last executing test programs: 23m27.466398865s ago: executing program 32 (id=679): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x7db, 0x2a, 0x0, 0x0, 0x200000000, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffc, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18m19.284414898s ago: executing program 33 (id=4569): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="a6", 0x1}], 0x1, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="b7", 0x1}], 0x1, 0x0, 0x0, 0x20000080}}], 0x1, 0x0) 17m41.76006999s ago: executing program 34 (id=4757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b28851a6d0102030109021b21010001000b0904c8020103010203090504"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 16m47.228737204s ago: executing program 35 (id=5470): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setreuid(0x0, 0xee01) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) write$sysctl(r1, &(0x7f0000000180)='7\x00', 0x2) 16m3.719421516s ago: executing program 36 (id=5935): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 13m45.710181463s ago: executing program 37 (id=7235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 13m42.011882717s ago: executing program 38 (id=7243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x13, "f9808039360bcc2b16d413871108db2bf1b8e1"}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10m50.289869398s ago: executing program 39 (id=8204): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc9, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10m39.219696274s ago: executing program 7 (id=8257): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) socket$nl_generic(0x10, 0x3, 0x10) 10m37.692612397s ago: executing program 7 (id=8260): openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x3, 0x5, 0x4, 0x5, 0x45, 0xc, 0x9, 0x7, 0x6, 0x1, 0xd, 0x8, 0xb, 0x9}, 0xe) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r3, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0x1, 0x2, 0x10, 0x0, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private0, 0x6a, r5}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) setpriority(0x2, r4, 0x7) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000019c0)={0x1c, &(0x7f0000001840)={0x20, 0xf, 0xffffffffffffff8c, "e0ce31c97e"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0xa}, 0x0}) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) 10m31.1321235s ago: executing program 7 (id=8269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x2f}, 0x20) syz_open_dev$video(0x0, 0x7, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, 0x0, &(0x7f00000000c0)={0x4, 0x6, 0x1, 0x4}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) gettid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000540)={0x41c, 0x7d, 0x0, {{0x500, 0x2db, 0x0, 0x5000000, {0xcdb74b01717932d9, 0x400}, 0x10000000, 0x0, 0x0, 0x8000fe, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\xff\xff\xff0\xff\xce\xbc\x92\x00\x00\x00', 0x120, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05>\x00\x1e\x00\x00\x18{\x82O^\x97\xe5p\xbeg\xb0^\xb0V\xca|=9\x00\xb5\x00\x00;Y_\xcb\x14\x03\x03\x00\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x1a\xb4\x94\xcc\xe37A\x95\xcc\x90U\xd1\xc8~x\xcdY\x96\xd9\x967\x87\xe7\xb6\x98\"l5\xf0\x17K\r\xf3\xf8\x91\xcf\x99lI\b\xe889d\x01,\xe2\x15]\xd6\xb3\xf4kb\xcay$\xeba\x13\x90\x98\xb2\"\xbc\xf4/\xeah1Z\x81ju\x16i\xd6%\xe5\xe4\xe4_\x96?\x1e\xe2\x1e\xb7N\xf3\xcd\xf9\x8f7\xb2?\r\xac\xc9\xd9\xe5\xd4\xbe\xbf\x91J\x8d,\x9f\x19fxu\xd1\r\xeb\xddkT\x03\xf6j\xe8}\x8a/\x067\xcdH\x82\x8f,W\xc3,\x19\xc3#9(O\xa5\x14\xa9#l\x1b\x17\xe7R\x93^J\xf4v\x86\xa6\xcfHC\x10\xec\xd1\xe8\x98l\x12_\xb7B\xfd2\xfc]\x87\xe0\x8aj\x8e\r\x94X\x02\xd7\x7f\x15\xb4G\t\x8b\xd5c\x9c\x0e\xba\\o\xd2\x132\xf6\xddX\x8b\x17\"=\xa7l-\xf5\x91\v_\xf9\xfc\x01\x9f\xd9&', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x157, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85+\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xd0\x02\xaf\x02k\x9en\r\xca\x00\x89\xfdL\xd0\x9c\xf8\r\xbb\xe9Q\xb2\x1f5y\x8b\n\xb6hx\xc0\x9d\"\x8b7\x88\\\x10\x8a\xcb\xee\xcd\xbe\x06Kz\xd8\xd79\x9f\xd5\x18j\'t\x8f$\x88\'\x06\x8f\x89\x0fOPZ\x04\xc4$\xd7%\xc8\x1exa\xe1 --\xc4\xc94\x1dWH\xff\x9eS\x9e\rIT\x8fz\x1c\xcf^\xac\x9a\xa0\x92L\a\x00\x00\x00\xf3|c\xccjn1\xa7}\x1f\xad\x05\x83h\xae\xd5\xe3\xc1M\x89\x96\x87\n\v\t\xd0l\x97\x04\x98\v\xb4GxB\xb1\xed.\x8f%\x01\xb2_\xbc\\^\xe6}\x8bnN\xc7G\xe9]\x03\xf6x\xd7\x1a-\xa34\x92\xf8\xd4\x87\xeeB|Y\xf6\xe7\ni\xa9J}\x987\xd6\x02c\xd68\aM\xfa\x04\xa4V\x04\tD\xb7\x02\"gFh\xc7D\xb7\xba\xda\xad4uXO 5|\x84 \xc1IO\x8d\r4 *\xfb5\xccVp\xe2@\xbe\xba\x96SS\xaf\xe9F\xc0\xc1\xb5\t\x1d9U\xc8\xc8_\xf1\xc7q|\n'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcf\x01.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb49\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff, 0xee00}}, 0x41c) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) socket$rds(0x15, 0x5, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 10m29.949560688s ago: executing program 7 (id=8271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_buf(r3, 0x29, 0xcd, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 10m28.501786861s ago: executing program 7 (id=8274): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1000, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x162) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 10m24.702600355s ago: executing program 7 (id=8278): dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdir(0x0, 0x0) 10m8.694585269s ago: executing program 40 (id=8278): dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdir(0x0, 0x0) 6m4.212817493s ago: executing program 6 (id=9947): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 6m4.064054834s ago: executing program 6 (id=9950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) 6m2.980603488s ago: executing program 6 (id=9954): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 6m2.486687915s ago: executing program 6 (id=9961): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9006070f000000830000"], 0x0}, 0x0) 5m58.865469115s ago: executing program 6 (id=9983): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) 5m56.655061668s ago: executing program 6 (id=9997): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x58, 0x3fffff) 5m40.700294489s ago: executing program 41 (id=9997): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x58, 0x3fffff) 5m16.032152255s ago: executing program 2 (id=10271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="0100000000000100000008000000ac0002800400040008000200000000009a00050056d769e100c52859ef020024c1be87a4f26894b08df0d541bb2d6af0cec91a5adc134c506c72d18cdd6db2b2f9c036b092ec4e29942010a4cacd11d3b9d2d048ec276190a1a04c608c2ee95e10993fbd83612b331caa2530c324b6426038f78cd0d36ae3ef5ad90f000800000000000000000006000000ff43b9edd031b91ebaeeb4a92cf82ccc78596aa81e1ad5cc23c38e89f333c20000180001801400020073797a5f74756e"], 0xd8}}, 0x4048086) 5m15.501624251s ago: executing program 2 (id=10282): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="080096040a000200aaaaaaaaaa0c000006000500010000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m15.45609572s ago: executing program 0 (id=10283): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r0, &(0x7f0000000080)="1c0000001a007f0214f9f407000904080a00000000000005a6020000", 0x1c) 5m15.321938953s ago: executing program 0 (id=10286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m15.226969611s ago: executing program 0 (id=10287): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000002300)=0x4) 5m15.195634046s ago: executing program 2 (id=10289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001f500070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) 5m14.910321241s ago: executing program 0 (id=10293): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) statx(r0, 0x0, 0x800, 0x8fcc006e198ec91a, 0x0) 5m14.587198625s ago: executing program 2 (id=10296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500feff1a1d466f41c12c2e000008000300", @ANYRES32=r2], 0x38}}, 0x0) 5m14.059104699s ago: executing program 2 (id=10302): syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYBLOB], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 5m12.78827711s ago: executing program 0 (id=10304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x40040) 5m12.313280266s ago: executing program 2 (id=10306): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x40, 0x9ffac2705d37b0b7, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040) 5m11.852212419s ago: executing program 0 (id=10310): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x10, 0x0, 0x4, 0xc2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x0, 0x2, 0x6}}) 4m57.330508174s ago: executing program 42 (id=10306): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x40, 0x9ffac2705d37b0b7, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040) 4m56.781156868s ago: executing program 43 (id=10310): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x10, 0x0, 0x4, 0xc2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x0, 0x2, 0x6}}) 1m22.792983681s ago: executing program 3 (id=12323): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}}, 0x0) 1m22.390392752s ago: executing program 3 (id=12329): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0xc, 0x68, 0x10, 0x46d, 0x840, 0x2c30, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x41, 0x0, 0x0, 0x9d, 0xe3, 0x84}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000080)={0x40, 0x31, 0x1, "19"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m20.335615287s ago: executing program 3 (id=12358): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m19.309044052s ago: executing program 3 (id=12374): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x200) 1m19.088763663s ago: executing program 3 (id=12377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4cfb}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) 1m17.659574106s ago: executing program 3 (id=12396): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 1m17.234872355s ago: executing program 44 (id=12396): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 5.658072603s ago: executing program 8 (id=13406): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000f40)=@assoc_value={r2, 0x8}, 0x8) 5.381890584s ago: executing program 8 (id=13413): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 4.841976201s ago: executing program 8 (id=13421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf82c9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0xc0403d11, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x145142, 0x84) write$P9_RRENAMEAT(r4, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x1ff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 3.247016903s ago: executing program 9 (id=13430): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x2}, 0x8) 3.092254465s ago: executing program 9 (id=13433): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)='x', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a0900000000004e"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) 2.103686913s ago: executing program 9 (id=13448): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0xa, 0x21ed5, 0x7ffd, 0x6, 0x5, "7c6a9f60609c74931300", 0x4bfa824e, 0x9}) write(r1, &(0x7f00000002c0)="7be32c0a3fef93b5a7b0e99e1522b47963703551b482f7e43f2f78b5a24dfe951aa1a51097b76b19b8eaa0ec91cba490414d549340c5e93de8780d", 0x3b) 1.902134511s ago: executing program 9 (id=13453): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000300), 0x210009, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.694526524s ago: executing program 9 (id=13458): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1.546686363s ago: executing program 8 (id=13461): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400030628bd7000fddbdf25011f08104e264e22030000001a00"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 1.494499887s ago: executing program 5 (id=13462): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf251500000014002b80080001000200000400000400ffff000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) 1.463671594s ago: executing program 9 (id=13464): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "0fff34ed"}]}}, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.381810451s ago: executing program 4 (id=13465): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x112, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x4400, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.381497468s ago: executing program 5 (id=13466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r2, 0xb97534d5fe9704cf, 0x70bd26, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8008) 1.331874256s ago: executing program 4 (id=13467): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={&(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002f00)=""/4098, 0x1002}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.319405947s ago: executing program 8 (id=13468): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x8001}, {}, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.21355332s ago: executing program 5 (id=13470): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="84650000", 0x4) 1.13305871s ago: executing program 8 (id=13471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf82c9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0xc0403d11, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x145142, 0x84) write$P9_RRENAMEAT(r4, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x1ff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 1.132719009s ago: executing program 4 (id=13472): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.100202832s ago: executing program 1 (id=13473): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb8) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.043663714s ago: executing program 5 (id=13474): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 893.576079ms ago: executing program 1 (id=13475): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x71b0, 0x1800}], 0x1, 0x0) 695.045142ms ago: executing program 1 (id=13476): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 673.50192ms ago: executing program 4 (id=13477): r0 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47b0, 0x7bb6, 0x82, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket(0x2000000015, 0x80005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000feffffff01000000f9ff0180060001000200000008000300000000000800060003000000a12015419798bd1b31489753bee3851a4a35e4a3a12aaa14077eafa715840da8dd432d78e9764f85acbbfbb3522006fbf3afd1cfaf716f386741393e3e8a"], 0x30}, 0x1, 0xff07}, 0x2000000) 564.459141ms ago: executing program 1 (id=13478): r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f0000000080)={{}, {r1, r2+10000000}}, 0x0) futex(&(0x7f0000000000)=0x1, 0x0, 0x1, 0x0, 0x0, 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000100), 0x0) 525.416478ms ago: executing program 5 (id=13479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x8000) 325.058398ms ago: executing program 4 (id=13480): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) 267.736651ms ago: executing program 1 (id=13481): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 54.595548ms ago: executing program 5 (id=13482): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) madvise(&(0x7f00000d7000/0x3000)=nil, 0x3000, 0x1) mbind(&(0x7f000036a000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x2) 52.907514ms ago: executing program 4 (id=13483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 1 (id=13484): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): nterface not active [ 1310.413268][ T5808] Bluetooth: hci1: command tx timeout [ 1310.707152][T29812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.707172][T29812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.707203][T29812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.954951][T29812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.954982][T29812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.955013][T29812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.359390][T30291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10624'. [ 1312.471021][ T5808] Bluetooth: hci1: command tx timeout [ 1312.691066][ T935] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1312.840976][ T935] usb 2-1: Using ep0 maxpacket: 32 [ 1312.843107][ T935] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1312.843139][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.846855][ T935] usb 2-1: config 0 descriptor?? [ 1313.054080][ T935] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1313.056906][ T935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1313.057683][ T935] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1313.057726][ T935] usb 2-1: media controller created [ 1313.088573][ T935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1313.122700][T29799] hsr_slave_0: entered promiscuous mode [ 1313.124263][T29799] hsr_slave_1: entered promiscuous mode [ 1313.125355][T29799] debugfs: 'hsr0' already exists in 'hsr' [ 1313.125382][T29799] Cannot create hsr debugfs directory [ 1313.256171][ T935] az6027: usb out operation failed. (-71) [ 1313.257425][ T935] az6027: usb out operation failed. (-71) [ 1313.257445][ T935] stb0899_attach: Driver disabled by Kconfig [ 1313.257458][ T935] az6027: no front-end attached [ 1313.257458][ T935] [ 1313.257869][ T935] az6027: usb out operation failed. (-71) [ 1313.257886][ T935] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1313.264348][ T935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 1313.267739][ T935] dvb-usb: schedule remote query interval to 400 msecs. [ 1313.267765][ T935] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1313.283775][ T935] usb 2-1: USB disconnect, device number 20 [ 1313.537609][ T935] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1313.719447][T29812] hsr_slave_0: entered promiscuous mode [ 1313.727983][T29812] hsr_slave_1: entered promiscuous mode [ 1313.729080][T29812] debugfs: 'hsr0' already exists in 'hsr' [ 1313.729108][T29812] Cannot create hsr debugfs directory [ 1314.000975][T22382] hsr_slave_0: left promiscuous mode [ 1314.022971][T22382] hsr_slave_1: left promiscuous mode [ 1314.025028][T22382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.025058][T22382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.077426][T22382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.077458][T22382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.242268][T22382] veth1_macvtap: left promiscuous mode [ 1314.242381][T22382] veth0_macvtap: left promiscuous mode [ 1314.242645][T22382] veth1_vlan: left promiscuous mode [ 1314.242831][T22382] veth0_vlan: left promiscuous mode [ 1314.550943][ T5808] Bluetooth: hci1: command tx timeout [ 1316.660624][ T5808] Bluetooth: hci1: command tx timeout [ 1319.861354][T30453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10701'. [ 1321.293292][T22382] team0 (unregistering): Port device team_slave_1 removed [ 1321.722725][T22382] team0 (unregistering): Port device team_slave_0 removed [ 1326.834773][T30622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10783'. [ 1327.750687][T29799] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.752551][T29799] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.873597][T30202] chnl_net:caif_netlink_parms(): no params data found [ 1328.197546][T29799] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.197577][T29799] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.555548][T29799] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.555591][T29799] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.625148][T29799] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.625179][T29799] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.759896][T30202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.760054][T30202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.760329][T30202] bridge_slave_0: entered allmulticast mode [ 1329.785461][T30202] bridge_slave_0: entered promiscuous mode [ 1329.800054][T30202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.800231][T30202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.800582][T30202] bridge_slave_1: entered allmulticast mode [ 1329.824693][T30202] bridge_slave_1: entered promiscuous mode [ 1330.590430][T30202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.703488][T30202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.997297][T30202] team0: Port device team_slave_0 added [ 1331.051624][T30202] team0: Port device team_slave_1 added [ 1331.363000][T30202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.363023][T30202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.363060][T30202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.418072][T30202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.418087][T30202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.418110][T30202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.553509][T22382] bridge_slave_1: left allmulticast mode [ 1331.553542][T22382] bridge_slave_1: left promiscuous mode [ 1331.553728][T22382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.622720][T22382] bridge_slave_0: left allmulticast mode [ 1331.622806][T22382] bridge_slave_0: left promiscuous mode [ 1331.623172][T22382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.032157][T22382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.111884][T22382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.179763][T22382] bond0 (unregistering): Released all slaves [ 1332.444119][T30202] hsr_slave_0: entered promiscuous mode [ 1332.445416][T30202] hsr_slave_1: entered promiscuous mode [ 1332.741142][T22382] hsr_slave_0: left promiscuous mode [ 1332.762303][T22382] hsr_slave_1: left promiscuous mode [ 1332.763276][T22382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.784512][T22382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.611694][T22382] team0 (unregistering): Port device team_slave_1 removed [ 1333.792791][T22382] team0 (unregistering): Port device team_slave_0 removed [ 1334.789176][T29799] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1334.963841][T29799] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1335.053673][T29799] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1335.107958][T29799] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1335.457915][T29812] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1335.507211][T29812] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1335.759261][T29812] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1335.821496][T29812] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1336.240540][T29799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.288960][T29812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.306352][T29799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.338128][T29812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.340338][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.340494][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.385757][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.386693][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.389014][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.389108][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.430456][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.430563][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.889716][T30202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1336.946485][T30202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1336.988191][T30202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1337.027052][T30202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1337.126246][T29799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.176920][T29812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.355937][T30202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.406975][T30202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.427534][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.428275][ T6140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.440325][T22972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.440450][T22972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.826171][T29799] veth0_vlan: entered promiscuous mode [ 1337.866970][T29799] veth1_vlan: entered promiscuous mode [ 1338.018419][T29812] veth0_vlan: entered promiscuous mode [ 1338.033500][T29799] veth0_macvtap: entered promiscuous mode [ 1338.048407][T29799] veth1_macvtap: entered promiscuous mode [ 1338.059015][T29812] veth1_vlan: entered promiscuous mode [ 1338.074391][T30202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.120501][T29799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.142799][T29799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.174437][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.181161][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.202019][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.221824][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.301695][T29812] veth0_macvtap: entered promiscuous mode [ 1338.325352][T29812] veth1_macvtap: entered promiscuous mode [ 1338.408024][T30202] veth0_vlan: entered promiscuous mode [ 1338.445058][T29812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.628430][T29812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.629266][T30202] veth1_vlan: entered promiscuous mode [ 1338.669547][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.669573][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.695098][ T70] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.696335][ T70] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.736286][ T70] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.745989][ T70] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.835839][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.835863][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.981770][T30202] veth0_macvtap: entered promiscuous mode [ 1339.066870][T30202] veth1_macvtap: entered promiscuous mode [ 1339.127243][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.127268][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.248086][T30202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.293508][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.293531][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.374015][T30202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.409866][T23673] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.410110][T23673] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.462637][T23673] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.462914][T23673] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.590483][ T5808] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1339.590520][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1339.590544][ T5808] Tainted: [L]=SOFTLOCKUP [ 1339.590550][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1339.590562][ T5808] Workqueue: hci4 hci_rx_work [ 1339.590589][ T5808] Call Trace: [ 1339.590601][ T5808] [ 1339.590609][ T5808] dump_stack_lvl+0x189/0x250 [ 1339.590637][ T5808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1339.590660][ T5808] ? __pfx__printk+0x10/0x10 [ 1339.590681][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 1339.590712][ T5808] ? kernfs_path_from_node+0x243/0x280 [ 1339.590746][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 1339.590784][ T5808] sysfs_create_dir_ns+0x259/0x280 [ 1339.590818][ T5808] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1339.590844][ T5808] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1339.590872][ T5808] ? rt_spin_unlock+0x161/0x200 [ 1339.590897][ T5808] kobject_add_internal+0x6b1/0xcd0 [ 1339.590925][ T5808] kobject_add+0x155/0x220 [ 1339.590952][ T5808] ? __pfx_kobject_add+0x10/0x10 [ 1339.591003][ T5808] ? get_device_parent+0x370/0x3a0 [ 1339.591107][ T5808] device_add+0x408/0xb80 [ 1339.591131][ T5808] hci_conn_add_sysfs+0xd5/0x210 [ 1339.591167][ T5808] le_conn_complete_evt+0xf1d/0x1420 [ 1339.591189][ T5808] ? lockdep_hardirqs_on+0x98/0x140 [ 1339.591212][ T5808] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1339.591231][ T5808] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1339.591249][ T5808] ? lockdep_hardirqs_on+0x98/0x140 [ 1339.591268][ T5808] ? skb_pull_data+0xfb/0x200 [ 1339.591338][ T5808] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 1339.591361][ T5808] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1339.591385][ T5808] hci_event_packet+0x78f/0x1260 [ 1339.591412][ T5808] ? reacquire_held_locks+0x121/0x1c0 [ 1339.591442][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1339.591464][ T5808] ? __pfx_hci_event_packet+0x10/0x10 [ 1339.591490][ T5808] ? rt_spin_unlock+0x150/0x200 [ 1339.591526][ T5808] ? hci_send_to_monitor+0xe2/0x590 [ 1339.591552][ T5808] hci_rx_work+0x3ee/0x1060 [ 1339.591574][ T5808] ? process_scheduled_works+0x9ef/0x1770 [ 1339.591595][ T5808] process_scheduled_works+0xad1/0x1770 [ 1339.591641][ T5808] ? __pfx_process_scheduled_works+0x10/0x10 [ 1339.591674][ T5808] worker_thread+0x8a0/0xda0 [ 1339.591715][ T5808] kthread+0x711/0x8a0 [ 1339.591742][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 1339.591762][ T5808] ? __pfx_kthread+0x10/0x10 [ 1339.591786][ T5808] ? rt_spin_unlock+0x150/0x200 [ 1339.591812][ T5808] ? rt_spin_unlock+0x161/0x200 [ 1339.591833][ T5808] ? __pfx_kthread+0x10/0x10 [ 1339.591858][ T5808] ret_from_fork+0x599/0xb30 [ 1339.591879][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 1339.591906][ T5808] ? __switch_to_asm+0x39/0x70 [ 1339.591929][ T5808] ? __switch_to_asm+0x33/0x70 [ 1339.591953][ T5808] ? __pfx_kthread+0x10/0x10 [ 1339.591977][ T5808] ret_from_fork_asm+0x1a/0x30 [ 1339.592015][ T5808] [ 1339.592489][ T5808] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1339.592542][ T5808] Bluetooth: hci4: failed to register connection device [ 1340.516508][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.516534][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.702662][T22972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.702688][T22972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.780915][ T8724] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1340.930970][ T8724] usb 10-1: Using ep0 maxpacket: 8 [ 1340.936452][ T8724] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1340.942140][ T8724] usb 10-1: config 4 interface 0 has no altsetting 0 [ 1340.980903][ T8724] usb 10-1: string descriptor 0 read error: -22 [ 1340.981020][ T8724] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1340.981049][ T8724] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1341.044806][ T8724] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1341.076216][ T8724] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1341.076677][ T8724] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1341.076732][ T8724] usb 10-1: media controller created [ 1341.150447][ T8724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1342.244892][ T8724] zl10353_read_register: readreg error (reg=127, ret==0) [ 1342.648737][ T8724] usb 10-1: USB disconnect, device number 3 [ 1343.290921][ T5808] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1343.298773][ T5808] Bluetooth: hci4: Injecting HCI hardware error event [ 1343.302677][ T5808] Bluetooth: hci4: hardware error 0x00 [ 1345.399095][T30906] mkiss: ax0: crc mode is auto. [ 1345.911037][ T5808] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1345.977500][ T5968] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1347.140921][ T5968] usb 10-1: Using ep0 maxpacket: 32 [ 1347.144568][ T5968] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1347.144600][ T5968] usb 10-1: config 0 has no interface number 0 [ 1347.144655][ T5968] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1347.148288][ T5968] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1347.148322][ T5968] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.148346][ T5968] usb 10-1: Product: syz [ 1347.148363][ T5968] usb 10-1: Manufacturer: syz [ 1347.148380][ T5968] usb 10-1: SerialNumber: syz [ 1347.165052][ T5968] usb 10-1: config 0 descriptor?? [ 1347.185484][ T5968] smsc75xx v1.0.0 [ 1347.263556][T30948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10906'. [ 1348.004084][ T5968] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1348.004120][ T5968] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1348.008467][ T5968] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1348.008502][ T5968] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1348.008525][ T5968] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1348.008559][ T5968] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1348.019859][ T5968] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 1348.081859][ T5968] usb 10-1: USB disconnect, device number 4 [ 1348.153075][T24470] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1349.282172][T24470] usb 6-1: Using ep0 maxpacket: 16 [ 1349.312812][T24470] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1349.312844][T24470] usb 6-1: config 0 has no interface number 0 [ 1349.312898][T24470] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1349.312929][T24470] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1349.315295][T24470] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1349.315325][T24470] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1349.315348][T24470] usb 6-1: Product: syz [ 1349.315365][T24470] usb 6-1: SerialNumber: syz [ 1349.371615][T24470] usb 6-1: config 0 descriptor?? [ 1349.390051][T24470] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1349.397145][T24470] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input68 [ 1350.562285][T30963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.566347][T30963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.742323][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1350.745987][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1350.746236][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1350.746564][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1350.746811][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1350.746915][T24470] usb 6-1: USB disconnect, device number 38 [ 1350.747028][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1350.747045][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1350.831775][T30977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10921'. [ 1350.879136][T24470] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1351.584404][T31000] binder: Unknown parameter 'smackfsfloor?t' [ 1353.182893][T31032] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10941'. [ 1353.374155][T31036] tap0: tun_chr_ioctl cmd 2147767520 [ 1353.461847][T31045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10947'. [ 1353.584113][T31051] loop6: detected capacity change from 0 to 524287999 [ 1355.274755][T31085] Bluetooth: hci3: Frame reassembly failed (-84) [ 1355.299206][ T70] Bluetooth: hci3: Frame reassembly failed (-84) [ 1355.299249][ T70] Bluetooth: hci3: Frame reassembly failed (-84) [ 1355.299350][T25245] Bluetooth: hci3: Frame reassembly failed (-84) [ 1355.770216][T29384] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1355.946439][T29384] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 1355.946473][T29384] usb 6-1: config 0 has no interface number 0 [ 1355.969689][T29384] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1355.969724][T29384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.969748][T29384] usb 6-1: Product: syz [ 1355.969764][T29384] usb 6-1: Manufacturer: syz [ 1355.969781][T29384] usb 6-1: SerialNumber: syz [ 1356.016128][T29384] usb 6-1: config 0 descriptor?? [ 1356.360574][ T8724] kernel read not supported for file /vcs (pid: 8724 comm: kworker/1:8) [ 1356.594247][T31114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10978'. [ 1356.891195][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1356.892966][T29384] usb 6-1: Firmware version (0.0) predates our first public release. [ 1356.892992][T29384] usb 6-1: Please update to version 0.2 or newer [ 1357.040441][T29384] usb 6-1: USB disconnect, device number 39 [ 1357.044357][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1357.048329][ T9] usb 10-1: config 0 has an invalid interface number: 15 but max is 0 [ 1357.048363][ T9] usb 10-1: config 0 has no interface number 0 [ 1357.048427][ T9] usb 10-1: config 0 interface 15 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1357.048473][ T9] usb 10-1: config 0 interface 15 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1357.048502][ T9] usb 10-1: config 0 interface 15 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 1357.048534][ T9] usb 10-1: config 0 interface 15 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1357.048565][ T9] usb 10-1: config 0 interface 15 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1357.048596][ T9] usb 10-1: config 0 interface 15 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1357.048629][ T9] usb 10-1: config 0 interface 15 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1357.158966][ T9] usb 10-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=46.54 [ 1357.159003][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.159027][ T9] usb 10-1: Product: syz [ 1357.159043][ T9] usb 10-1: Manufacturer: syz [ 1357.159061][ T9] usb 10-1: SerialNumber: syz [ 1357.169717][ T9] usb 10-1: config 0 descriptor?? [ 1357.201354][T31119] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1357.285666][ T9] usb 10-1: selecting invalid altsetting 3 [ 1357.285700][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 1357.285721][ T9] usbduxsigma 10-1:0.15: driver 'usbduxsigma' failed to auto-configure device. [ 1357.294554][ T9] usbduxsigma 10-1:0.15: probe with driver usbduxsigma failed with error -22 [ 1357.361510][T29800] Bluetooth: hci3: command 0xfc11 tx timeout [ 1357.361929][ T5808] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1357.440899][T28236] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1357.620989][T28236] usb 2-1: Using ep0 maxpacket: 16 [ 1357.627319][T28236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.627359][T28236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.627378][T28236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1357.627411][T28236] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1357.627428][T28236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.703195][T28236] usb 2-1: config 0 descriptor?? [ 1359.108017][T31131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.108531][T31131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.141905][T28236] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 1359.142312][T28236] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 1359.258465][T28236] microsoft 0003:045E:07DA.004A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1359.258504][T28236] microsoft 0003:045E:07DA.004A: no inputs found [ 1359.258522][T28236] microsoft 0003:045E:07DA.004A: could not initialize ff, continuing anyway [ 1359.358746][T31154] tap0: tun_chr_ioctl cmd 1074025677 [ 1359.358997][T31154] tap0: linktype set to 780 [ 1359.400310][T29384] usb 2-1: USB disconnect, device number 21 [ 1360.103268][T28236] usb 10-1: USB disconnect, device number 5 [ 1362.650851][ T5953] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1362.820965][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 1362.826521][ T5953] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1362.826552][ T5953] usb 4-1: config 0 has no interface number 0 [ 1362.826602][ T5953] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1362.829476][ T5953] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1362.829509][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.829532][ T5953] usb 4-1: Product: syz [ 1362.829549][ T5953] usb 4-1: Manufacturer: syz [ 1362.829564][ T5953] usb 4-1: SerialNumber: syz [ 1362.893518][ T5953] usb 4-1: config 0 descriptor?? [ 1362.916346][ T5953] smsc75xx v1.0.0 [ 1363.913156][ T5953] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1363.913196][ T5953] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1363.913736][ T5953] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1363.913766][ T5953] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1363.913790][ T5953] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1363.913812][ T5953] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1363.914227][ T5953] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1364.152971][ T5953] usb 4-1: USB disconnect, device number 51 [ 1365.440852][T24470] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1366.742000][T24470] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1366.742789][T24470] usb 6-1: not running at top speed; connect to a high speed hub [ 1366.744307][T24470] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 1366.744335][T24470] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.744357][T24470] usb 6-1: config 4 has no interface number 0 [ 1366.749404][T24470] usb 6-1: string descriptor 0 read error: -22 [ 1366.749569][T24470] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1366.749599][T24470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.782307][T24470] uvcvideo 6-1:4.147: Found UVC 0.00 device (04f2:b746) [ 1366.782539][T24470] uvcvideo 6-1:4.147: No valid video chain found. [ 1366.983415][T24470] usb 6-1: USB disconnect, device number 40 [ 1367.285131][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.911087][T31309] program syz.3.11060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1373.044312][T31326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11066'. [ 1373.078590][T31326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.079048][T31326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.309960][ T8724] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1381.590912][ T8724] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1381.716941][T31397] sch_fq: defrate 0 ignored. [ 1381.743219][ T8724] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1381.743270][ T8724] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1381.743294][ T8724] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.750149][ T8724] usb 10-1: config 0 descriptor?? [ 1382.966012][ T8724] video4linux radio48: keene_cmd_main failed (-110) [ 1382.966045][ T8724] radio-keene 10-1:0.0: V4L2 device registered as radio48 [ 1383.562853][ T9] usb 10-1: USB disconnect, device number 6 [ 1387.795815][T31476] misc userio: Can't change port type on an already running userio instance [ 1391.750571][T31533] nbd2: detected capacity change from 0 to 127 [ 1391.771801][ T5808] block nbd2: Receive control failed (result -32) [ 1392.600922][ T5968] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1393.690938][ T5968] usb 4-1: Using ep0 maxpacket: 8 [ 1393.698807][ T5968] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1393.698843][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.698868][ T5968] usb 4-1: Product: syz [ 1393.698885][ T5968] usb 4-1: Manufacturer: syz [ 1393.698902][ T5968] usb 4-1: SerialNumber: syz [ 1393.705655][ T5968] usb 4-1: config 0 descriptor?? [ 1393.711981][ T5968] gspca_main: se401-2.14.0 probing 047d:5003 [ 1394.895627][ T5968] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input71 [ 1394.989833][ T5968] usb 4-1: USB disconnect, device number 52 [ 1395.084397][T31558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11147'. [ 1395.815602][T31585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11178'. [ 1395.816871][T31585] netlink: 'syz.1.11178': attribute type 15 has an invalid length. [ 1396.040867][ T9] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1396.205757][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1396.205787][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1396.205822][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1396.205840][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.262536][T31584] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1396.262821][T31584] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1396.276731][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1396.489521][ T9] usb 10-1: USB disconnect, device number 7 [ 1396.840927][ T8724] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1397.000942][ T8724] usb 2-1: Using ep0 maxpacket: 32 [ 1397.004020][ T8724] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1397.004051][ T8724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.007644][ T8724] usb 2-1: config 0 descriptor?? [ 1397.026520][ T8724] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1398.027599][T31637] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11200'. [ 1398.129993][ T8724] gspca_vc032x: reg_w err -71 [ 1398.130029][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130043][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130054][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130065][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130076][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130088][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130099][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130110][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130121][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130132][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130143][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130154][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130165][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130177][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130189][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130199][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130211][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130221][ T8724] gspca_vc032x: I2c Bus Busy Wait 00 [ 1398.130564][ T8724] gspca_vc032x: Unknown sensor... [ 1398.130659][ T8724] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1398.514661][ T8724] usb 2-1: USB disconnect, device number 23 [ 1400.767169][T31660] ubi31: attaching mtd0 [ 1400.878618][T31660] ubi31: scanning is finished [ 1400.878648][T31660] ubi31: empty MTD device detected [ 1401.433671][T31660] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1401.433702][T31660] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1401.433724][T31660] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1401.433743][T31660] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1401.433764][T31660] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1401.433783][T31660] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1401.433803][T31660] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2628718634 [ 1401.433827][T31660] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1401.507990][T31679] ubi31: background thread "ubi_bgt31d" started, PID 31679 [ 1402.040023][T31698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11226'. [ 1402.541499][T31715] ubi: mtd0 is already attached to ubi31 [ 1403.296984][T31744] kvm_intel: kvm [31743]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 1404.643291][T31755] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11253'. [ 1405.150575][T31765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11255'. [ 1406.363906][T28236] kernel write not supported for file /snd/seq (pid: 28236 comm: kworker/1:11) [ 1406.746705][T31799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11268'. [ 1409.553277][T31851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1409.553297][T31851] IPv6: NLM_F_CREATE should be set when creating new route [ 1409.553358][T31851] IPv6: NLM_F_CREATE should be set when creating new route [ 1409.553393][T31851] IPv6: NLM_F_CREATE should be set when creating new route [ 1409.554075][T31851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1409.718581][T31854] netlink: 'syz.3.11291': attribute type 3 has an invalid length. [ 1409.953563][ T5885] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1410.110844][ T5885] usb 10-1: Using ep0 maxpacket: 8 [ 1410.113639][ T5885] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1410.113674][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.161500][ T5885] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1410.161521][ T5885] pvrusb2: ********** [ 1410.161530][ T5885] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1410.161544][ T5885] pvrusb2: Important functionality might not be entirely working. [ 1410.161555][ T5885] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1410.161569][ T5885] pvrusb2: ********** [ 1410.357197][ T2360] pvrusb2: Invalid write control endpoint [ 1410.570407][ T2360] pvrusb2: Invalid write control endpoint [ 1410.570426][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1410.570439][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1410.570449][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1410.570463][ T2360] pvrusb2: Device being rendered inoperable [ 1410.616791][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1410.616860][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1410.617898][ T2360] pvrusb2: Attached sub-driver cx25840 [ 1410.617913][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1410.617925][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1410.664093][T31857] pvrusb2: Attempted to execute control transfer when device not ok [ 1410.668361][ T5885] usb 10-1: USB disconnect, device number 8 [ 1411.071928][T24668] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1411.224693][T24668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.224734][T24668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.224762][T24668] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1411.224810][T24668] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1411.224837][T24668] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.281777][T24668] usb 6-1: config 0 descriptor?? [ 1412.651831][T24668] plantronics 0003:047F:FFFF.004B: reserved main item tag 0xe [ 1412.651872][T24668] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1412.705802][T24668] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1412.775686][ T5953] usb 6-1: USB disconnect, device number 41 [ 1415.614059][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 1417.000903][ T50] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1417.230868][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 1417.234579][ T50] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.234608][ T50] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1417.239752][ T50] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 1417.239785][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.239810][ T50] usb 4-1: Product: syz [ 1417.291122][ T50] usb 4-1: Manufacturer: syz [ 1417.291148][ T50] usb 4-1: SerialNumber: syz [ 1417.388870][T32034] netlink: 'syz.1.11368': attribute type 2 has an invalid length. [ 1417.404765][ T50] usb 4-1: config 0 descriptor?? [ 1418.261714][ T5953] usb 4-1: USB disconnect, device number 53 [ 1418.401718][T32044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11371'. [ 1418.643316][T32054] ip6tnl2: entered allmulticast mode [ 1418.671159][ T6272] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1418.671492][ T6272] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1418.691073][ T50] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1419.351412][T28236] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1420.269513][ T5885] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1421.400149][T32113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11401'. [ 1421.400176][T32113] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11401'. [ 1421.400206][T32113] netlink: 'syz.9.11401': attribute type 20 has an invalid length. [ 1421.909078][ T37] audit: type=1326 audit(1429.349:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62a202b829 code=0x7ffc0000 [ 1421.909410][ T37] audit: type=1326 audit(1429.349:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62a202b829 code=0x7ffc0000 [ 1421.909771][ T37] audit: type=1326 audit(1429.349:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62a202b829 code=0x7ffc0000 [ 1421.910143][ T37] audit: type=1326 audit(1429.349:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62a202b829 code=0x7ffc0000 [ 1421.910633][ T37] audit: type=1326 audit(1429.349:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62a202b829 code=0x7ffc0000 [ 1421.971732][ T37] audit: type=1326 audit(1429.349:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a208f749 code=0x7ffc0000 [ 1421.971888][ T37] audit: type=1326 audit(1429.359:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a208f749 code=0x7ffc0000 [ 1422.541507][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1423.057339][ T37] audit: type=1326 audit(1430.499:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a208f749 code=0x7ffc0000 [ 1423.057863][ T37] audit: type=1326 audit(1430.499:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62a202b829 code=0x7ffc0000 [ 1423.058400][ T37] audit: type=1326 audit(1430.499:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32128 comm="syz.9.11410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62a202b829 code=0x7ffc0000 [ 1425.978000][T32208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11446'. [ 1427.812547][ T37] kauditd_printk_skb: 199 callbacks suppressed [ 1427.812569][ T37] audit: type=1326 audit(1435.259:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa299c3b829 code=0x7ffc0000 [ 1427.813102][ T37] audit: type=1326 audit(1435.259:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299c9f749 code=0x7ffc0000 [ 1427.814083][ T37] audit: type=1326 audit(1435.259:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa299c3b829 code=0x7ffc0000 [ 1427.814140][ T37] audit: type=1326 audit(1435.259:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299c9f749 code=0x7ffc0000 [ 1427.814192][ T37] audit: type=1326 audit(1435.259:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299c9f749 code=0x7ffc0000 [ 1427.814696][ T37] audit: type=1326 audit(1435.259:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa299c3b829 code=0x7ffc0000 [ 1427.815039][ T37] audit: type=1326 audit(1435.259:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299c9f749 code=0x7ffc0000 [ 1427.815571][ T37] audit: type=1326 audit(1435.259:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa299c3b829 code=0x7ffc0000 [ 1427.951000][ T37] audit: type=1326 audit(1435.259:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa299c3b829 code=0x7ffc0000 [ 1427.951539][ T37] audit: type=1326 audit(1435.399:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32239 comm="syz.1.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa299c3b829 code=0x7ffc0000 [ 1428.292891][T32251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11464'. [ 1428.723416][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.510835][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1429.673768][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1429.673808][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.689782][ T9] usb 6-1: config 0 descriptor?? [ 1429.735691][ T9] cp210x 6-1:0.0: cp210x converter detected [ 1429.949438][T32294] bond0: entered promiscuous mode [ 1429.949465][T32294] bond_slave_0: entered promiscuous mode [ 1429.949669][T32294] bond_slave_1: entered promiscuous mode [ 1429.991019][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1429.993327][T32294] batadv_slave_0: entered promiscuous mode [ 1429.993517][T32294] batadv_slave_0: left promiscuous mode [ 1430.049549][T32294] bond0: left promiscuous mode [ 1430.049577][T32294] bond_slave_0: left promiscuous mode [ 1430.050245][T32294] bond_slave_1: left promiscuous mode [ 1430.196481][ T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1430.229276][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1430.479870][ T9] usb 6-1: USB disconnect, device number 42 [ 1430.497503][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1430.619650][ T9] cp210x 6-1:0.0: device disconnected [ 1430.790919][T29800] Bluetooth: hci1: command 0x0406 tx timeout [ 1431.226266][T32313] program syz.5.11493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1433.036673][T32325] netlink: 47 bytes leftover after parsing attributes in process `syz.5.11498'. [ 1434.000944][ T5953] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1434.155926][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 1434.161895][ T5953] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 1434.161931][ T5953] usb 6-1: config 0 has no interface number 0 [ 1434.172139][ T5953] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1434.172276][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1434.172304][ T5953] usb 6-1: Product: syz [ 1434.172326][ T5953] usb 6-1: Manufacturer: syz [ 1434.196827][ T5953] usb 6-1: config 0 descriptor?? [ 1434.463416][T29384] usb 6-1: USB disconnect, device number 43 [ 1434.951608][ T5953] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1435.130976][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 1435.148721][ T5953] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1435.148754][ T5953] usb 2-1: config 0 has no interface number 0 [ 1435.148809][ T5953] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1435.148843][ T5953] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1435.148876][ T5953] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1435.156413][ T5953] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1435.156447][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.156469][ T5953] usb 2-1: Product: syz [ 1435.156486][ T5953] usb 2-1: Manufacturer: syz [ 1435.156516][ T5953] usb 2-1: SerialNumber: syz [ 1435.168020][ T5953] usb 2-1: config 0 descriptor?? [ 1435.169508][T32366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1435.169825][T32366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1435.381049][T32366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1435.381189][T32366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1435.440071][T32376] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1435.795982][ T5953] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1435.835171][T32383] team0: Device ip6tnl1 is of different type [ 1436.007302][ T5953] dm9601 2-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 1436.009356][ T5953] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 1436.021903][ T5953] usb 2-1: USB disconnect, device number 24 [ 1436.138928][T32391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11529'. [ 1436.640153][T32415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11541'. [ 1436.962266][ T5808] Bluetooth: hci5: unexpected cc 0x203c length: 9 > 1 [ 1436.962316][ T5808] Bluetooth: hci5: unexpected event for opcode 0x203c [ 1442.114258][T32529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11594'. [ 1444.314623][T32570] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 1444.710990][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1444.821083][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1444.980855][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1444.999439][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1444.999473][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.999495][ T9] usb 2-1: Product: syz [ 1444.999511][ T9] usb 2-1: Manufacturer: syz [ 1444.999526][ T9] usb 2-1: SerialNumber: syz [ 1445.043717][ T9] usb 2-1: config 0 descriptor?? [ 1445.049606][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1445.090918][T24498] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1445.260889][T24498] usb 6-1: Using ep0 maxpacket: 16 [ 1445.268840][T24498] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1445.268882][T24498] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1445.268923][T24498] usb 6-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1445.268949][T24498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.278231][T24498] usb 6-1: config 0 descriptor?? [ 1445.723469][T24498] steelseries 0003:1038:12C2.004C: unknown main item tag 0x0 [ 1445.723512][T24498] steelseries 0003:1038:12C2.004C: unknown main item tag 0x0 [ 1445.723541][T24498] steelseries 0003:1038:12C2.004C: unknown main item tag 0x0 [ 1445.723566][T24498] steelseries 0003:1038:12C2.004C: unknown main item tag 0x0 [ 1445.723586][T24498] steelseries 0003:1038:12C2.004C: unknown main item tag 0x0 [ 1445.879770][ T9] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1445.879879][ T9] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 1445.925257][ T9] usb 2-1: USB disconnect, device number 25 [ 1445.947781][T24668] usb 6-1: USB disconnect, device number 44 [ 1447.196294][T32621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11635'. [ 1447.325945][T32627] program syz.5.11637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1447.574127][T32634] netlink: 'syz.9.11640': attribute type 15 has an invalid length. [ 1447.628584][T32636] tap0: tun_chr_ioctl cmd 1074025677 [ 1447.628882][T32636] tap0: linktype set to 769 [ 1448.030845][T24498] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1448.199977][T24498] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1448.200012][T24498] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.200035][T24498] usb 10-1: Product: syz [ 1448.200050][T24498] usb 10-1: Manufacturer: syz [ 1448.200065][T24498] usb 10-1: SerialNumber: syz [ 1448.261079][T24498] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1448.601350][ T50] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1449.302722][T24668] usb 10-1: USB disconnect, device number 9 [ 1449.351572][T32686] bond0: entered promiscuous mode [ 1449.351598][T32686] bond_slave_0: entered promiscuous mode [ 1449.351849][T32686] bond_slave_1: entered promiscuous mode [ 1449.371017][T32686] debugfs: 'hsr1' already exists in 'hsr' [ 1449.371055][T32686] Cannot create hsr debugfs directory [ 1449.371211][T32686] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1449.372398][T32686] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1450.091473][ T50] usb 10-1: Service connection timeout for: 256 [ 1450.091556][ T50] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1450.183533][ T50] ath9k_htc: Failed to initialize the device [ 1450.587883][T24668] usb 10-1: ath9k_htc: USB layer deinitialized [ 1451.450989][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1451.610932][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1451.614012][ T9] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1451.614042][ T9] usb 4-1: config 0 has no interface number 0 [ 1451.614080][ T9] usb 4-1: config 0 interface 151 has no altsetting 0 [ 1451.616643][ T9] usb 4-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 1451.616676][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.616700][ T9] usb 4-1: Product: syz [ 1451.616718][ T9] usb 4-1: Manufacturer: syz [ 1451.616735][ T9] usb 4-1: SerialNumber: syz [ 1451.638058][ T9] usb 4-1: config 0 descriptor?? [ 1451.741432][ T9] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 1451.744069][T32745] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11692'. [ 1452.543691][T24667] usb 4-1: USB disconnect, device number 54 [ 1452.929626][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.405227][ T355] program syz.9.11727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1456.986875][ T387] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11741'. [ 1457.338557][ T397] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11747'. [ 1458.256973][ T409] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11750'. [ 1458.257009][ T409] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11750'. [ 1458.257073][ T409] macvlan0: entered allmulticast mode [ 1458.257091][ T409] veth1_vlan: entered allmulticast mode [ 1458.751887][ T37] kauditd_printk_skb: 318 callbacks suppressed [ 1458.751909][ T37] audit: type=1326 audit(1458.199:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=426 comm="syz.9.11760" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62a208f749 code=0x0 [ 1459.651112][ T5953] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1459.706907][ T465] gfs2: path_lookup on returned error -2 [ 1459.804563][ T5953] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.829687][ T5953] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.829729][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.829756][ T5953] usb 6-1: Product: syz [ 1459.829775][ T5953] usb 6-1: Manufacturer: syz [ 1459.829794][ T5953] usb 6-1: SerialNumber: syz [ 1459.905046][ T5953] usb 6-1: selecting invalid altsetting 1 [ 1460.580288][ T5953] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 1460.596419][ T5953] usb 6-1: selecting invalid altsetting 1 [ 1460.596528][ T5953] cdc_ncm 6-1:1.0: bind() failure [ 1460.627306][ T5953] usb 6-1: USB disconnect, device number 45 [ 1461.112604][ T490] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11788'. [ 1462.345757][ T531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1462.345791][ T531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1462.396689][ T531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1462.396722][ T531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.031175][ T37] audit: type=1326 audit(1462.489:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=545 comm="syz.3.11814" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6ef66f749 code=0x0 [ 1463.129332][ T555] netlink: 'syz.9.11819': attribute type 10 has an invalid length. [ 1463.183550][ T555] veth0_vlan: left promiscuous mode [ 1463.186605][ T555] veth0_vlan: entered promiscuous mode [ 1463.205634][ T555] team0: Device veth0_vlan failed to register rx_handler [ 1463.303399][ T559] veth1_macvtap: left promiscuous mode [ 1463.303434][ T559] macsec0: entered allmulticast mode [ 1463.500557][ T567] netlink: 284 bytes leftover after parsing attributes in process `syz.1.11821'. [ 1464.761872][T29384] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1464.975041][T29384] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1464.975078][T29384] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.980330][T29384] usb 10-1: config 0 descriptor?? [ 1465.012762][T29384] cp210x 10-1:0.0: cp210x converter detected [ 1465.614308][T29384] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1465.788899][T29384] usb 10-1: USB disconnect, device number 10 [ 1465.853787][T29384] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1465.971294][T29384] cp210x 10-1:0.0: device disconnected [ 1466.356188][ T625] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 1467.186734][ T652] netlink: 56 bytes leftover after parsing attributes in process `syz.9.11861'. [ 1467.901498][ T935] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1468.060872][ T935] usb 2-1: Using ep0 maxpacket: 32 [ 1468.063376][ T935] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 1468.063407][ T935] usb 2-1: config 0 has no interface number 0 [ 1468.063444][ T935] usb 2-1: config 0 interface 151 has no altsetting 0 [ 1468.068235][ T935] usb 2-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 1468.068267][ T935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.068292][ T935] usb 2-1: Product: syz [ 1468.068309][ T935] usb 2-1: Manufacturer: syz [ 1468.068326][ T935] usb 2-1: SerialNumber: syz [ 1468.092487][ T935] usb 2-1: config 0 descriptor?? [ 1468.107181][ T935] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 1468.831283][ T703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11894'. [ 1469.536503][ T935] usb 2-1: USB disconnect, device number 26 [ 1470.282952][ T715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11887'. [ 1471.564456][ T730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11897'. [ 1473.049487][ T771] __vm_enough_memory: pid: 771, comm: syz.1.11913, bytes: 11727717261312 not enough memory for the allocation [ 1473.087972][ T770] geneve2: entered promiscuous mode [ 1473.088004][ T770] geneve2: entered allmulticast mode [ 1473.109517][ T6272] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1473.109757][ T6272] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1473.109800][ T6272] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1473.109844][ T6272] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1473.702618][ T802] __vm_enough_memory: pid: 802, comm: syz.9.11927, bytes: 11727449538560 not enough memory for the allocation [ 1473.817232][ T807] program syz.9.11930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1474.792780][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1474.983378][ T846] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11947'. [ 1477.019177][ T869] netlink: 96 bytes leftover after parsing attributes in process `syz.9.11957'. [ 1478.271550][T24498] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1478.430518][T24498] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.430566][T24498] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1478.451999][T24498] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1478.452033][T24498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.452057][T24498] usb 4-1: Product: syz [ 1478.452074][T24498] usb 4-1: Manufacturer: syz [ 1478.452092][T24498] usb 4-1: SerialNumber: syz [ 1478.493273][T24498] usb 4-1: config 0 descriptor?? [ 1478.509925][T24498] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1478.542021][T24498] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1478.543023][T24498] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1478.543089][T24498] usb 4-1: media controller created [ 1478.591625][T24498] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1478.735971][T24498] DVB: Unable to find symbol tda10046_attach() [ 1478.735993][T24498] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1478.736012][T24498] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1479.181765][ T946] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11988'. [ 1479.345360][T24498] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1479.376116][T24498] usb 4-1: USB disconnect, device number 55 [ 1480.270945][ T5953] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1480.351179][ T50] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1480.422726][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 1480.427076][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.427114][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.427158][ T5953] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1480.427184][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.502370][ T5953] usb 6-1: config 0 descriptor?? [ 1480.502696][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 1480.505237][ T50] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1480.505268][ T50] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1480.505364][ T50] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.505397][ T50] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1480.514043][ T50] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1480.514078][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.514101][ T50] usb 2-1: Product: syz [ 1480.514119][ T50] usb 2-1: Manufacturer: syz [ 1480.514137][ T50] usb 2-1: SerialNumber: syz [ 1480.607132][ T5953] hub 6-1:0.0: USB hub found [ 1480.786406][ T1005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12011'. [ 1481.524703][ T5953] hub 6-1:0.0: 1 port detected [ 1481.649218][ T50] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1481.780427][ T5953] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1481.780460][ T5953] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1481.864648][ T5953] usbhid 6-1:0.0: can't add hid device: -71 [ 1481.864744][ T5953] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1481.885946][ T50] usb 2-1: USB disconnect, device number 27 [ 1481.942001][ T5953] usb 6-1: USB disconnect, device number 46 [ 1481.983260][ T50] usblp0: removed [ 1482.093914][ T1011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12014'. [ 1482.446061][ T1025] netlink: 'syz.3.12021': attribute type 13 has an invalid length. [ 1482.913963][ T1036] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12019'. [ 1483.512840][ T1025] gretap0: refused to change device tx_queue_len [ 1483.512874][ T1025] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1483.917168][ T1057] kvm: kvm [1051]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 1483.935402][ T37] audit: type=1107 audit(1483.329:1578): pid=1052 uid=0 auid=0 ses=1 subj=_ msg='' [ 1486.259750][ T1156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12072'. [ 1488.923939][ T1214] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 1489.499463][ T1223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12097'. [ 1490.159014][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1493.163196][ T1274] program syz.3.12119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1493.400877][ T935] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1493.500809][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1493.551450][ T1293] loop3: detected capacity change from 0 to 524287999 [ 1493.575296][ T935] usb 2-1: Using ep0 maxpacket: 16 [ 1493.618187][ T935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.618251][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1493.618284][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1493.618310][ T935] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1493.618338][ T935] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1493.619932][ T935] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1493.619964][ T935] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1493.619988][ T935] usb 2-1: Manufacturer: syz [ 1493.636042][ T935] usb 2-1: config 0 descriptor?? [ 1493.680943][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1493.685835][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.685877][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.685916][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1493.686037][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1493.686067][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.757952][ T9] usb 4-1: config 0 descriptor?? [ 1493.983275][ T935] rc_core: IR keymap rc-hauppauge not found [ 1493.983301][ T935] Registered IR keymap rc-empty [ 1493.983812][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.004391][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.037234][ T935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1494.094408][ T935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input72 [ 1494.118319][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.141303][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.161225][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.180864][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.211126][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.234364][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.250899][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.270883][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.299160][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.311071][ T935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1494.362216][ T935] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1494.362239][ T935] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1494.414284][ T935] usb 2-1: USB disconnect, device number 28 [ 1494.455222][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.455263][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.455294][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.455324][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.455353][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.455381][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.455412][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.455440][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.455470][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.455501][ T9] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1494.647638][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.004D/input/input73 [ 1494.695678][ T9] microsoft 0003:045E:07DA.004D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1494.740018][ T9] usb 4-1: USB disconnect, device number 56 [ 1494.958520][ T1333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12143'. [ 1494.958554][ T1333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12143'. [ 1495.314783][ T1351] netlink: 'syz.3.12151': attribute type 19 has an invalid length. [ 1495.650376][ T1362] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1496.008499][ T1375] loop5: detected capacity change from 0 to 7 [ 1496.097558][ T1381] Invalid logical block size (6) [ 1496.281223][T28236] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1496.417748][ T1397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12173'. [ 1496.431209][T28236] usb 4-1: Using ep0 maxpacket: 16 [ 1496.434020][T28236] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1496.434054][T28236] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1496.434081][T28236] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1496.434113][T28236] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1496.479636][T28236] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1496.479673][T28236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.479709][T28236] usb 4-1: Product: syz [ 1496.479727][T28236] usb 4-1: Manufacturer: syz [ 1496.479744][T28236] usb 4-1: SerialNumber: syz [ 1496.541239][ T1401] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12174'. [ 1496.642673][ T1403] loop2: detected capacity change from 0 to 7 [ 1496.658523][ T1403] Dev loop2: unable to read RDB block 7 [ 1496.658655][ T1403] loop2: AHDI p1 [ 1496.658690][ T1403] loop2: partition table partially beyond EOD, truncated [ 1496.764913][T28236] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1496.972084][T24470] usb 4-1: USB disconnect, device number 57 [ 1496.984269][T24470] usblp0: removed [ 1497.061098][ T935] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1497.287880][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.287921][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.287966][ T935] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1497.287994][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.306744][ T935] usb 6-1: config 0 descriptor?? [ 1497.552109][ T1435] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12191'. [ 1498.217535][ T935] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor [ 1498.237788][ T935] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.004E/input/input74 [ 1498.950323][ T935] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1499.261960][ T935] usb 6-1: USB disconnect, device number 47 [ 1499.960968][T24668] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1500.112876][T24668] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1500.112919][T24668] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1500.112946][T24668] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1500.114312][T24668] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1500.114345][T24668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1500.114369][T24668] usb 4-1: SerialNumber: syz [ 1500.183767][ T1466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1500.198816][T24668] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1500.217631][T24668] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 1500.420941][ T50] usb 4-1: USB disconnect, device number 58 [ 1501.511126][ T37] audit: type=1326 audit(1500.959:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1542 comm="syz.5.12243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93cfedf749 code=0x7ffc0000 [ 1501.513748][ T37] audit: type=1326 audit(1500.969:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1542 comm="syz.5.12243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93cfedf749 code=0x7ffc0000 [ 1501.517275][ T37] audit: type=1326 audit(1500.969:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1542 comm="syz.5.12243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f93cfedf749 code=0x7ffc0000 [ 1501.519315][ T37] audit: type=1326 audit(1500.969:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1542 comm="syz.5.12243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93cfedf749 code=0x0 [ 1502.242891][T28236] IPVS: starting estimator thread 0... [ 1502.247672][ T1576] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1502.336201][ T1579] IPVS: using max 7 ests per chain, 16800 per kthread [ 1504.410432][ T1676] loop8: detected capacity change from 0 to 8 [ 1504.431276][ T1676] Dev loop8: unable to read RDB block 8 [ 1504.431329][ T1676] loop8: unable to read partition table [ 1504.431581][ T1676] loop8: partition table beyond EOD, truncated [ 1504.431604][ T1676] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1506.509582][ T935] kernel write not supported for file bpf-prog (pid: 935 comm: kworker/0:2) [ 1506.520874][T24668] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1506.670808][T24668] usb 4-1: Using ep0 maxpacket: 16 [ 1506.673509][T24668] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 1506.673540][T24668] usb 4-1: config 0 has no interface number 0 [ 1506.710125][T24668] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 1506.710171][T24668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.710195][T24668] usb 4-1: Product: syz [ 1506.710213][T24668] usb 4-1: Manufacturer: syz [ 1506.710230][T24668] usb 4-1: SerialNumber: syz [ 1506.759696][T24668] usb 4-1: config 0 descriptor?? [ 1506.785922][T24668] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 1507.413083][T24668] gspca_stv06xx: vv6410 sensor detected [ 1507.703674][T24668] STV06xx 4-1:0.65: probe with driver STV06xx failed with error -71 [ 1507.712897][T24668] usb 4-1: USB disconnect, device number 59 [ 1511.475589][ T1885] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12402'. [ 1511.475633][ T1885] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12402'. [ 1511.819675][T29800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1511.848863][T29800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1511.863617][T29800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1511.868979][T29800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1511.870028][T29800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1512.692492][ T1899] chnl_net:caif_netlink_parms(): no params data found [ 1513.580010][ T1899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.597389][ T1899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.597733][ T1899] bridge_slave_0: entered allmulticast mode [ 1513.617041][ T1899] bridge_slave_0: entered promiscuous mode [ 1513.641959][ T1899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.642100][ T1899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.642423][ T1899] bridge_slave_1: entered allmulticast mode [ 1513.646700][ T1899] bridge_slave_1: entered promiscuous mode [ 1513.991030][ T5808] Bluetooth: hci1: command tx timeout [ 1514.283942][ T1899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1514.330613][ T1899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1514.783267][ T1899] team0: Port device team_slave_0 added [ 1514.805270][ T1899] team0: Port device team_slave_1 added [ 1515.200038][ T1899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.200058][ T1899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.200090][ T1899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.262610][ T1899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.262632][ T1899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.262666][ T1899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.621794][ T1899] hsr_slave_0: entered promiscuous mode [ 1515.623597][ T1899] hsr_slave_1: entered promiscuous mode [ 1515.624748][ T1899] debugfs: 'hsr0' already exists in 'hsr' [ 1515.624776][ T1899] Cannot create hsr debugfs directory [ 1516.071155][ T5808] Bluetooth: hci1: command tx timeout [ 1517.500583][ T2073] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1517.500619][ T2073] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1517.515158][ T2073] vhci_hcd vhci_hcd.0: Device attached [ 1517.645151][ T1899] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.763805][T24498] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 1517.763978][ T8724] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 1517.917356][T24498] usb 10-1: config index 0 descriptor too short (expected 65535, got 27) [ 1517.917391][T24498] usb 10-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1517.917414][T24498] usb 10-1: config 255 has an invalid descriptor of length 244, skipping remainder of the config [ 1517.917437][T24498] usb 10-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1517.917478][T24498] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1517.917513][T24498] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.161182][ T5808] Bluetooth: hci1: command tx timeout [ 1518.223102][ T2074] usb 51-1: recv xbuf, 0 [ 1518.228427][T24498] usb 10-1: string descriptor 0 read error: -71 [ 1518.239992][T19354] vhci_hcd vhci_hcd.9: stop threads [ 1518.240029][T19354] vhci_hcd vhci_hcd.9: release socket [ 1518.249500][T19354] vhci_hcd vhci_hcd.9: disconnect device [ 1518.274197][T24498] usb 10-1: USB disconnect, device number 11 [ 1518.341323][ T8724] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1518.456376][ T1899] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.856579][ T1899] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.259036][ T2121] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:512x16 (0x38414262, 11, 0, 0, 0) [ 1519.404044][ T1899] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.970755][ T2118] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1520.042354][ T2118] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1520.192320][ T1899] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1520.192811][ T2118] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1520.192943][ T2118] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1520.284263][ T1899] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1520.337499][ T2118] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1520.378118][ T1899] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1520.448671][ T1899] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1520.700439][ T2177] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12534'. [ 1521.072259][ T2191] Invalid ELF header magic: != ELF [ 1521.098298][ T1899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.138242][ T1899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.157832][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.158789][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.203510][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.203751][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.231213][ T935] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1521.390915][ T935] usb 6-1: Using ep0 maxpacket: 32 [ 1521.392875][ T935] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 1521.392905][ T935] usb 6-1: config 0 has no interface number 0 [ 1521.392956][ T935] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1521.392986][ T935] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1521.400311][ T935] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1521.400345][ T935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.400370][ T935] usb 6-1: Product: syz [ 1521.400388][ T935] usb 6-1: Manufacturer: syz [ 1521.400415][ T935] usb 6-1: SerialNumber: syz [ 1521.521144][ T935] usb 6-1: config 0 descriptor?? [ 1521.535987][ T935] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1521.670854][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 1521.860845][T28236] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1522.039876][T28236] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.039926][T28236] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1522.066221][T28236] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1522.066259][T28236] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.066283][T28236] usb 10-1: Product: syz [ 1522.066300][T28236] usb 10-1: Manufacturer: syz [ 1522.066318][T28236] usb 10-1: SerialNumber: syz [ 1522.080346][T28236] usb 10-1: config 0 descriptor?? [ 1522.127305][T28236] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1522.181308][T28236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1522.182792][T28236] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1522.182850][T28236] usb 10-1: media controller created [ 1522.231740][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 1522.248194][T28236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1522.250280][ T1899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.379257][ T935] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input76 [ 1522.523620][T28236] DVB: Unable to find symbol tda10046_attach() [ 1522.523640][T28236] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1522.523656][T28236] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1522.729183][T28236] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1522.750556][ T5953] usb 6-1: USB disconnect, device number 48 [ 1522.758492][T28236] usb 10-1: USB disconnect, device number 12 [ 1523.470088][ T1899] veth0_vlan: entered promiscuous mode [ 1523.515727][ T1899] veth1_vlan: entered promiscuous mode [ 1523.664954][ T1899] veth0_macvtap: entered promiscuous mode [ 1523.686713][ T1899] veth1_macvtap: entered promiscuous mode [ 1523.750830][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 1523.818386][ T1899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.897907][ T1899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.951764][T18737] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.951822][T18737] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.951865][T18737] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.951929][T18737] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.090826][ T935] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1524.318062][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 1524.328578][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.328616][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.328660][ T935] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1524.328686][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.370460][ T935] usb 6-1: config 0 descriptor?? [ 1524.822472][ T935] hid-steam 0003:28DE:1142.004F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1524.865538][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.865565][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.886503][ T935] hid-steam 0003:28DE:1142.004F: Steam wireless receiver connected [ 1524.957349][ T935] hid-steam 0003:28DE:1142.0050: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1525.025302][ T50] usb 6-1: USB disconnect, device number 49 [ 1525.163343][ T50] hid-steam 0003:28DE:1142.004F: Steam wireless receiver disconnected [ 1525.185604][T22972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.185629][T22972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.611256][ T935] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1525.768173][ T935] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1525.768212][ T935] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.768237][ T935] usb 10-1: Product: syz [ 1525.768254][ T935] usb 10-1: Manufacturer: syz [ 1525.768271][ T935] usb 10-1: SerialNumber: syz [ 1526.392086][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 1527.120570][ T935] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1527.120901][ T935] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1527.130808][ T935] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1527.130879][ T935] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1527.138597][ T935] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1527.236130][ T935] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1527.367452][ T935] usb 10-1: USB disconnect, device number 13 [ 1527.607125][ T2381] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1527.663536][ T2384] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1528.360847][ T935] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1528.520842][ T935] usb 6-1: Using ep0 maxpacket: 16 [ 1528.523528][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.523564][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.523590][ T935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1528.523637][ T935] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1528.523664][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.529380][ T935] usb 6-1: config 0 descriptor?? [ 1528.974940][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1528.974980][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1528.975009][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1528.975038][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1528.975067][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1528.975095][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1528.975124][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1528.975153][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1528.975182][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1528.975210][ T935] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1529.023937][ T935] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0051/input/input77 [ 1529.030808][ T935] microsoft 0003:045E:07DA.0051: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1529.254950][ T935] usb 6-1: USB disconnect, device number 50 [ 1529.501934][T24668] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1529.676858][T24668] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1529.676892][T24668] usb 9-1: config 0 has no interface number 0 [ 1529.698338][T24668] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1529.698367][T24668] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.698386][T24668] usb 9-1: Product: syz [ 1529.698397][T24668] usb 9-1: Manufacturer: syz [ 1529.698409][T24668] usb 9-1: SerialNumber: syz [ 1529.743107][T24668] usb 9-1: config 0 descriptor?? [ 1529.984852][T24668] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1530.005980][T24668] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1530.006346][T24668] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1530.006411][T24668] usb 9-1: media controller created [ 1530.112323][T24668] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1530.198198][T24668] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 1530.358062][T24668] usb 9-1: USB disconnect, device number 8 [ 1531.198665][ T37] audit: type=1326 audit(1530.649:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2522 comm="syz.8.12686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7e6f749 code=0x0 [ 1531.246372][ T2527] [U]  [ 1531.246437][ T2527] [U] K{ [ 1531.246943][ T2527] [U] T 1ŠFFˊ`GJǘGO/MC [ 1531.249476][ T2527] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1531.250389][ T2527] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1531.298263][ T2527] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1531.341764][ T2527] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1531.343195][ T2527] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1531.358933][ T2527] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1531.376334][ T2527] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1531.461378][ T2527] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1531.469268][ T2527] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1531.469523][ T2527] [U] 22Ʃ۩X?0;3U [ 1531.499314][ T2527] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1531.502781][ T2527] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1531.505786][ T2527] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1531.508730][ T2527] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1531.514419][ T2527] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1531.514518][ T2527] [U] EC [ 1531.517080][ T2527] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1531.572999][ T2526] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1531.780994][ T2544] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12692'. [ 1532.201416][ T2561] loop8: detected capacity change from 0 to 8 [ 1532.209271][ T2561] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1532.209314][ T2561] loop8: partition table partially beyond EOD, truncated [ 1532.209450][ T2561] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 1532.360793][ T935] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1532.548912][ T935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.548963][ T935] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1532.574769][ T935] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1532.574805][ T935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.574831][ T935] usb 6-1: Product: syz [ 1532.574848][ T935] usb 6-1: Manufacturer: syz [ 1532.574864][ T935] usb 6-1: SerialNumber: syz [ 1532.590110][ T935] usb 6-1: config 0 descriptor?? [ 1532.649144][ T935] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1532.693184][ T935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1532.704584][ T935] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1532.704665][ T935] usb 6-1: media controller created [ 1532.772150][ T935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1532.938803][ T935] DVB: Unable to find symbol tda10046_attach() [ 1532.938821][ T935] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1532.938832][ T935] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1533.572187][ T935] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1533.605147][ T935] usb 6-1: USB disconnect, device number 51 [ 1533.618911][ T2616] input: syz0 as /devices/virtual/input/input78 [ 1533.880796][T28236] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1534.034717][T28236] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.034749][T28236] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1534.038864][T28236] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1534.038900][T28236] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1534.038934][T28236] usb 10-1: SerialNumber: syz [ 1534.172880][ T2646] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12732'. [ 1534.326218][T28236] usb 10-1: 0:2 : does not exist [ 1534.329693][ T2650] loop8: detected capacity change from 0 to 8 [ 1534.331044][ T2650] Dev loop8: unable to read RDB block 8 [ 1534.331095][ T2650] loop8: unable to read partition table [ 1534.331341][ T2650] loop8: partition table beyond EOD, truncated [ 1534.331364][ T2650] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1534.375377][T28236] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1534.392753][T28236] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1534.410583][T28236] usb 10-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1534.432464][T28236] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1534.437773][T28236] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1534.483495][T28236] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 1534.545082][T28236] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1534.565284][T28236] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1534.570170][T28236] usb 10-1: USB disconnect, device number 14 [ 1536.234181][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1536.300788][ T935] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1536.457560][ T935] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1536.459179][ T935] usb 9-1: not running at top speed; connect to a high speed hub [ 1536.464793][ T935] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.464825][ T935] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1536.511792][ T935] usb 9-1: string descriptor 0 read error: -22 [ 1536.511968][ T935] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1536.511997][ T935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.580242][ T935] usb 9-1: 0:2 : does not exist [ 1537.437198][ T935] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1537.461111][ T935] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1537.477485][ T935] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 1537.546120][ T935] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1537.588559][ T935] usb 9-1: USB disconnect, device number 9 [ 1537.634661][ T2760] netlink: 27 bytes leftover after parsing attributes in process `syz.9.12775'. [ 1538.220902][ T935] kernel read not supported for file /input/event2 (pid: 935 comm: kworker/0:2) [ 1538.562939][ T2803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12792'. [ 1540.150786][ T935] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1540.304928][ T935] usb 10-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1540.304963][ T935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1540.305026][ T935] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.305056][ T935] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.305083][ T935] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1540.305127][ T935] usb 10-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1540.305155][ T935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.316007][ T935] usb 10-1: config 0 descriptor?? [ 1540.759901][ T935] input: HID 28bd:0909 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28BD:0909.0052/input/input79 [ 1540.798994][ T2908] input: syz1 as /devices/virtual/input/input80 [ 1540.817357][ T2908] input: failed to attach handler leds to device input80, error: -6 [ 1540.861773][ T935] uclogic 0003:28BD:0909.0052: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.9-1/input0 [ 1541.346798][ T935] usb 10-1: USB disconnect, device number 15 [ 1541.995638][ T2914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12830'. [ 1542.454053][ T935] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 1542.627840][ T935] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 1542.627875][ T935] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 1542.627898][ T935] usb 10-1: config 0 has no interface number 0 [ 1542.627952][ T935] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1542.627994][ T935] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1542.628022][ T935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.696487][ T935] usb 10-1: config 0 descriptor?? [ 1542.699595][ T2926] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1543.338486][ T935] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input81 [ 1543.682259][ C0] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1543.682356][ T935] usb 10-1: USB disconnect, device number 16 [ 1543.835698][ T2989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12869'. [ 1546.902438][ T3050] overlay: filesystem on ./file0 is read-only [ 1548.340868][T28236] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1548.513043][T28236] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.513109][T28236] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1548.513137][T28236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.546252][T28236] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1549.171100][T18699] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1549.324959][T18699] usb 10-1: Using ep0 maxpacket: 16 [ 1549.329495][T18699] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1549.329533][T18699] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1549.329580][T18699] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1549.329607][T18699] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.402478][T18699] usb 10-1: config 0 descriptor?? [ 1549.620081][T28236] stv0680 6-1:4.0: Could not get descriptor 0200 [ 1549.839083][T28236] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1549.839113][T28236] stv0680 6-1:4.0: last error: 35, command = 0x8 [ 1549.865035][T18699] kovaplus 0003:1E7D:2D50.0053: unknown main item tag 0x0 [ 1549.865077][T18699] kovaplus 0003:1E7D:2D50.0053: unknown main item tag 0x0 [ 1549.866568][T28236] usb 6-1: USB disconnect, device number 52 [ 1549.934115][T18699] kovaplus 0003:1E7D:2D50.0053: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.9-1/input0 [ 1550.223001][T18699] kovaplus 0003:1E7D:2D50.0053: couldn't init struct kovaplus_device [ 1550.223165][T18699] kovaplus 0003:1E7D:2D50.0053: couldn't install mouse [ 1550.228586][T18699] kovaplus 0003:1E7D:2D50.0053: probe with driver kovaplus failed with error -71 [ 1550.269110][T18699] usb 10-1: USB disconnect, device number 17 [ 1551.626472][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.700050][ T3210] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12974'. [ 1552.796072][ T3253] input: syz1 as /devices/virtual/input/input82 [ 1553.899196][ T3288] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13002'. [ 1554.954262][T29384] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1555.105492][T29384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.105533][T29384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.105561][T29384] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1555.105610][T29384] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1555.105638][T29384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.108882][ T3309] pim6reg1: entered promiscuous mode [ 1555.108909][ T3309] pim6reg1: entered allmulticast mode [ 1555.115796][T29384] usb 6-1: config 0 descriptor?? [ 1555.553978][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.554007][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.554028][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.554049][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.554069][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.554090][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.554110][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.554130][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.554150][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.554171][T29384] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1555.656592][T29384] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1555.815941][ T50] usb 6-1: USB disconnect, device number 53 [ 1556.149991][ T3339] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13031'. [ 1556.690900][ T50] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1556.840945][ T50] usb 10-1: Using ep0 maxpacket: 16 [ 1556.850517][ T50] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1556.850551][ T50] usb 10-1: config 0 has no interface number 0 [ 1556.850604][ T50] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.885285][ T50] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.885347][ T50] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1556.885374][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.947843][ T50] usb 10-1: config 0 descriptor?? [ 1557.390821][T18699] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1557.550045][T18699] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1557.553386][T18699] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1557.553417][T18699] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1557.553444][T18699] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1557.558947][T18699] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1557.558979][T18699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.559002][T18699] usb 6-1: Product: syz [ 1557.559020][T18699] usb 6-1: Manufacturer: syz [ 1557.559038][T18699] usb 6-1: SerialNumber: syz [ 1557.633634][ T50] uclogic 0003:28BD:0071.0055: failed retrieving string descriptor #100: -71 [ 1557.633707][ T50] uclogic 0003:28BD:0071.0055: failed retrieving pen parameters: -71 [ 1557.633730][ T50] uclogic 0003:28BD:0071.0055: pen probing failed: -71 [ 1557.633750][ T50] uclogic 0003:28BD:0071.0055: failed probing parameters: -71 [ 1557.633873][ T50] uclogic 0003:28BD:0071.0055: probe with driver uclogic failed with error -71 [ 1557.699748][ T50] usb 10-1: USB disconnect, device number 18 [ 1557.858427][ T3372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13049'. [ 1557.955306][T18699] usb 6-1: 0:2 : does not exist [ 1557.972892][ T3387] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1558.036358][T18699] usb 6-1: USB disconnect, device number 54 [ 1558.893768][T18699] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1559.061509][T18699] usb 9-1: Using ep0 maxpacket: 16 [ 1559.086025][T18699] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.086065][T18699] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.086092][T18699] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1559.086142][T18699] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1559.086170][T18699] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.106990][T18699] usb 9-1: config 0 descriptor?? [ 1559.383102][ T935] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1559.587197][T18699] input: HID 05ac:8241 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:05AC:8241.0056/input/input83 [ 1559.640882][ T5953] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1559.641162][ T935] usb 6-1: Using ep0 maxpacket: 16 [ 1559.643491][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.643526][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.643570][ T935] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1559.643597][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.660260][ T935] usb 6-1: config 0 descriptor?? [ 1559.793365][ T5953] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.793409][ T5953] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1559.800488][ T5953] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1559.800523][ T5953] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1559.800555][ T5953] usb 10-1: SerialNumber: syz [ 1559.936198][T18699] appleir 0003:05AC:8241.0056: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 1559.959584][T18699] usb 9-1: USB disconnect, device number 10 [ 1560.138356][ T5953] usb 10-1: 0:2 : does not exist [ 1560.139820][ T935] mcp2221 0003:04D8:00DD.0057: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1560.285119][ T5953] usb 10-1: USB disconnect, device number 19 [ 1560.347908][ T8724] usb 6-1: USB disconnect, device number 55 [ 1561.774494][ T3503] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13107'. [ 1562.476663][ T3530] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13120'. [ 1562.551412][ T3523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13116'. [ 1564.078558][ T3590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13144'. [ 1564.734938][T29384] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1564.888052][T29384] usb 10-1: Using ep0 maxpacket: 16 [ 1564.930127][T29384] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1564.930164][T29384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.930188][T29384] usb 10-1: Product: syz [ 1564.930205][T29384] usb 10-1: Manufacturer: syz [ 1564.930222][T29384] usb 10-1: SerialNumber: syz [ 1564.978050][T29384] usb 10-1: config 0 descriptor?? [ 1565.410897][T29384] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1565.431222][T29384] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1565.432282][T29384] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1565.432345][T29384] usb 10-1: media controller created [ 1565.486455][T29384] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1565.629863][T29384] zl10353_read_register: readreg error (reg=127, ret==0) [ 1565.629935][T29384] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1565.629950][T29384] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1565.634240][T29384] usb 10-1: USB disconnect, device number 20 [ 1565.763326][T29384] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1565.927204][ T3653] sctp: [Deprecated]: syz.5.13177 (pid 3653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1565.927204][ T3653] Use struct sctp_sack_info instead [ 1568.254286][T29384] hid_parser_main: 10 callbacks suppressed [ 1568.254315][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.254349][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.254380][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.254411][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.254441][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.254471][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.254501][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.254531][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.254562][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.254593][T29384] hid-generic 0003:0003:0000.0058: unknown main item tag 0x0 [ 1568.296231][T29384] hid-generic 0003:0003:0000.0058: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1568.951016][T29384] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1569.106646][T29384] usb 6-1: Using ep0 maxpacket: 16 [ 1569.131765][T29384] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.131799][T29384] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1569.139884][T29384] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1569.139921][T29384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.139944][T29384] usb 6-1: Product: syz [ 1569.139961][T29384] usb 6-1: Manufacturer: syz [ 1569.139977][T29384] usb 6-1: SerialNumber: syz [ 1569.462227][T29384] usb 6-1: 0:2 : does not exist [ 1569.477132][T29384] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1569.552292][T29384] usb 6-1: USB disconnect, device number 56 [ 1570.175691][T29384] kernel write not supported for file bpf-prog (pid: 29384 comm: kworker/0:1) [ 1570.213274][ T3770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13231'. [ 1571.167333][ T3819] loop8: detected capacity change from 0 to 8 [ 1571.169464][ T3819] Dev loop8: unable to read RDB block 8 [ 1571.169522][ T3819] loop8: unable to read partition table [ 1571.169763][ T3819] loop8: partition table beyond EOD, truncated [ 1571.169787][ T3819] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1572.013432][ T3856] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1572.701448][ T5953] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1572.701834][ T5953] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1572.702211][ T5953] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1572.702595][ T5953] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1572.702614][ T5953] rtc rtc0: __rtc_set_alarm: err=-22 [ 1572.711028][T24667] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1572.863779][T24667] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1572.863836][T24667] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1572.863863][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.869190][T24667] usb 6-1: config 0 descriptor?? [ 1572.887186][ T3876] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1573.408569][ T5953] hid_parser_main: 8 callbacks suppressed [ 1573.408598][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.408631][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.408663][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.408694][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.408723][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.408754][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.408783][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.408814][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.408844][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.408874][ T5953] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 1573.471730][T24667] elan 0003:04F3:0755.005A: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1573.476202][ T5953] hid-generic 0003:0004:0000.0059: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 1573.564190][ T5968] usb 6-1: USB disconnect, device number 57 [ 1574.250793][T29384] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1574.400991][T29384] usb 9-1: Using ep0 maxpacket: 16 [ 1574.405406][T29384] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.405442][T29384] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.405469][T29384] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1574.405507][T29384] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1574.405544][T29384] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1574.405570][T29384] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.485190][T29384] usb 9-1: config 0 descriptor?? [ 1574.500888][T28236] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1574.680907][T28236] usb 10-1: Using ep0 maxpacket: 32 [ 1574.702876][T28236] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.702915][T28236] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1574.702948][T28236] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1574.703005][T28236] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1574.703033][T28236] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.715168][T28236] usb 10-1: config 0 descriptor?? [ 1574.716570][ T3942] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1574.751506][T28236] hub 10-1:0.0: USB hub found [ 1574.973264][T28236] hub 10-1:0.0: 1 port detected [ 1575.206399][T29384] usb 9-1: USB disconnect, device number 11 [ 1575.836160][T24667] usb 10-1: reset high-speed USB device number 21 using dummy_hcd [ 1576.912429][T28236] usb 10-1: USB disconnect, device number 21 [ 1577.947758][ T4011] netlink: 'syz.5.13342': attribute type 12 has an invalid length. [ 1577.947787][ T4011] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13342'. [ 1577.969745][ T4013] netlink: 'syz.5.13342': attribute type 12 has an invalid length. [ 1577.969779][ T4013] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13342'. [ 1578.391232][T29384] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1578.553261][T29384] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.553299][T29384] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.553325][T29384] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1578.553374][T29384] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1578.553402][T29384] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.573001][T29384] usb 10-1: config 0 descriptor?? [ 1579.069806][T29384] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1579.999263][T29384] usb 10-1: USB disconnect, device number 22 [ 1583.064462][ T4149] sctp: [Deprecated]: syz.8.13406 (pid 4149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1583.064462][ T4149] Use struct sctp_sack_info instead [ 1585.431017][ T5968] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1585.584957][ T5968] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.584988][ T5968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1585.591963][ T5968] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1585.591998][ T5968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1585.592024][ T5968] usb 6-1: SerialNumber: syz [ 1585.845136][ T5968] usb 6-1: 0:2 : does not exist [ 1585.906247][ T5968] usb 6-1: USB disconnect, device number 58 [ 1587.126174][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13462'. [ 1587.434829][T24470] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1587.590897][T24470] usb 10-1: Using ep0 maxpacket: 16 [ 1587.764440][T24470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.764476][T24470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.764494][T24470] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1587.764528][T24470] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1587.764546][T24470] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.829350][T24470] usb 10-1: config 0 descriptor?? [ 1588.296545][ T4268] random: crng reseeded on system resumption [ 1588.410115][T24470] input: HID 0955:7214 Haptics as /devices/virtual/input/input84 [ 1588.477800][T24470] shield 0003:0955:7214.005D: Registered Thunderstrike controller [ 1588.478316][T24470] shield 0003:0955:7214.005D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1588.746798][ T50] usb 10-1: USB disconnect, device number 23 [ 1588.747685][T29384] shield 0003:0955:7214.005D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1588.747774][T29384] shield 0003:0955:7214.005D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1588.748370][T29384] shield 0003:0955:7214.005D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1588.748451][T29384] shield 0003:0955:7214.005D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1588.822849][ T50] ------------[ cut here ]------------ [ 1588.822866][ T50] workqueue: work disable count underflowed [ 1588.822881][ T50] WARNING: kernel/workqueue.c:4359 at enable_work+0x273/0x2b0, CPU#1: kworker/1:1/50 [ 1588.822942][ T50] Modules linked in: [ 1588.822968][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1588.823002][ T50] Tainted: [L]=SOFTLOCKUP [ 1588.823012][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1588.823029][ T50] Workqueue: usb_hub_wq hub_event [ 1588.823125][ T50] RIP: 0010:enable_work+0x273/0x2b0 [ 1588.823159][ T50] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 61 4c 09 cc e8 82 6d 35 00 90 0f 0b 90 e9 54 fe ff ff e8 74 6d 35 00 48 8d 3d 9d f9 52 0d <67> 48 0f b9 3a 45 31 e4 e9 67 fe ff ff e8 5b 6d 35 00 90 0f 0b 90 [ 1588.823181][ T50] RSP: 0018:ffffc90000bc7020 EFLAGS: 00010083 [ 1588.823202][ T50] RAX: ffffffff818af66c RBX: dffffc0000000000 RCX: 0000000000100000 [ 1588.823221][ T50] RDX: ffffc9001aa3f000 RSI: 000000000000817b RDI: ffffffff8eddf010 [ 1588.823238][ T50] RBP: ffffc90000bc70d8 R08: 0000000000000000 R09: 0000000000000000 [ 1588.823254][ T50] R10: dffffc0000000000 R11: ffffed1004cf5904 R12: 0000000000000000 [ 1588.823271][ T50] R13: 1ffff11004cf5903 R14: ffff8880267ac818 R15: 001fffffffc00001 [ 1588.823291][ T50] FS: 0000000000000000(0000) GS:ffff888126e01000(0000) knlGS:0000000000000000 [ 1588.823311][ T50] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1588.823328][ T50] CR2: 00007fa299cfe470 CR3: 0000000071da8000 CR4: 00000000003526f0 [ 1588.823349][ T50] Call Trace: [ 1588.823359][ T50] [ 1588.823376][ T50] ? __pfx_enable_work+0x10/0x10 [ 1588.823418][ T50] ? __cancel_work_sync+0x5c/0x110 [ 1588.823455][ T50] __cancel_work_sync+0xf7/0x110 [ 1588.823493][ T50] thermal_zone_device_unregister+0x23e/0x3f0 [ 1588.823605][ T50] power_supply_unregister+0xf9/0x140 [ 1588.823660][ T50] ? __pfx_shield_remove+0x10/0x10 [ 1588.823726][ T50] shield_remove+0x72/0x120 [ 1588.823768][ T50] hid_device_remove+0x22b/0x370 [ 1588.823847][ T50] ? __pfx_hid_device_remove+0x10/0x10 [ 1588.823886][ T50] device_release_driver_internal+0x46f/0x800 [ 1588.823954][ T50] bus_remove_device+0x355/0x450 [ 1588.824000][ T50] device_del+0x515/0x8e0 [ 1588.824038][ T50] ? __pfx_device_del+0x10/0x10 [ 1588.824069][ T50] ? rt_spin_unlock+0x150/0x200 [ 1588.824109][ T50] hid_destroy_device+0x6b/0x1b0 [ 1588.824148][ T50] usbhid_disconnect+0x9f/0xc0 [ 1588.824199][ T50] usb_unbind_interface+0x26e/0x910 [ 1588.824266][ T50] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1588.824305][ T50] device_release_driver_internal+0x4d9/0x800 [ 1588.824344][ T50] bus_remove_device+0x355/0x450 [ 1588.824389][ T50] device_del+0x515/0x8e0 [ 1588.824420][ T50] ? kobject_put+0x26d/0x570 [ 1588.824451][ T50] ? __pfx_device_del+0x10/0x10 [ 1588.824477][ T50] ? kobject_put+0x531/0x570 [ 1588.824516][ T50] usb_disable_device+0x3d4/0x8e0 [ 1588.824566][ T50] usb_disconnect+0x315/0x970 [ 1588.824606][ T50] hub_event+0x1cd9/0x4f30 [ 1588.824700][ T50] ? __pfx_hub_event+0x10/0x10 [ 1588.824732][ T50] ? process_scheduled_works+0x9ef/0x1770 [ 1588.824769][ T50] ? _raw_spin_unlock_irq+0x23/0x50 [ 1588.824792][ T50] ? process_scheduled_works+0x9ef/0x1770 [ 1588.824820][ T50] ? process_scheduled_works+0x9ef/0x1770 [ 1588.824851][ T50] process_scheduled_works+0xad1/0x1770 [ 1588.824915][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 1588.824966][ T50] worker_thread+0x8a0/0xda0 [ 1588.825027][ T50] kthread+0x711/0x8a0 [ 1588.825068][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1588.825098][ T50] ? __pfx_kthread+0x10/0x10 [ 1588.825130][ T50] ? rt_spin_unlock+0x150/0x200 [ 1588.825169][ T50] ? rt_spin_unlock+0x161/0x200 [ 1588.825200][ T50] ? __pfx_kthread+0x10/0x10 [ 1588.825237][ T50] ret_from_fork+0x599/0xb30 [ 1588.825268][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1588.825309][ T50] ? __switch_to_asm+0x39/0x70 [ 1588.825344][ T50] ? __switch_to_asm+0x33/0x70 [ 1588.825379][ T50] ? __pfx_kthread+0x10/0x10 [ 1588.825416][ T50] ret_from_fork_asm+0x1a/0x30 [ 1588.825474][ T50] [ 1588.825505][ T50] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1588.825528][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1588.825568][ T50] Tainted: [L]=SOFTLOCKUP [ 1588.825578][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1588.825595][ T50] Workqueue: usb_hub_wq hub_event [ 1588.825626][ T50] Call Trace: [ 1588.825636][ T50] [ 1588.825647][ T50] dump_stack_lvl+0x99/0x250 [ 1588.825680][ T50] ? __asan_memcpy+0x40/0x70 [ 1588.825714][ T50] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1588.825748][ T50] ? __pfx__printk+0x10/0x10 [ 1588.825789][ T50] vpanic+0x237/0x6d0 [ 1588.825824][ T50] ? __pfx_vpanic+0x10/0x10 [ 1588.825854][ T50] ? is_bpf_text_address+0x292/0x2b0 [ 1588.825886][ T50] ? is_bpf_text_address+0x26/0x2b0 [ 1588.825928][ T50] panic+0xb9/0xc0 [ 1588.825961][ T50] ? __pfx_panic+0x10/0x10 [ 1588.826015][ T50] ? ret_from_fork_asm+0x1a/0x30 [ 1588.826061][ T50] __warn+0x317/0x4b0 [ 1588.826093][ T50] ? enable_work+0x273/0x2b0 [ 1588.826129][ T50] ? enable_work+0x273/0x2b0 [ 1588.826161][ T50] __report_bug+0x288/0x500 [ 1588.826200][ T50] ? enable_work+0x273/0x2b0 [ 1588.826242][ T50] ? __pfx___report_bug+0x10/0x10 [ 1588.826277][ T50] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1588.826321][ T50] ? rcu_is_watching+0x15/0xb0 [ 1588.826366][ T50] report_bug_entry+0x19a/0x290 [ 1588.826408][ T50] ? enable_work+0x273/0x2b0 [ 1588.826439][ T50] ? enable_work+0x278/0x2b0 [ 1588.826473][ T50] handle_bug+0xca/0x200 [ 1588.826504][ T50] exc_invalid_op+0x1a/0x50 [ 1588.826534][ T50] asm_exc_invalid_op+0x1a/0x20 [ 1588.826565][ T50] RIP: 0010:enable_work+0x273/0x2b0 [ 1588.826600][ T50] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 61 4c 09 cc e8 82 6d 35 00 90 0f 0b 90 e9 54 fe ff ff e8 74 6d 35 00 48 8d 3d 9d f9 52 0d <67> 48 0f b9 3a 45 31 e4 e9 67 fe ff ff e8 5b 6d 35 00 90 0f 0b 90 [ 1588.826622][ T50] RSP: 0018:ffffc90000bc7020 EFLAGS: 00010083 [ 1588.826644][ T50] RAX: ffffffff818af66c RBX: dffffc0000000000 RCX: 0000000000100000 [ 1588.826663][ T50] RDX: ffffc9001aa3f000 RSI: 000000000000817b RDI: ffffffff8eddf010 [ 1588.826681][ T50] RBP: ffffc90000bc70d8 R08: 0000000000000000 R09: 0000000000000000 [ 1588.826698][ T50] R10: dffffc0000000000 R11: ffffed1004cf5904 R12: 0000000000000000 [ 1588.826715][ T50] R13: 1ffff11004cf5903 R14: ffff8880267ac818 R15: 001fffffffc00001 [ 1588.826744][ T50] ? enable_work+0x26c/0x2b0 [ 1588.826792][ T50] ? __pfx_enable_work+0x10/0x10 [ 1588.826834][ T50] ? __cancel_work_sync+0x5c/0x110 [ 1588.826873][ T50] __cancel_work_sync+0xf7/0x110 [ 1588.826925][ T50] thermal_zone_device_unregister+0x23e/0x3f0 [ 1588.826974][ T50] power_supply_unregister+0xf9/0x140 [ 1588.827001][ T50] ? __pfx_shield_remove+0x10/0x10 [ 1588.827038][ T50] shield_remove+0x72/0x120 [ 1588.827078][ T50] hid_device_remove+0x22b/0x370 [ 1588.827117][ T50] ? __pfx_hid_device_remove+0x10/0x10 [ 1588.827156][ T50] device_release_driver_internal+0x46f/0x800 [ 1588.827196][ T50] bus_remove_device+0x355/0x450 [ 1588.827241][ T50] device_del+0x515/0x8e0 [ 1588.827279][ T50] ? __pfx_device_del+0x10/0x10 [ 1588.827309][ T50] ? rt_spin_unlock+0x150/0x200 [ 1588.827348][ T50] hid_destroy_device+0x6b/0x1b0 [ 1588.827387][ T50] usbhid_disconnect+0x9f/0xc0 [ 1588.827417][ T50] usb_unbind_interface+0x26e/0x910 [ 1588.827461][ T50] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1588.827498][ T50] device_release_driver_internal+0x4d9/0x800 [ 1588.827536][ T50] bus_remove_device+0x355/0x450 [ 1588.827586][ T50] device_del+0x515/0x8e0 [ 1588.827616][ T50] ? kobject_put+0x26d/0x570 [ 1588.827648][ T50] ? __pfx_device_del+0x10/0x10 [ 1588.827674][ T50] ? kobject_put+0x531/0x570 [ 1588.827712][ T50] usb_disable_device+0x3d4/0x8e0 [ 1588.827757][ T50] usb_disconnect+0x315/0x970 [ 1588.827795][ T50] hub_event+0x1cd9/0x4f30 [ 1588.827891][ T50] ? __pfx_hub_event+0x10/0x10 [ 1588.827924][ T50] ? process_scheduled_works+0x9ef/0x1770 [ 1588.827961][ T50] ? _raw_spin_unlock_irq+0x23/0x50 [ 1588.827985][ T50] ? process_scheduled_works+0x9ef/0x1770 [ 1588.828013][ T50] ? process_scheduled_works+0x9ef/0x1770 [ 1588.828044][ T50] process_scheduled_works+0xad1/0x1770 [ 1588.828109][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 1588.828161][ T50] worker_thread+0x8a0/0xda0 [ 1588.828223][ T50] kthread+0x711/0x8a0 [ 1588.828264][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1588.828294][ T50] ? __pfx_kthread+0x10/0x10 [ 1588.828327][ T50] ? rt_spin_unlock+0x150/0x200 [ 1588.828367][ T50] ? rt_spin_unlock+0x161/0x200 [ 1588.828399][ T50] ? __pfx_kthread+0x10/0x10 [ 1588.828437][ T50] ret_from_fork+0x599/0xb30 [ 1588.828470][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1588.828511][ T50] ? __switch_to_asm+0x39/0x70 [ 1588.828553][ T50] ? __switch_to_asm+0x33/0x70 [ 1588.828589][ T50] ? __pfx_kthread+0x10/0x10 [ 1588.828627][ T50] ret_from_fork_asm+0x1a/0x30 [ 1588.828702][ T50] [ 1588.828990][ T50] Kernel Offset: disabled