ T44] Bluetooth: Error in BCSP hdr checksum [ 347.987225][ T44] Bluetooth: Error in BCSP hdr checksum [ 348.177192][ T13] team0 (unregistering): Port device team_slave_1 removed [ 348.260831][ T815] Bluetooth: Error in BCSP hdr checksum [ 348.336166][ T13] team0 (unregistering): Port device team_slave_0 removed [ 348.526668][ T6664] Bluetooth: Error in BCSP hdr checksum [ 348.830754][ T6541] Bluetooth: Error in BCSP hdr checksum [ 349.005185][ T5821] Bluetooth: hci1: command 0x1003 tx timeout [ 349.015571][ T5116] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 350.635421][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 354.707153][ T6676] hsr_slave_0: entered promiscuous mode [ 354.708536][ T6676] hsr_slave_1: entered promiscuous mode [ 357.484451][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.494042][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.146859][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.147443][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.153426][ T6911] overlayfs: missing 'lowerdir' [ 360.326131][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 361.495051][ T5116] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 362.108478][ T6062] usb 3-1: USB disconnect, device number 11 [ 362.881870][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 362.883050][ T6925] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 362.883103][ T6925] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 366.440471][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.467295][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.469445][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.502784][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.514219][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.222903][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.250258][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 367.256264][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 367.296655][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.303636][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.805114][ T5116] Bluetooth: hci1: command tx timeout [ 369.005074][ T6062] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 369.683651][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 370.936221][ T5116] Bluetooth: hci6: command tx timeout [ 370.936775][ T5116] Bluetooth: hci1: command tx timeout [ 371.034980][ T6062] usb 4-1: Using ep0 maxpacket: 32 [ 371.037806][ T6062] usb 4-1: device descriptor read/all, error -71 [ 371.583853][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 371.583941][ T6969] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 371.583987][ T6969] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 372.634423][ T6934] chnl_net:caif_netlink_parms(): no params data found [ 372.995424][ T5823] Bluetooth: hci6: command tx timeout [ 372.995523][ T5821] Bluetooth: hci1: command tx timeout [ 374.655057][ T6252] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 376.656075][ T5823] Bluetooth: hci6: command tx timeout [ 376.658699][ T5821] Bluetooth: hci1: command tx timeout [ 376.678566][ T6252] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 376.678597][ T6252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.678617][ T6252] usb 2-1: config 0 has no interface number 0 [ 376.681509][ T6252] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 376.681537][ T6252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.681560][ T6252] usb 2-1: Product: syz [ 376.681570][ T6252] usb 2-1: Manufacturer: syz [ 376.681581][ T6252] usb 2-1: SerialNumber: syz [ 376.768654][ T6252] usb 2-1: config 0 descriptor?? [ 377.056531][ T5944] usb 2-1: USB disconnect, device number 22 [ 377.610660][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 379.365343][ T5821] Bluetooth: hci6: command tx timeout [ 379.465427][ T7010] netlink: 120 bytes leftover after parsing attributes in process `syz.2.259'. [ 380.121952][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 381.345821][ T1014] bridge_slave_1: left allmulticast mode [ 381.345937][ T1014] bridge_slave_1: left promiscuous mode [ 381.346208][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.446542][ T1014] bridge_slave_0: left allmulticast mode [ 381.446572][ T1014] bridge_slave_0: left promiscuous mode [ 381.446914][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.227536][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.355121][ T5642] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 384.395918][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.527503][ T1014] bond0 (unregistering): Released all slaves [ 384.547004][ T5642] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 384.547043][ T5642] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.547065][ T5642] usb 3-1: config 0 has no interface number 0 [ 384.553211][ T5642] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 384.553242][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.553263][ T5642] usb 3-1: Product: syz [ 384.553278][ T5642] usb 3-1: Manufacturer: syz [ 384.553295][ T5642] usb 3-1: SerialNumber: syz [ 384.656034][ T5642] usb 3-1: config 0 descriptor?? [ 384.667878][ T6945] chnl_net:caif_netlink_parms(): no params data found [ 384.882588][ T7025] overlayfs: missing 'lowerdir' [ 385.124047][ T805] usb 3-1: USB disconnect, device number 12 [ 385.242529][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 385.242621][ T7037] netlink: 'syz.1.261': attribute type 2 has an invalid length. [ 385.242667][ T7037] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 387.641833][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 388.327030][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.327283][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.327504][ T6934] bridge_slave_0: entered allmulticast mode [ 388.333227][ T6934] bridge_slave_0: entered promiscuous mode [ 389.355105][ T1014] hsr_slave_0: left promiscuous mode [ 390.697211][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.697287][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.705090][ T1014] hsr_slave_1: left promiscuous mode [ 390.706230][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.779897][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.496207][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 394.496296][ T7074] netlink: 'syz.3.276': attribute type 2 has an invalid length. [ 394.496340][ T7074] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 395.280120][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 396.680994][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 396.932171][ T805] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 397.097118][ T7091] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 397.126697][ T7091] cramfs: wrong magic [ 397.820438][ T805] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 397.820471][ T805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.820492][ T805] usb 2-1: config 0 has no interface number 0 [ 397.864104][ T805] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 397.864139][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.864160][ T805] usb 2-1: Product: syz [ 397.864176][ T805] usb 2-1: Manufacturer: syz [ 397.864190][ T805] usb 2-1: SerialNumber: syz [ 397.941759][ T805] usb 2-1: config 0 descriptor?? [ 398.156250][ T7085] overlayfs: missing 'lowerdir' [ 398.200079][ T6062] usb 2-1: USB disconnect, device number 23 [ 400.006168][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.006288][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.006476][ T6934] bridge_slave_1: entered allmulticast mode [ 400.034438][ T6934] bridge_slave_1: entered promiscuous mode [ 400.195063][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 400.817352][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 400.817439][ T7120] netlink: 'syz.2.285': attribute type 2 has an invalid length. [ 400.817484][ T7120] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 402.923487][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.075411][ T6252] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 403.130075][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.817955][ T6252] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.817985][ T6252] usb 3-1: config 0 has no interface number 0 [ 404.820998][ T6252] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 404.821028][ T6252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.821047][ T6252] usb 3-1: Product: syz [ 404.821061][ T6252] usb 3-1: Manufacturer: syz [ 404.821075][ T6252] usb 3-1: SerialNumber: syz [ 404.855738][ T6252] usb 3-1: config 0 descriptor?? [ 404.976495][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.976714][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.976945][ T6945] bridge_slave_0: entered allmulticast mode [ 404.979408][ T6945] bridge_slave_0: entered promiscuous mode [ 405.082599][ T6252] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 405.149505][ T6252] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 405.149923][ T6252] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 405.149984][ T6252] usb 3-1: media controller created [ 405.228610][ T6252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.268149][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.268305][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.268588][ T6945] bridge_slave_1: entered allmulticast mode [ 405.271838][ T6945] bridge_slave_1: entered promiscuous mode [ 405.343757][ T6934] team0: Port device team_slave_0 added [ 405.525868][ T6934] team0: Port device team_slave_1 added [ 405.551595][ T7132] serio: Serial port ptm0 [ 405.662378][ T7132] serio: Serial port ptm0 [ 405.708842][ T7133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.979475][ T7134] bond_slave_0: entered promiscuous mode [ 405.979607][ T7134] bond_slave_1: entered promiscuous mode [ 405.980951][ T7134] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 406.027499][ T7134] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 406.148760][ T6945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.139291][ T6252] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 408.157558][ T7126] usb 3-1: dvb_usb_ec168: I2C read not implemented [ 408.389150][ T6252] usb 3-1: USB disconnect, device number 13 [ 408.406330][ T6945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.436183][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.436202][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.436232][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.667831][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.667852][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.667885][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.835204][ T6252] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 408.877297][ T6945] team0: Port device team_slave_0 added [ 408.985220][ T6252] usb 3-1: Using ep0 maxpacket: 16 [ 408.987116][ T6252] usb 3-1: config 0 has no interfaces? [ 408.989565][ T6252] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 408.989594][ T6252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.989616][ T6252] usb 3-1: Product: syz [ 408.989631][ T6252] usb 3-1: Manufacturer: syz [ 408.989646][ T6252] usb 3-1: SerialNumber: syz [ 409.022237][ T6252] usb 3-1: config 0 descriptor?? [ 409.089093][ T6945] team0: Port device team_slave_1 added [ 409.697554][ T1014] bridge_slave_1: left allmulticast mode [ 409.697585][ T1014] bridge_slave_1: left promiscuous mode [ 409.697863][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.926820][ T1014] bridge_slave_0: left allmulticast mode [ 409.926853][ T1014] bridge_slave_0: left promiscuous mode [ 409.927184][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.966179][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 410.966273][ T7172] netlink: 'syz.3.295': attribute type 2 has an invalid length. [ 410.966321][ T7172] netlink: 'syz.3.295': attribute type 1 has an invalid length. [ 411.945613][ T5811] usb 3-1: USB disconnect, device number 14 [ 413.137442][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.266072][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.699596][ T1014] bond0 (unregistering): Released all slaves [ 415.367594][ T6934] hsr_slave_0: entered promiscuous mode [ 415.386085][ T6934] hsr_slave_1: entered promiscuous mode [ 415.445722][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.445744][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.445776][ T6945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.518132][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.518154][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.518184][ T6945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.119475][ T1014] hsr_slave_0: left promiscuous mode [ 416.156170][ T1014] hsr_slave_1: left promiscuous mode [ 416.176261][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.210886][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.634733][ T7208] serio: Serial port ptm0 [ 418.855110][ T7208] serio: Serial port ptm0 [ 419.400943][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 419.926364][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 420.054035][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 420.054130][ T7221] netlink: 'syz.3.304': attribute type 2 has an invalid length. [ 420.054175][ T7221] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 422.535058][ T6252] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 422.718143][ T6252] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.718174][ T6252] usb 4-1: config 0 has no interface number 0 [ 422.723872][ T6252] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 422.723905][ T6252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.723927][ T6252] usb 4-1: Product: syz [ 422.723942][ T6252] usb 4-1: Manufacturer: syz [ 422.723958][ T6252] usb 4-1: SerialNumber: syz [ 422.751721][ T6252] usb 4-1: config 0 descriptor?? [ 423.173900][ T6252] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 423.194608][ T6252] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 424.161226][ T6252] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 424.161294][ T6252] usb 4-1: media controller created [ 424.370856][ T6252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.033790][ T7216] syzkaller0: entered promiscuous mode [ 425.033895][ T7216] syzkaller0: entered allmulticast mode [ 425.250202][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.276724][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.278120][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.280268][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.281211][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.557475][ T6252] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 425.576352][ T7230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.726313][ T7236] bond_slave_0: entered promiscuous mode [ 425.726377][ T7236] bond_slave_1: entered promiscuous mode [ 425.727121][ T7236] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 425.730440][ T7236] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 425.911382][ T6252] usb 4-1: USB disconnect, device number 8 [ 426.472826][ T7247] 9p: Bad value for 'rfdno' [ 427.321184][ T5821] Bluetooth: hci0: command tx timeout [ 427.605235][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.616844][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.625434][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.626784][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.638449][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 429.401881][ T7256] serio: Serial port ptm0 [ 429.412822][ T5821] Bluetooth: hci0: command tx timeout [ 429.562363][ T7256] serio: Serial port ptm0 [ 429.715316][ T5821] Bluetooth: hci1: command tx timeout [ 431.475097][ T5821] Bluetooth: hci0: command tx timeout [ 431.725239][ T5948] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 431.795008][ T5821] Bluetooth: hci1: command tx timeout [ 431.875043][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 431.877667][ T5948] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 431.877697][ T5948] usb 2-1: config 2 has no interface number 0 [ 431.877821][ T5948] usb 2-1: config 2 interface 31 has no altsetting 0 [ 431.894108][ T5948] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 431.894142][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.894164][ T5948] usb 2-1: Product: syz [ 431.894179][ T5948] usb 2-1: Manufacturer: syz [ 431.894194][ T5948] usb 2-1: SerialNumber: syz [ 432.609275][ T5948] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 432.643821][ T5948] usb 2-1: USB disconnect, device number 24 [ 432.741909][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 432.742000][ T7289] netlink: 'syz.3.314': attribute type 2 has an invalid length. [ 432.742043][ T7289] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 433.554994][ T5821] Bluetooth: hci0: command tx timeout [ 433.897053][ T5821] Bluetooth: hci1: command tx timeout [ 433.944523][ T1014] bridge_slave_1: left allmulticast mode [ 433.944566][ T1014] bridge_slave_1: left promiscuous mode [ 433.956410][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.999297][ T1014] bridge_slave_0: left allmulticast mode [ 433.999321][ T1014] bridge_slave_0: left promiscuous mode [ 433.999553][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.062668][ T7299] 9p: Bad value for 'rfdno' [ 435.034798][ T5948] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 435.129905][ T1014] bridge_slave_1: left allmulticast mode [ 435.129962][ T1014] bridge_slave_1: left promiscuous mode [ 435.130240][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.180078][ T1014] bridge_slave_0: left allmulticast mode [ 435.180103][ T1014] bridge_slave_0: left promiscuous mode [ 435.180300][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.229125][ T5948] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 435.229147][ T5948] usb 3-1: config 0 has no interface number 0 [ 435.242106][ T5948] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 435.242216][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.242269][ T5948] usb 3-1: Product: syz [ 435.242298][ T5948] usb 3-1: Manufacturer: syz [ 435.242314][ T5948] usb 3-1: SerialNumber: syz [ 435.283008][ T5948] usb 3-1: config 0 descriptor?? [ 435.495661][ T5948] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 435.525545][ T5948] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 435.526006][ T5948] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 435.526061][ T5948] usb 3-1: media controller created [ 435.590199][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.880586][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.955793][ T5821] Bluetooth: hci1: command tx timeout [ 435.973398][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.034374][ T1014] bond0 (unregistering): Released all slaves [ 436.766698][ T5948] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 436.775134][ T7294] usb 3-1: dvb_usb_ec168: I2C read not implemented [ 436.859691][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.991600][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.083675][ T1014] bond0 (unregistering): Released all slaves [ 438.366223][ T7302] bond1: option mode: unable to set because the bond device has slaves [ 438.416437][ T7303] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 438.500528][ T7312] serio: Serial port ptm0 [ 438.664062][ T7312] serio: Serial port ptm0 [ 438.720282][ T5948] usb 3-1: USB disconnect, device number 15 [ 440.343763][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.421511][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.516204][ T1014] hsr_slave_0: left promiscuous mode [ 440.588715][ T1014] hsr_slave_1: left promiscuous mode [ 440.589822][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.963795][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.727244][ T7331] 9p: Bad value for 'rfdno' [ 443.727486][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 444.232447][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 444.403868][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 444.403899][ T7337] netlink: 'syz.2.326': attribute type 2 has an invalid length. [ 444.403915][ T7337] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 445.405090][ T5642] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 446.655146][ T5642] usb 2-1: Using ep0 maxpacket: 16 [ 446.658906][ T5642] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.658948][ T5642] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.664678][ T5642] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 446.664702][ T5642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.664718][ T5642] usb 2-1: Product: syz [ 446.664729][ T5642] usb 2-1: Manufacturer: syz [ 446.664740][ T5642] usb 2-1: SerialNumber: syz [ 446.759721][ T5642] usb 2-1: config 0 descriptor?? [ 448.462177][ T5948] usb 2-1: USB disconnect, device number 25 [ 450.553883][ T5811] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 452.253992][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.254071][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.356831][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 453.365260][ T7373] netlink: 'syz.1.339': attribute type 2 has an invalid length. [ 453.365276][ T7373] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 455.110354][ T7379] 9p: Bad value for 'rfdno' [ 456.057597][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 461.309948][ T7249] chnl_net:caif_netlink_parms(): no params data found [ 462.788078][ T7239] chnl_net:caif_netlink_parms(): no params data found [ 462.974997][ T6252] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 463.127786][ T6252] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 463.127814][ T6252] usb 2-1: config 0 has no interface number 0 [ 463.131725][ T6252] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 463.131763][ T6252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.131788][ T6252] usb 2-1: Product: syz [ 463.131806][ T6252] usb 2-1: Manufacturer: syz [ 463.131822][ T6252] usb 2-1: SerialNumber: syz [ 463.271133][ T6252] usb 2-1: config 0 descriptor?? [ 463.693484][ T6252] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 463.701900][ T6252] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 463.702189][ T6252] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 463.702227][ T6252] usb 2-1: media controller created [ 463.823494][ T7413] netlink: 'syz.2.348': attribute type 2 has an invalid length. [ 463.823554][ T7413] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 464.215013][ T6252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.398150][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.398492][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.402160][ T7249] bridge_slave_0: entered allmulticast mode [ 464.500803][ T7249] bridge_slave_0: entered promiscuous mode [ 465.190065][ T7424] serio: Serial port ptm0 [ 465.347494][ T7424] serio: Serial port ptm0 [ 465.910783][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.910934][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.911210][ T7249] bridge_slave_1: entered allmulticast mode [ 465.995247][ T7249] bridge_slave_1: entered promiscuous mode [ 465.999684][ T7418] bond1: option mode: unable to set because the bond device is up [ 466.468621][ T6252] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 466.485064][ T7407] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 466.564259][ T6252] usb 2-1: USB disconnect, device number 26 [ 467.346819][ T7435] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 467.364477][ T7435] cramfs: wrong magic [ 468.366059][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.646408][ T7445] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 470.646669][ T7445] cramfs: wrong magic [ 473.527468][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 473.819881][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.852948][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.853176][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.853416][ T7239] bridge_slave_0: entered allmulticast mode [ 473.859135][ T7239] bridge_slave_0: entered promiscuous mode [ 474.323523][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.323665][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.323885][ T7239] bridge_slave_1: entered allmulticast mode [ 474.333671][ T7239] bridge_slave_1: entered promiscuous mode [ 477.498290][ T7249] team0: Port device team_slave_0 added [ 477.678587][ T7249] team0: Port device team_slave_1 added [ 479.799238][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.230291][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 480.402237][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.417996][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.418016][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.418049][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.837541][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.837561][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.837593][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.896391][ T7239] team0: Port device team_slave_0 added [ 482.352515][ T7239] team0: Port device team_slave_1 added [ 485.067102][ T7249] hsr_slave_0: entered promiscuous mode [ 485.068594][ T7249] hsr_slave_1: entered promiscuous mode [ 485.765239][ T5878] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 486.799724][ T5878] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.799755][ T5878] usb 4-1: config 0 has no interface number 0 [ 486.802234][ T5878] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 486.802263][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.802284][ T5878] usb 4-1: Product: syz [ 486.802301][ T5878] usb 4-1: Manufacturer: syz [ 486.802317][ T5878] usb 4-1: SerialNumber: syz [ 486.842295][ T5878] usb 4-1: config 0 descriptor?? [ 487.162164][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.191423][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.193899][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 487.221766][ T5878] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 487.252749][ T5878] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 487.253091][ T5878] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 487.253143][ T5878] usb 4-1: media controller created [ 487.270419][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 487.271535][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 488.857623][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.111404][ T5878] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 489.140327][ T7520] serio: Serial port ptm0 [ 489.243221][ T5878] usb 4-1: USB disconnect, device number 10 [ 489.405218][ T5823] Bluetooth: hci5: command tx timeout [ 490.572916][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 490.973172][ T5955] bridge_slave_1: left allmulticast mode [ 490.973202][ T5955] bridge_slave_1: left promiscuous mode [ 490.973461][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.477482][ T5823] Bluetooth: hci5: command tx timeout [ 491.775429][ T6062] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 491.986629][ T5955] bridge_slave_0: left allmulticast mode [ 491.986662][ T5955] bridge_slave_0: left promiscuous mode [ 491.986948][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.992172][ T6062] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 491.992198][ T6062] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.992217][ T6062] usb 2-1: config 0 has no interface number 0 [ 491.998937][ T6062] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 491.998968][ T6062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.998988][ T6062] usb 2-1: Product: syz [ 491.999003][ T6062] usb 2-1: Manufacturer: syz [ 491.999018][ T6062] usb 2-1: SerialNumber: syz [ 492.086908][ T6062] usb 2-1: config 0 descriptor?? [ 492.312586][ T7530] overlayfs: missing 'lowerdir' [ 492.336875][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.358152][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.360715][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.379612][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.382957][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.575704][ T207] Bluetooth: Error in BCSP hdr checksum [ 492.788838][ T5955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.835707][ T1130] Bluetooth: Error in BCSP hdr checksum [ 492.888534][ T5955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.045067][ T5878] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 493.095470][ T2270] Bluetooth: Error in BCSP hdr checksum [ 493.127460][ T5955] bond0 (unregistering): Released all slaves [ 493.826626][ T5823] Bluetooth: hci5: command tx timeout [ 493.833731][ T5878] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 493.833761][ T5878] usb 4-1: config 0 has no interface number 0 [ 493.889079][ T5878] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 493.889116][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.889139][ T5878] usb 4-1: Product: syz [ 493.889156][ T5878] usb 4-1: Manufacturer: syz [ 493.889172][ T5878] usb 4-1: SerialNumber: syz [ 493.957535][ T5878] usb 4-1: config 0 descriptor?? [ 494.168929][ T5878] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 494.185644][ T5878] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 494.187518][ T5878] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 494.187576][ T5878] usb 4-1: media controller created [ 494.229587][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.271949][ T7354] Bluetooth: Error in BCSP hdr checksum [ 494.353236][ T6005] usb 2-1: USB disconnect, device number 27 [ 494.365009][ T5821] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 494.450699][ T5821] Bluetooth: hci0: command tx timeout [ 497.821327][ T5821] Bluetooth: hci5: command tx timeout [ 497.893686][ T7536] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 497.893719][ T5878] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 498.228797][ T5821] Bluetooth: hci0: command tx timeout [ 498.267273][ T5878] usb 4-1: USB disconnect, device number 11 [ 498.526222][ T7544] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 498.778284][ T7545] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 500.430741][ T5821] Bluetooth: hci0: command tx timeout [ 502.764951][ T5821] Bluetooth: hci0: command tx timeout [ 504.172118][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 504.315979][ T5955] team0 (unregistering): Port device team_slave_1 removed [ 504.485188][ T5955] team0 (unregistering): Port device team_slave_0 removed [ 505.120857][ T7579] serio: Serial port ptm0 [ 511.031419][ T5948] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 511.091604][ T7509] chnl_net:caif_netlink_parms(): no params data found [ 511.178296][ T5948] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 511.178328][ T5948] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.178349][ T5948] usb 4-1: config 0 has no interface number 0 [ 511.180988][ T5948] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 511.181020][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.181041][ T5948] usb 4-1: Product: syz [ 511.181056][ T5948] usb 4-1: Manufacturer: syz [ 511.181072][ T5948] usb 4-1: SerialNumber: syz [ 511.248624][ T5948] usb 4-1: config 0 descriptor?? [ 511.465913][ T7595] overlayfs: missing 'lowerdir' [ 512.146216][ T5944] usb 4-1: USB disconnect, device number 12 [ 513.203384][ T7620] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 513.203851][ T7620] cramfs: wrong magic [ 514.466804][ T7623] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 514.467543][ T7623] cramfs: wrong magic [ 514.476149][ T5823] Bluetooth: hci1: command 0x1003 tx timeout [ 515.227565][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 515.261561][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.261635][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.107352][ T7658] serio: Serial port ptm0 [ 519.184771][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.194645][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.195221][ T7509] bridge_slave_0: entered allmulticast mode [ 519.222270][ T7509] bridge_slave_0: entered promiscuous mode [ 519.238552][ T7533] chnl_net:caif_netlink_parms(): no params data found [ 519.255331][ T7658] serio: Serial port ptm0 [ 519.281126][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.281252][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.281475][ T7509] bridge_slave_1: entered allmulticast mode [ 519.284254][ T7509] bridge_slave_1: entered promiscuous mode [ 520.551570][ T7678] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 520.551990][ T7678] cramfs: wrong magic [ 524.044486][ T6005] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 524.369749][ T5955] bridge_slave_1: left allmulticast mode [ 524.369780][ T5955] bridge_slave_1: left promiscuous mode [ 524.370014][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.461808][ T6005] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 524.461907][ T6005] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.461956][ T6005] usb 2-1: config 0 has no interface number 0 [ 524.733544][ T5955] bridge_slave_0: left allmulticast mode [ 524.781700][ T5955] bridge_slave_0: left promiscuous mode [ 525.023855][ T6005] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 525.023891][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.023914][ T6005] usb 2-1: Product: syz [ 525.023931][ T6005] usb 2-1: Manufacturer: syz [ 525.023948][ T6005] usb 2-1: SerialNumber: syz [ 525.061015][ T6005] usb 2-1: config 0 descriptor?? [ 525.277983][ T7691] overlayfs: missing 'lowerdir' [ 525.312641][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.546962][ T13] Bluetooth: Error in BCSP hdr checksum [ 526.347447][ T2270] Bluetooth: Error in BCSP hdr checksum [ 526.446189][ T6005] usb 2-1: USB disconnect, device number 28 [ 526.765909][ T5955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.925814][ T5955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.731705][ T5823] Bluetooth: hci1: command 0x1003 tx timeout [ 527.732085][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 528.113445][ T5955] bond0 (unregistering): Released all slaves [ 528.317010][ T7719] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 528.327984][ T7719] cramfs: wrong magic [ 529.357195][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.508656][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.625754][ T7727] serio: Serial port ptm0 [ 529.757785][ T7727] serio: Serial port ptm0 [ 534.776056][ T7509] team0: Port device team_slave_0 added [ 535.376643][ T7509] team0: Port device team_slave_1 added [ 535.377366][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.377532][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.377750][ T7533] bridge_slave_0: entered allmulticast mode [ 535.382542][ T7533] bridge_slave_0: entered promiscuous mode [ 535.810825][ T5955] hsr_slave_0: left promiscuous mode [ 535.916779][ T5955] hsr_slave_1: left promiscuous mode [ 535.917889][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.924989][ T5878] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 535.967624][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.083580][ T5878] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 536.083612][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.083633][ T5878] usb 4-1: config 0 has no interface number 0 [ 536.111794][ T5878] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 536.111831][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.111856][ T5878] usb 4-1: Product: syz [ 536.111873][ T5878] usb 4-1: Manufacturer: syz [ 536.111890][ T5878] usb 4-1: SerialNumber: syz [ 536.148352][ T5878] usb 4-1: config 0 descriptor?? [ 536.546951][ T7766] overlayfs: missing 'lowerdir' [ 536.756889][ T6541] Bluetooth: Error in BCSP hdr checksum [ 537.300883][ T207] Bluetooth: Error in BCSP hdr checksum [ 537.443490][ T7773] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 537.444052][ T7773] cramfs: wrong magic [ 537.745230][ T2255] Bluetooth: Error in BCSP hdr checksum [ 538.525147][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 538.635502][ T2255] Bluetooth: Error in BCSP hdr checksum [ 538.885806][ T7354] Bluetooth: Error in BCSP hdr checksum [ 539.052692][ T6252] usb 4-1: USB disconnect, device number 13 [ 539.276915][ T7779] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 539.282499][ T7779] cramfs: wrong magic [ 545.052842][ T5955] team0 (unregistering): Port device team_slave_1 removed [ 545.215869][ T5955] team0 (unregistering): Port device team_slave_0 removed [ 545.342430][ T5948] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 545.505700][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 545.508571][ T5948] usb 3-1: unable to get BOS descriptor or descriptor too short [ 545.509880][ T5948] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 545.509905][ T5948] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 545.509933][ T5948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.516008][ T5948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.516097][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.516159][ T5948] usb 3-1: Manufacturer: 耨嚧䫹ⲹ쎎眠㖗튁阹搒䅓ᐄ≶ࡠ㊥╅跴墨⢻㺷ꀌᵃ辚붥䠁 [ 545.516218][ T5948] usb 3-1: SerialNumber: syz [ 545.884288][ T5948] usb 3-1: 0:2 : does not exist [ 546.018368][ T5948] usb 3-1: USB disconnect, device number 16 [ 547.651899][ T7799] udevd[7799]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.785919][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.786139][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.786348][ T7533] bridge_slave_1: entered allmulticast mode [ 547.812073][ T7533] bridge_slave_1: entered promiscuous mode [ 547.956515][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.959572][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 547.962810][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 547.988650][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 548.006205][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 548.346923][ T7533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.367680][ T7533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.076638][ T7533] team0: Port device team_slave_0 added [ 549.317723][ T7533] team0: Port device team_slave_1 added [ 550.035204][ T6005] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 550.124999][ T5823] Bluetooth: hci1: command tx timeout [ 550.199200][ T6005] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 550.199301][ T6005] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.199327][ T6005] usb 2-1: config 0 has no interface number 0 [ 550.203680][ T6005] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 550.203712][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.203734][ T6005] usb 2-1: Product: syz [ 550.203750][ T6005] usb 2-1: Manufacturer: syz [ 550.203766][ T6005] usb 2-1: SerialNumber: syz [ 550.269999][ T6005] usb 2-1: config 0 descriptor?? [ 550.424389][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.424410][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.424441][ T7533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.587523][ T7833] overlayfs: missing 'lowerdir' [ 550.785319][ T5955] bridge_slave_1: left allmulticast mode [ 550.785353][ T5955] bridge_slave_1: left promiscuous mode [ 550.785649][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.897050][ T57] Bluetooth: Error in BCSP hdr checksum [ 551.041103][ T5955] bridge_slave_0: left allmulticast mode [ 551.041136][ T5955] bridge_slave_0: left promiscuous mode [ 551.041411][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.140001][ T1130] Bluetooth: Error in BCSP hdr checksum [ 551.312049][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 551.336758][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 551.344524][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 551.376356][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 551.377283][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 551.390013][ T57] Bluetooth: Error in BCSP hdr checksum [ 551.661527][ T6156] Bluetooth: Error in BCSP hdr checksum [ 551.916619][ T207] Bluetooth: Error in BCSP hdr checksum [ 552.225081][ T5116] Bluetooth: hci1: command tx timeout [ 552.241362][ T13] Bluetooth: Error in BCSP hdr checksum [ 552.276795][ T5955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.485666][ T6085] Bluetooth: Error in BCSP hdr checksum [ 552.576559][ T5955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.595015][ T5116] Bluetooth: hci5: command 0x1003 tx timeout [ 552.595088][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 552.695233][ T5955] bond0 (unregistering): Released all slaves [ 552.754148][ T1362] Bluetooth: Error in BCSP hdr checksum [ 553.015716][ T6085] Bluetooth: Error in BCSP hdr checksum [ 554.202055][ T5823] Bluetooth: hci6: command tx timeout [ 554.212798][ T5811] usb 2-1: USB disconnect, device number 29 [ 554.275025][ T5823] Bluetooth: hci1: command tx timeout [ 555.201967][ T5955] team0 (unregistering): Port device team_slave_1 removed [ 555.515770][ T5955] team0 (unregistering): Port device team_slave_0 removed [ 555.755204][ T6063] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 555.927270][ T6063] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 555.927302][ T6063] usb 2-1: config 0 has no interface number 0 [ 555.930414][ T6063] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 555.930446][ T6063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.930470][ T6063] usb 2-1: Product: syz [ 555.930502][ T6063] usb 2-1: Manufacturer: syz [ 555.930520][ T6063] usb 2-1: SerialNumber: syz [ 555.965407][ T6063] usb 2-1: config 0 descriptor?? [ 556.191447][ T6063] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 556.201761][ T6063] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 556.202053][ T6063] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 556.202091][ T6063] usb 2-1: media controller created [ 556.270620][ T6063] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.275054][ T5823] Bluetooth: hci6: command tx timeout [ 556.354948][ T5823] Bluetooth: hci1: command tx timeout [ 556.814306][ T7892] bond1: option mode: unable to set because the bond device is up [ 556.853002][ T7893] bond_slave_0: entered promiscuous mode [ 556.853067][ T7893] bond_slave_1: entered promiscuous mode [ 556.869075][ T7893] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 556.872567][ T7893] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 557.178206][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 557.702948][ T7882] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 557.958172][ T6063] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 558.306354][ T6063] usb 2-1: USB disconnect, device number 30 [ 558.354942][ T5823] Bluetooth: hci6: command tx timeout [ 560.136525][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.138098][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.138318][ T7809] bridge_slave_0: entered allmulticast mode [ 560.141144][ T7809] bridge_slave_0: entered promiscuous mode [ 560.492338][ T5823] Bluetooth: hci6: command tx timeout [ 560.555132][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.555273][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.555507][ T7809] bridge_slave_1: entered allmulticast mode [ 560.613927][ T7809] bridge_slave_1: entered promiscuous mode [ 561.257497][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.433293][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.176547][ T7809] team0: Port device team_slave_0 added [ 563.217063][ T7809] team0: Port device team_slave_1 added [ 563.437528][ T5955] bridge_slave_1: left allmulticast mode [ 563.437561][ T5955] bridge_slave_1: left promiscuous mode [ 563.437742][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.750993][ T5955] bridge_slave_0: left allmulticast mode [ 563.751017][ T5955] bridge_slave_0: left promiscuous mode [ 563.751205][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.884994][ T5823] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 565.967016][ T5955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.145816][ T5955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.367953][ T5955] bond0 (unregistering): Released all slaves [ 566.376074][ T6252] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 566.541395][ T6252] usb 3-1: Using ep0 maxpacket: 32 [ 566.559707][ T6252] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 566.559738][ T6252] usb 3-1: config 0 has no interface number 0 [ 566.559790][ T6252] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 566.611572][ T6252] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 566.611605][ T6252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.611627][ T6252] usb 3-1: Product: syz [ 566.611642][ T6252] usb 3-1: Manufacturer: syz [ 566.611658][ T6252] usb 3-1: SerialNumber: syz [ 566.664381][ T6252] usb 3-1: config 0 descriptor?? [ 566.746276][ T6252] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 567.039818][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.039990][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.040353][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.111392][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.111412][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.111445][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.112063][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.617506][ T6252] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 567.880977][ T6252] usb 3-1: USB disconnect, device number 17 [ 568.315770][ T5955] team0 (unregistering): Port device team_slave_1 removed [ 569.968340][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 569.968648][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 569.971715][ T5116] Bluetooth: hci2: hardware error 0x00 [ 570.016804][ T5955] team0 (unregistering): Port device team_slave_0 removed [ 572.846243][ T5116] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 575.156611][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 575.156686][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.098206][ T7809] hsr_slave_0: entered promiscuous mode [ 576.099438][ T7809] hsr_slave_1: entered promiscuous mode [ 576.198956][ T7852] chnl_net:caif_netlink_parms(): no params data found [ 580.375936][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.376112][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.376245][ T7852] bridge_slave_0: entered allmulticast mode [ 580.378885][ T7852] bridge_slave_0: entered promiscuous mode [ 580.415485][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.415573][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.415697][ T7852] bridge_slave_1: entered allmulticast mode [ 580.417563][ T7852] bridge_slave_1: entered promiscuous mode [ 580.984177][ T7852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.449636][ T7852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.348640][ T7852] team0: Port device team_slave_0 added [ 585.407191][ T7852] team0: Port device team_slave_1 added [ 586.369493][ T7852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.369514][ T7852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.369553][ T7852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.387698][ T7852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.387714][ T7852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.387736][ T7852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.248737][ T7852] hsr_slave_0: entered promiscuous mode [ 588.261323][ T7852] hsr_slave_1: entered promiscuous mode [ 588.262067][ T7852] debugfs: 'hsr0' already exists in 'hsr' [ 588.262086][ T7852] Cannot create hsr debugfs directory [ 588.392127][ T7809] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 588.605206][ T7809] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 588.864149][ T7809] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 588.990115][ T7809] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 591.807313][ T7852] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 591.880070][ T7852] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 591.997426][ T7852] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 592.350010][ T7852] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.125329][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.361927][ T7809] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.395335][ T2270] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.396217][ T2270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.495917][ T2270] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.510224][ T2270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.239911][ T8117] 9p: Bad value for 'rfdno' [ 595.615647][ T7852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.833190][ T7852] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.957186][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.957285][ T7354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.041325][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.057039][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.239941][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.435407][ T7852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.476058][ T7852] veth0_vlan: entered promiscuous mode [ 598.526343][ T7809] veth0_vlan: entered promiscuous mode [ 598.551624][ T7852] veth1_vlan: entered promiscuous mode [ 598.603694][ T7809] veth1_vlan: entered promiscuous mode [ 598.991970][ T7852] veth0_macvtap: entered promiscuous mode [ 600.049431][ T8156] serio: Serial port ptm1 [ 600.248999][ T7852] veth1_macvtap: entered promiscuous mode [ 600.305816][ T7809] veth0_macvtap: entered promiscuous mode [ 600.314378][ T7809] veth1_macvtap: entered promiscuous mode [ 600.358309][ T7852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.429586][ T7852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.447594][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.470642][ T7354] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.478728][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.478806][ T7354] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.487821][ T7354] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.493115][ T7354] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.504271][ T7354] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.586156][ T7354] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.698328][ T7354] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.699115][ T7354] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.866783][ T8169] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 600.878101][ T8169] cramfs: wrong magic [ 604.256051][ T6117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.256075][ T6117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.386075][ T2280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.386099][ T2280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.605742][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.605765][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.756153][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.756179][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.975917][ T8190] 9p: Bad value for 'rfdno' [ 613.523006][ T8222] serio: Serial port ptm0 [ 613.893785][ T8225] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 613.904421][ T8225] cramfs: wrong magic [ 614.322205][ T8222] serio: Serial port ptm0 [ 614.615038][ T805] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 616.657132][ T805] usb 3-1: not running at top speed; connect to a high speed hub [ 616.658632][ T805] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 616.658659][ T805] usb 3-1: config 8 has an invalid interface descriptor of length 2, skipping [ 616.658679][ T805] usb 3-1: config 8 has no interface number 0 [ 616.658729][ T805] usb 3-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 616.662109][ T805] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ee.16 [ 616.662136][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.662158][ T805] usb 3-1: Product: syz [ 616.662174][ T805] usb 3-1: Manufacturer: syz [ 616.662189][ T805] usb 3-1: SerialNumber: syz [ 616.895458][ T6062] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 617.065583][ T6062] usb 6-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 617.065622][ T6062] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 617.065651][ T6062] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 617.072604][ T6062] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 617.072636][ T6062] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 617.072657][ T6062] usb 6-1: Manufacturer: syz [ 617.072672][ T6062] usb 6-1: SerialNumber: syz [ 617.874694][ T6062] yealink 6-1:36.0: invalid payload size 0, expected 16 [ 617.878630][ T6062] input: Yealink usb-p1k as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:36.0/input/input7 [ 617.924957][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 617.925301][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 617.925556][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 617.927477][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 617.928095][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 617.928340][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 617.928648][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 617.928932][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 617.928995][ C0] yealink 6-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 618.167143][ T6062] usb 6-1: USB disconnect, device number 2 [ 620.954610][ T805] usb 3-1: USB disconnect, device number 18 [ 621.238793][ T8265] ======================================================= [ 621.238793][ T8265] WARNING: The mand mount option has been deprecated and [ 621.238793][ T8265] and is ignored by this kernel. Remove the mand [ 621.238793][ T8265] option from the mount to silence this warning. [ 621.238793][ T8265] ======================================================= [ 622.236012][ T8280] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 622.246409][ T8280] cramfs: wrong magic [ 622.290495][ T8279] 9p: Bad value for 'rfdno' [ 626.064917][ T5811] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 626.514919][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 626.517721][ T5811] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 626.517751][ T5811] usb 2-1: config 0 has no interface number 0 [ 626.517800][ T5811] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 626.517825][ T5811] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 626.517853][ T5811] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 626.517881][ T5811] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 626.517907][ T5811] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 626.517934][ T5811] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.517957][ T5811] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 626.517981][ T5811] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 626.518009][ T5811] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 626.518034][ T5811] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.521812][ T5811] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 626.521842][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.521863][ T5811] usb 2-1: Product: syz [ 626.521879][ T5811] usb 2-1: Manufacturer: syz [ 626.521895][ T5811] usb 2-1: SerialNumber: syz [ 626.704922][ T31] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 626.759996][ T5811] usb 2-1: config 0 descriptor?? [ 626.761346][ T8294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 626.761867][ T8294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 626.785640][ T5811] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 626.785661][ T5811] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 627.488977][ T5811] scsi host1: microtekX6 [ 627.507040][ T8294] SQUASHFS error: Failed to read block 0x0: -5 [ 627.529477][ T5811] usb 2-1: USB disconnect, device number 31 [ 627.575861][ T31] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 627.575898][ T31] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 627.575944][ T31] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 627.575969][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.636494][ T8303] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 627.636865][ T8303] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 627.688497][ T31] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.869860][ T8303] FAULT_INJECTION: forcing a failure. [ 627.869860][ T8303] name failslab, interval 1, probability 0, space 0, times 0 [ 627.869915][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.5.530 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 627.869940][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.869961][ T8303] Call Trace: [ 627.869973][ T8303] [ 627.869982][ T8303] dump_stack_lvl+0xe8/0x150 [ 627.870027][ T8303] should_fail_ex+0x46c/0x600 [ 627.870062][ T8303] should_failslab+0xa8/0x100 [ 627.870086][ T8303] __kmalloc_noprof+0xe0/0x7e0 [ 627.870118][ T8303] ? memcg_list_lru_alloc+0x269/0x840 [ 627.870149][ T8303] memcg_list_lru_alloc+0x269/0x840 [ 627.870184][ T8303] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 627.870215][ T8303] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 627.870252][ T8303] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 627.870279][ T8303] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 627.870312][ T8303] __memcg_slab_post_alloc_hook+0x180/0x7d0 [ 627.870361][ T8303] ? __d_alloc+0x37/0x6f0 [ 627.870384][ T8303] kmem_cache_alloc_lru_noprof+0x426/0x6c0 [ 627.870426][ T8303] __d_alloc+0x37/0x6f0 [ 627.870458][ T8303] d_alloc_parallel+0xe1/0x1610 [ 627.870487][ T8303] ? __d_lookup+0x66/0x780 [ 627.870517][ T8303] ? __d_lookup+0x66/0x780 [ 627.870550][ T8303] ? __d_lookup+0x66/0x780 [ 627.870582][ T8303] ? __pfx_d_alloc_parallel+0x10/0x10 [ 627.870616][ T8303] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 627.870650][ T8303] path_openat+0xc92/0x3df0 [ 627.870717][ T8303] ? __pfx_path_openat+0x10/0x10 [ 627.870763][ T8303] ? do_raw_spin_lock+0x121/0x290 [ 627.870804][ T8303] do_filp_open+0x1fa/0x410 [ 627.870837][ T8303] ? __pfx_do_filp_open+0x10/0x10 [ 627.870866][ T8303] ? rt_mutex_slowunlock+0x493/0x8a0 [ 627.870923][ T8303] ? alloc_fd+0x64f/0x6c0 [ 627.870957][ T8303] do_sys_openat2+0x121/0x200 [ 627.870986][ T8303] ? __pfx_do_sys_openat2+0x10/0x10 [ 627.871020][ T8303] ? ksys_write+0x230/0x260 [ 627.871052][ T8303] ? __pfx_ksys_write+0x10/0x10 [ 627.871087][ T8303] __x64_sys_openat+0x138/0x170 [ 627.871119][ T8303] do_syscall_64+0xec/0xf80 [ 627.871141][ T8303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.871163][ T8303] ? trace_irq_disable+0x37/0x100 [ 627.871186][ T8303] ? clear_bhb_loop+0x60/0xb0 [ 627.871213][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.871234][ T8303] RIP: 0033:0x7f75f80adf90 [ 627.871253][ T8303] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 627.871273][ T8303] RSP: 002b:00007f75f6315b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 627.871312][ T8303] RAX: ffffffffffffffda RBX: 0000000000088c02 RCX: 00007f75f80adf90 [ 627.871327][ T8303] RDX: 0000000000088c02 RSI: 00007f75f6315c10 RDI: 00000000ffffff9c [ 627.871341][ T8303] RBP: 00007f75f6315c10 R08: 0000000000000000 R09: 00236964696d2f76 [ 627.871356][ T8303] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 627.871370][ T8303] R13: 00007f75f8306038 R14: 00007f75f8305fa0 R15: 00007ffe4a7d2bf8 [ 627.871405][ T8303] [ 628.209919][ T1014] microtek usb (rev 0.4.3): error -19 submitting URB [ 628.248542][ T1014] microtek usb (rev 0.4.3): error -19 submitting URB [ 628.267807][ T32] microtek usb (rev 0.4.3): error -19 submitting URB [ 628.304951][ T32] microtek usb (rev 0.4.3): error -19 submitting URB [ 628.349628][ T31] usb 6-1: USB disconnect, device number 3 [ 628.542063][ T8229] udevd[8229]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.594407][ T8329] serio: Serial port ptm0 [ 633.354027][ T8357] 9p: Bad value for 'rfdno' [ 634.453734][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 634.693417][ T8364] FAULT_INJECTION: forcing a failure. [ 634.693417][ T8364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.693454][ T8364] CPU: 0 UID: 0 PID: 8364 Comm: syz.2.547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 634.693479][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.693493][ T8364] Call Trace: [ 634.693501][ T8364] [ 634.693511][ T8364] dump_stack_lvl+0xe8/0x150 [ 634.693548][ T8364] should_fail_ex+0x46c/0x600 [ 634.693585][ T8364] _copy_from_user+0x2d/0xb0 [ 634.693607][ T8364] ___sys_sendmsg+0x158/0x2a0 [ 634.693642][ T8364] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.693705][ T8364] ? __fget_files+0x2a/0x420 [ 634.693722][ T8364] ? __fget_files+0x3a6/0x420 [ 634.693746][ T8364] __x64_sys_sendmsg+0x1a1/0x260 [ 634.693768][ T8364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.693796][ T8364] ? __pfx_ksys_write+0x10/0x10 [ 634.693827][ T8364] do_syscall_64+0xec/0xf80 [ 634.693843][ T8364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.693862][ T8364] ? trace_irq_disable+0x37/0x100 [ 634.693879][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 634.693898][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.693913][ T8364] RIP: 0033:0x7fbcb5f0f749 [ 634.693927][ T8364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.693941][ T8364] RSP: 002b:00007fbcb416e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.693957][ T8364] RAX: ffffffffffffffda RBX: 00007fbcb6165fa0 RCX: 00007fbcb5f0f749 [ 634.693969][ T8364] RDX: 0000000000008004 RSI: 00002000000003c0 RDI: 0000000000000003 [ 634.693979][ T8364] RBP: 00007fbcb416e090 R08: 0000000000000000 R09: 0000000000000000 [ 634.693989][ T8364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.693998][ T8364] R13: 00007fbcb6166038 R14: 00007fbcb6165fa0 R15: 00007ffcd8bf1a18 [ 634.694021][ T8364] [ 634.970348][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 634.970388][ T31] usb 4-1: config 0 has no interface number 0 [ 635.021521][ T31] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 635.021553][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.021574][ T31] usb 4-1: Product: syz [ 635.021589][ T31] usb 4-1: Manufacturer: syz [ 635.021604][ T31] usb 4-1: SerialNumber: syz [ 635.064440][ T31] usb 4-1: config 0 descriptor?? [ 635.286684][ T8368] bond1: option mode: unable to set because the bond device has slaves [ 635.318597][ T8368] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 635.789852][ T31] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 635.793530][ T31] usb 4-1: USB disconnect, device number 14 [ 635.830477][ T8229] udevd[8229]: setting owner of /dev/bus/usb/004/014 to uid=0, gid=0 failed: No such file or directory [ 636.608826][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.608901][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.850457][ T8385] serio: Serial port ptm0 [ 638.638259][ T8394] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 638.645505][ T8394] cramfs: wrong magic [ 639.805020][ T6010] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 640.067782][ T6010] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 640.067817][ T6010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.067839][ T6010] usb 7-1: Product: syz [ 640.067853][ T6010] usb 7-1: Manufacturer: syz [ 640.067869][ T6010] usb 7-1: SerialNumber: syz [ 640.932218][ T6010] usb 7-1: config 0 descriptor?? [ 641.247302][ T8404] bond0: Device is already in use. [ 641.423577][ T6010] usb 7-1: USB disconnect, device number 2 [ 641.721727][ T8411] 9p: Bad value for 'rfdno' [ 642.736019][ T8229] udevd[8229]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.975912][ T5925] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 644.109085][ T8420] bond1: option mode: unable to set because the bond device has slaves [ 644.174890][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 644.180628][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 644.182390][ T5925] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 644.182413][ T5925] usb 4-1: config 4 has no interface number 0 [ 644.182441][ T5925] usb 4-1: config 4 interface 30 has no altsetting 0 [ 644.226394][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 644.226683][ T5925] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 644.226710][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.528165][ T5925] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 644.528226][ T5925] dw2102: su3000_power_ctrl: 1, initialized 0 [ 644.528249][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 644.567540][ T8420] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 644.589802][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 644.590900][ T5925] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 644.590964][ T5925] usb 4-1: media controller created [ 644.591154][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 644.591172][ T5925] dw2102: i2c transfer failed. [ 644.591199][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 644.591215][ T5925] dw2102: i2c transfer failed. [ 644.591231][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 644.591245][ T5925] dw2102: i2c transfer failed. [ 644.591269][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 644.591283][ T5925] dw2102: i2c transfer failed. [ 644.591299][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 644.591314][ T5925] dw2102: i2c transfer failed. [ 644.591332][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 644.591346][ T5925] dw2102: i2c transfer failed. [ 644.591357][ T5925] dvb-usb: MAC address: 02:02:02:02:02:02 [ 644.718188][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 644.724518][ T8414] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 644.724546][ [ 644.724546][ T8414] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 644.724574][ T8414] CPU: 0 UID: 0 PID: 8414 Comm: syz.3.563 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 644.724624][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.724641][ T8414] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 644.724673][ T8414] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 6d d9 ea fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 644.724692][ T8414] RSP: 0018:ffffc90009957bb0 EFLAGS: 00010202 [ 644.724713][ T8414] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 644.724727][ T8414] RDX: ffffffff873706b5 RSI: ffffffff8e4503f0 RDI: 0000000000001900 [ 644.724743][ T8414] RBP: 0000000000000000 R08: ffff88802b880000 R09: 0000000000000002 [ 644.724757][ T8414] R10: 0000000000000100 R11: 0000000000001a00 R12: dffffc0000000000 [ 644.724775][ T8414] R13: 1ffff1100959fa40 R14: 0000000000000003 R15: ffff88804acfd208 [ 644.724791][ T8414] FS: 00007f3a219ce6c0(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 644.724809][ T8414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.724825][ T8414] CR2: 000055556d05f808 CR3: 000000004a942000 CR4: 00000000003526f0 [ 644.724845][ T8414] DR0: 0000000000800003 DR1: 00000000000001f5 DR2: 0000000000000483 [ 644.724859][ T8414] DR3: 0000000000000007 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 644.724873][ T8414] Call Trace: [ 644.724880][ T8414] [ 644.724898][ T8414] __i2c_transfer+0x79a/0x1f00 [ 644.724928][ T8414] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 644.725030][ T8414] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 644.725101][ T8414] ? i2c_transfer+0xc8/0x2d0 [ 644.725182][ T8414] i2c_transfer+0x1cc/0x2d0 [ 644.725267][ T8414] i2cdev_ioctl_rdwr+0x460/0x740 [ 644.725354][ T8414] i2cdev_ioctl+0x64e/0x820 [ 644.725422][ T8414] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 644.725501][ T8414] ? __fget_files+0x3a6/0x420 [ 644.725567][ T8414] ? __fget_files+0x2a/0x420 [ 644.725631][ T8414] ? bpf_lsm_file_ioctl+0x9/0x20 [ 644.725718][ T8414] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 644.725790][ T8414] __se_sys_ioctl+0xff/0x170 [ 644.725874][ T8414] do_syscall_64+0xec/0xf80 [ 644.725929][ T8414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.725986][ T8414] ? trace_irq_disable+0x37/0x100 [ 644.726056][ T8414] ? clear_bhb_loop+0x60/0xb0 [ 644.726119][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.726173][ T8414] RIP: 0033:0x7f3a2376f749 [ 644.726224][ T8414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.726285][ T8414] RSP: 002b:00007f3a219ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.726340][ T8414] RAX: ffffffffffffffda RBX: 00007f3a239c5fa0 RCX: 00007f3a2376f749 [ 644.726384][ T8414] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 644.726424][ T8414] RBP: 00007f3a237f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 644.726478][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.726521][ T8414] R13: 00007f3a239c6038 R14: 00007f3a239c5fa0 R15: 00007ffd3938d808 [ 644.726598][ T8414] [ 644.726629][ T8414] Modules linked in: [ 644.726798][ T8414] ---[ end trace 0000000000000000 ]--- [ 644.745051][ T8414] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 644.745159][ T8414] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 6d d9 ea fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 644.745213][ T8414] RSP: 0018:ffffc90009957bb0 EFLAGS: 00010202 [ 644.745266][ T8414] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 644.745281][ T8414] RDX: ffffffff873706b5 RSI: ffffffff8e4503f0 RDI: 0000000000001900 [ 644.745335][ T8414] RBP: 0000000000000000 R08: ffff88802b880000 R09: 0000000000000002 [ 644.745385][ T8414] R10: 0000000000000100 R11: 0000000000001a00 R12: dffffc0000000000 [ 644.745447][ T8414] R13: 1ffff1100959fa40 R14: 0000000000000003 R15: ffff88804acfd208 [ 644.745499][ T8414] FS: 00007f3a219ce6c0(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 644.745552][ T8414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.745596][ T8414] CR2: 000055556d05f808 CR3: 000000004a942000 CR4: 00000000003526f0 [ 644.745646][ T8414] DR0: 0000000000800003 DR1: 00000000000001f5 DR2: 0000000000000483 [ 644.746284][ T8414] DR3: 0000000000000007 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 644.746347][ T8414] Kernel panic - not syncing: Fatal exception [ 644.746983][ T8414] Kernel Offset: disabled