last executing test programs: 7m54.614487786s ago: executing program 1 (id=2): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x200, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x3134da121b5383f4, 0xffff}, {0xa, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setresuid(0xee01, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) prlimit64(r5, 0x6, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c) close_range(r6, 0xffffffffffffffff, 0x0) 7m51.886131194s ago: executing program 1 (id=6): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) syz_open_dev$dri(0x0, 0x8004, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x9d50, 0x100, 0x404, 0x299}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x20000010, 0x1}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d"], 0x0) 7m49.863064383s ago: executing program 1 (id=9): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x200, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x3134da121b5383f4, 0xffff}, {0xa, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) setresuid(0xee01, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) prlimit64(r6, 0x6, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c) close_range(r7, 0xffffffffffffffff, 0x0) 7m43.174909845s ago: executing program 1 (id=10): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x16, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chroot(&(0x7f0000000000)='./file0\x00') 7m37.140862997s ago: executing program 1 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004cc0)={0x214, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1fc, 0x1, 0x0, 0x1, [@generic="1064598c3382549b51d045c198b8dd44d1d2e0638a3e330986e2a8cbce4d18bb3fe217a3ac833cef2910aeb269", @generic="2e029df8de122d4e72bdd40b4ee9f0f753b3645c6d15fefe4ee276", @typed={0x41, 0xf5, 0x0, 0x0, @binary="26b9a4c058667782000bb6861b67cf785e07f8c7e998c4b2cfc54c7ee94cd599253f951e2266b268ef916c9013e2ba277e161441e5a53fa95470f4ac0b"}, @nested={0x4, 0xe8}, @nested={0x167, 0x9f, 0x0, 0x1, [@nested={0x8, 0x2f, 0x0, 0x1, [@nested={0x4, 0x159}]}, @generic="c2ddcd436c46840ffd91109eace01481647c839584490a447e6b08cd79893d2121fbcb965dad9e2dfed8c5d5d60b4cb48ac25c0b514b7e1444cf8eb4638b0cc963534bf3e1c8ea089fea4e834a529e7919ec05082cf59b4750fa1118dfdd5fc6c7617c5140d0791588a5a39358c9b76d19ae31d6636e629cdfba49960af0aab08f02d1a9b4ea5b19c67e386800ec019399c1187dfdca3a897194be19559a47836da931da4226a49554d536a761e887b8a18077ff923c84dfe8e034e85ded43b198688066bceb755eced189756dc79964b099f531e5", @generic="ce583e5be546fe79fe2ebcd90771ebe2b0a85bdc9e96458cf9dfa8ef23ec656b651987bf4865e7e85a3eeb7a2984079fe9b8f37158ffecb3786c17a5f5c98f6612d8eebca4859ec3b0a224552dd311943724ff00a62cf5fa6ee8d4bb39dcfa85b6db0b8fb83c39528fc5164ddebdd6f0b97736a5662515a1ff6be7a7993af7152a61", @nested={0x4, 0xb5}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 7m36.471306769s ago: executing program 1 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x20000080) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 7m21.222919951s ago: executing program 32 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x20000080) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 7m11.239100797s ago: executing program 2 (id=45): creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "095e345dc9d01effffffffffff00"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) 7m9.549251321s ago: executing program 3 (id=49): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) syz_open_dev$dri(0x0, 0x8004, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x9d50, 0x100, 0x404, 0x299}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x20000010, 0x1}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 7m4.974557457s ago: executing program 3 (id=51): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m4.29885121s ago: executing program 2 (id=52): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x2, 0x9, 0x101, 0x0, 0x0, {0xe, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x200080c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x3d0, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2, 0xfffffffd}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x517c}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8c9bb2c99cbb9eba0b411ea0fd860ea12482949be3e805ef9e7e50d3efc16dba70"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "63ec15cacc71a55f952537613695907634cf79e43e3401423bb76d6f1768e5be3b488510"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "243999436a67f18ad222adedecc1176e1b99cb64099f22bb1c0133d0675bb049d30be3"}}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "f615080b60b2ed62e7177f87a442a1fc8b9f12dd51f40c74a1f1debbcb4ad2bf57b5b1eea74a57f0f608c5ae198726f1cb8177dd4cf6c1c5a1959ef2492d8571ecf41c8e2f36f9bfb762bbf50f6782a0304603d561592d5fa180c66eaf25313edead8d37910897ad5a94e9"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7e43, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xdf}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4f, 0x3, "d0eb6419790ea373e1e41da5eb8e6f97b909987254446986d39286efb1b95fba2c81c44056c176acf92ff75beb5ce20c37892ee87c76f267516aad030874fde873129554f118549bee298d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8f55102e518b4ec5fcb0c27700d9daaca2433304a52a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8884f07192f38ede518bbf674d1e96cf24058f275549"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "9ead504b25ed3b14f28e3aa605845939832f1278fe07"}}]}, @TIPC_NLA_NODE={0x4}]}, 0x3d0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 7m3.552337904s ago: executing program 3 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 6m59.594505789s ago: executing program 2 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x0, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7, 0xffffffffffffffff], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m58.828645327s ago: executing program 2 (id=59): getrusage(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000600)={'broute\x00', 0x0, 0x4, 0x44, [0x49, 0x80000000, 0x9, 0x716, 0x1, 0x2], 0x9, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)=""/68}, &(0x7f0000000280)=0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 6m55.942781582s ago: executing program 2 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x16, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 6m53.75345071s ago: executing program 3 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x16, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 6m47.902757252s ago: executing program 3 (id=69): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f00000009c0)={0x80, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 6m43.274280219s ago: executing program 3 (id=75): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') pipe2$watch_queue(&(0x7f0000000100), 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x80000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r5, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendto$inet(r0, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000002c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x6c}}, 0x0) 6m42.135496072s ago: executing program 2 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYBLOB="d17040ac9241ace1f29bfa9e53aec33ca78039b55c3d4593734e12c6e2ff117523c3c43a36fa644a829623d09216a5c8b6100dda10c04d0d0951c34f36ea83e2f12873f99e4d639c62ab", @ANYRES8=r0, @ANYBLOB, @ANYRES8=r2, @ANYRES32=r2, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c890}, 0xc081) bind$inet6(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 6m27.623842829s ago: executing program 33 (id=75): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') pipe2$watch_queue(&(0x7f0000000100), 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x80000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r5, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendto$inet(r0, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000002c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x6c}}, 0x0) 6m25.141491125s ago: executing program 34 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYBLOB="d17040ac9241ace1f29bfa9e53aec33ca78039b55c3d4593734e12c6e2ff117523c3c43a36fa644a829623d09216a5c8b6100dda10c04d0d0951c34f36ea83e2f12873f99e4d639c62ab", @ANYRES8=r0, @ANYBLOB, @ANYRES8=r2, @ANYRES32=r2, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c890}, 0xc081) bind$inet6(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 1m4.811108175s ago: executing program 5 (id=551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008008) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x100002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 59.052567297s ago: executing program 5 (id=555): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x150, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 58.639862936s ago: executing program 5 (id=558): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x800, 0x5ab4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ptrace$getsig(0x4202, 0x0, 0x20000000000000b, &(0x7f0000000440)) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) flock(0xffffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f", @ANYBLOB="d317ef"], 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 54.721437529s ago: executing program 5 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x2001}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) timerfd_create(0x8, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x4, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1409, 0x1}, 0x10}}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 50.708279777s ago: executing program 5 (id=584): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) writev(r6, &(0x7f00000005c0)=[{&(0x7f00000004c0)='F', 0x1}], 0x1) 48.768745664s ago: executing program 5 (id=586): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x30048004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setpriority(0x2, 0x0, 0x18000000000) syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 35.677946495s ago: executing program 7 (id=605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x2001}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) timerfd_create(0x8, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x4, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1409, 0x1}, 0x10}}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 33.0336332s ago: executing program 35 (id=586): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x30048004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setpriority(0x2, 0x0, 0x18000000000) syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 32.277959885s ago: executing program 7 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa679e0814289474b}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 30.413220807s ago: executing program 7 (id=616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xffffffff}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x58, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0xa07, @private2, 0x60}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}]}, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYBLOB=',wfd', @ANYRESHEX]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 25.704078334s ago: executing program 7 (id=627): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 22.447193755s ago: executing program 7 (id=632): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x89, 0x0, @private, @private=0xa010101}}}}}}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 15.797468848s ago: executing program 7 (id=639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640", @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14000) 14.241126219s ago: executing program 6 (id=641): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.475517505s ago: executing program 6 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, &(0x7f0000000240), 0xfdef) 9.473751065s ago: executing program 4 (id=648): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, &(0x7f0000000040)="15", &(0x7f0000000080)=""/34}, 0x20) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) pipe(&(0x7f0000000200)) 7.727043689s ago: executing program 6 (id=649): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0x14}, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0xe0}, 0x0}) 7.434844035s ago: executing program 4 (id=650): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc417", 0xb}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118", 0xbc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000a00)="a7c652df859ed276", 0x8}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af9", 0x86}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.036409362s ago: executing program 4 (id=652): r0 = epoll_create1(0x80000) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014}) close_range(r3, r4, 0x0) 6.380285253s ago: executing program 4 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, &(0x7f0000000240), 0xfdef) 5.042052631s ago: executing program 6 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000300)="fb55841f209647ba0c", 0x9}, {0x0}], 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x0, 0x0) 5.008805871s ago: executing program 4 (id=655): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x89, 0x0, @private, @private=0xa010101}}}}}}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) 4.995546122s ago: executing program 0 (id=656): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x1}) 4.616932652s ago: executing program 0 (id=657): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 3.770751383s ago: executing program 6 (id=658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(r0, 0x1, &(0x7f0000000180)={0x9, 0x9}, &(0x7f00000001c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3.712468507s ago: executing program 0 (id=659): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563b, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xffffffffffffffff, 0x24020000) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000e994) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x8001) 2.872262833s ago: executing program 0 (id=660): r0 = socket(0x10, 0x803, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0xf) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket(0x28, 0x800, 0x3ffffc) write(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, 0x0) 1.265779766s ago: executing program 0 (id=661): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) clock_gettime(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001680)='ns/time\x00') 230.942538ms ago: executing program 36 (id=639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640", @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14000) 199.691895ms ago: executing program 0 (id=663): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000001000020", 0x1e}], 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x1}}, 0x2e) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) 76.227849ms ago: executing program 4 (id=664): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 6 (id=665): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.709867][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.725503][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.746003][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.768347][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.784925][ T13] bond0 (unregistering): Released all slaves [ 386.849408][ T5878] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 386.849428][ T5878] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 386.931967][ T7354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.937233][ T5878] usb 5-1: USB disconnect, device number 10 [ 387.297216][ T7354] team0: Port device team_slave_0 added [ 387.412435][ T13] hsr_slave_0: left promiscuous mode [ 387.433706][ T13] hsr_slave_1: left promiscuous mode [ 387.434494][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.504434][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.522156][ T5795] Bluetooth: hci3: command tx timeout [ 387.682424][ T5795] Bluetooth: hci0: command tx timeout [ 387.852183][ T6205] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 388.012290][ T6205] usb 5-1: Using ep0 maxpacket: 16 [ 388.014586][ T6205] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 388.014644][ T6205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.014672][ T6205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 388.014700][ T6205] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 388.014724][ T6205] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.016204][ T6205] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 388.016231][ T6205] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 388.016252][ T6205] usb 5-1: Manufacturer: syz [ 388.022962][ T6205] usb 5-1: config 0 descriptor?? [ 388.392362][ T6205] rc_core: IR keymap rc-hauppauge not found [ 388.392387][ T6205] Registered IR keymap rc-empty [ 388.392830][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.427145][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.450572][ T6205] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 388.467587][ T6205] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 388.524843][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.553049][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.572564][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.592651][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.612665][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.632647][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.669549][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.683448][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.719664][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.796121][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 388.815874][ T6205] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 388.815893][ T6205] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 388.850052][ T6205] usb 5-1: USB disconnect, device number 11 [ 389.048797][ T13] team0 (unregistering): Port device team_slave_1 removed [ 389.363303][ T13] team0 (unregistering): Port device team_slave_0 removed [ 390.412823][ T5795] Bluetooth: hci3: command tx timeout [ 392.910172][ T5795] Bluetooth: hci3: command tx timeout [ 394.094150][ T7354] team0: Port device team_slave_1 added [ 394.647571][ T7386] chnl_net:caif_netlink_parms(): no params data found [ 394.982238][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.982253][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.982273][ T7354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.103218][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.103233][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.103254][ T7354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.421657][ T7354] hsr_slave_0: entered promiscuous mode [ 397.425274][ T7354] hsr_slave_1: entered promiscuous mode [ 397.427833][ T7354] debugfs: 'hsr0' already exists in 'hsr' [ 397.427906][ T7354] Cannot create hsr debugfs directory [ 397.702745][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.702909][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.703207][ T7386] bridge_slave_0: entered allmulticast mode [ 397.705189][ T7386] bridge_slave_0: entered promiscuous mode [ 397.792370][ T7406] chnl_net:caif_netlink_parms(): no params data found [ 397.812658][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.812746][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.812942][ T7386] bridge_slave_1: entered allmulticast mode [ 397.815042][ T7386] bridge_slave_1: entered promiscuous mode [ 398.400348][ T7386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.620356][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.354667][ T7386] team0: Port device team_slave_0 added [ 401.519965][ T7386] team0: Port device team_slave_1 added [ 401.552803][ T6205] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 401.705425][ T6205] usb 1-1: Using ep0 maxpacket: 16 [ 401.753159][ T6205] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 401.753224][ T6205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.753254][ T6205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 401.753279][ T6205] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 401.753305][ T6205] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.754568][ T6205] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 401.754597][ T6205] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 401.754612][ T6205] usb 1-1: Manufacturer: syz [ 401.805271][ T6205] usb 1-1: config 0 descriptor?? [ 401.903949][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.904195][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.904395][ T7406] bridge_slave_0: entered allmulticast mode [ 401.945507][ T7406] bridge_slave_0: entered promiscuous mode [ 402.082416][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.082576][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.082819][ T7406] bridge_slave_1: entered allmulticast mode [ 402.116169][ T7406] bridge_slave_1: entered promiscuous mode [ 402.190491][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.190511][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.190540][ T7386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.292170][ T6205] rc_core: IR keymap rc-hauppauge not found [ 402.292194][ T6205] Registered IR keymap rc-empty [ 402.385479][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.402575][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.423851][ T6205] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 402.428623][ T6205] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 402.470717][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.486383][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.502798][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.525840][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.542588][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.562739][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.582847][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.602558][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.607209][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.607227][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.607657][ T7386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.623316][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.642586][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 402.769612][ T6205] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 402.769642][ T6205] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 402.854983][ T6205] usb 1-1: USB disconnect, device number 18 [ 403.165620][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.305911][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.712382][ T6205] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 405.835088][ T7406] team0: Port device team_slave_0 added [ 405.846428][ T7386] hsr_slave_0: entered promiscuous mode [ 405.847894][ T7386] hsr_slave_1: entered promiscuous mode [ 405.848958][ T7386] debugfs: 'hsr0' already exists in 'hsr' [ 405.848983][ T7386] Cannot create hsr debugfs directory [ 405.932210][ T6205] usb 5-1: Using ep0 maxpacket: 16 [ 405.937264][ T6205] usb 5-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 405.937330][ T6205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.937351][ T6205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 405.937371][ T6205] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 405.937388][ T6205] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.938590][ T6205] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 405.938624][ T6205] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 405.938640][ T6205] usb 5-1: Manufacturer: syz [ 406.032875][ T6205] usb 5-1: config 0 descriptor?? [ 406.459921][ T7406] team0: Port device team_slave_1 added [ 406.482363][ T6205] rc_core: IR keymap rc-hauppauge not found [ 406.482387][ T6205] Registered IR keymap rc-empty [ 406.482877][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.502551][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.523502][ T6205] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 406.525961][ T6205] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 406.530365][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.567377][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.583324][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.604979][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.623939][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.642837][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.662875][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.682197][ T5856] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 406.685602][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.705716][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.723028][ T6205] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 406.766315][ T6205] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 406.766335][ T6205] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 406.803313][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.803333][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.803360][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.812360][ T6205] usb 5-1: USB disconnect, device number 12 [ 406.844711][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 406.875610][ T5856] usb 1-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 406.875670][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.875700][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 406.875728][ T5856] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 406.875752][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.892395][ T5856] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 406.892481][ T5856] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 406.892541][ T5856] usb 1-1: Manufacturer: syz [ 406.915066][ T5856] usb 1-1: config 0 descriptor?? [ 407.232243][ T5856] rc_core: IR keymap rc-hauppauge not found [ 407.232268][ T5856] Registered IR keymap rc-empty [ 407.232819][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.256308][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.273404][ T5856] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 407.279638][ T5856] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 407.309527][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.311901][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.311921][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.311952][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.322681][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.345341][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.370897][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.399261][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.413087][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.436330][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.456083][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.475950][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.494890][ T5856] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 407.558382][ T5856] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 407.558447][ T5856] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 407.627594][ T5856] usb 1-1: USB disconnect, device number 19 [ 408.194567][ T7406] hsr_slave_0: entered promiscuous mode [ 408.222781][ T7406] hsr_slave_1: entered promiscuous mode [ 408.225249][ T7406] debugfs: 'hsr0' already exists in 'hsr' [ 408.225275][ T7406] Cannot create hsr debugfs directory [ 410.232378][ T5965] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 410.233021][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 410.372621][ T5965] usb 5-1: device descriptor read/64, error -32 [ 410.698504][ T5965] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 411.009274][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 411.352325][ T5965] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 411.352398][ T5965] usb 5-1: can't read configurations, error -61 [ 411.356624][ T5965] usb usb5-port1: attempt power cycle [ 411.822872][ T5965] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 411.973144][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 411.996029][ T5965] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 411.996080][ T5965] usb 5-1: can't read configurations, error -61 [ 412.172954][ T5965] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 412.334334][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 412.354267][ T5965] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 412.354341][ T5965] usb 5-1: can't read configurations, error -61 [ 412.355765][ T5965] usb usb5-port1: unable to enumerate USB device [ 414.781681][ T7354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 414.874570][ T7354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 414.965189][ T7354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 415.148132][ T7354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 415.641069][ T7575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.180351][ T7354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.192168][ T5875] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 418.284232][ T7354] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.331859][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.331967][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.344068][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 418.357549][ T5875] usb 1-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 418.357609][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.357638][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 418.357667][ T5875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 418.357693][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.359502][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 418.359530][ T5875] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 418.359550][ T5875] usb 1-1: Manufacturer: syz [ 418.460027][ T5875] usb 1-1: config 0 descriptor?? [ 418.693614][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.693761][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.892691][ T5875] rc_core: IR keymap rc-hauppauge not found [ 418.892714][ T5875] Registered IR keymap rc-empty [ 418.893186][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 418.924271][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 418.945702][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 418.947833][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 418.992775][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.013152][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.044116][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.073769][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.094179][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.113590][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.132762][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.177633][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.195812][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.212563][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 419.257438][ T5875] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 419.257459][ T5875] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 419.304466][ T5875] usb 1-1: USB disconnect, device number 20 [ 419.338575][ T13] bridge_slave_1: left allmulticast mode [ 419.338608][ T13] bridge_slave_1: left promiscuous mode [ 419.338887][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.425091][ T13] bridge_slave_0: left allmulticast mode [ 419.425126][ T13] bridge_slave_0: left promiscuous mode [ 419.425426][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.517611][ T13] bridge_slave_1: left allmulticast mode [ 419.517642][ T13] bridge_slave_1: left promiscuous mode [ 419.517902][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.620131][ T13] bridge_slave_0: left allmulticast mode [ 419.620165][ T13] bridge_slave_0: left promiscuous mode [ 419.620441][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.982244][ T5878] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 420.312120][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 420.314558][ T5878] usb 5-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 420.314616][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.314646][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 420.314674][ T5878] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 420.314699][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.316243][ T5878] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 420.316273][ T5878] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 420.316295][ T5878] usb 5-1: Manufacturer: syz [ 420.416230][ T5878] usb 5-1: config 0 descriptor?? [ 420.862248][ T5878] rc_core: IR keymap rc-hauppauge not found [ 420.862270][ T5878] Registered IR keymap rc-empty [ 420.869364][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 420.882600][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 420.917875][ T5878] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 420.946792][ T5878] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 420.971961][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 420.993340][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 421.018750][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 421.033782][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 421.052925][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 421.106504][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 421.130677][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 421.142841][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 421.152343][ T5875] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 421.162576][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 421.211173][ T5878] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 421.246205][ T5878] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 421.246231][ T5878] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 421.297397][ T5878] usb 5-1: USB disconnect, device number 17 [ 421.302883][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 421.309468][ T5875] usb 1-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 421.309630][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 421.309705][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 421.309799][ T5875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 421.309884][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.360646][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 421.360738][ T5875] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 421.360792][ T5875] usb 1-1: Manufacturer: syz [ 421.401728][ T5875] usb 1-1: config 0 descriptor?? [ 421.512821][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.640625][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.744233][ T13] bond0 (unregistering): Released all slaves [ 421.802179][ T5875] rc_core: IR keymap rc-hauppauge not found [ 421.802201][ T5875] Registered IR keymap rc-empty [ 421.802673][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 421.822964][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 421.844074][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 421.905793][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 421.926863][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 421.980195][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 421.995872][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 422.012513][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 422.033236][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 422.052504][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 422.072581][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 422.092589][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 422.112501][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 422.132630][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 422.194166][ T5875] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 422.194187][ T5875] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 422.223102][ T5875] usb 1-1: USB disconnect, device number 21 [ 422.442903][ T5878] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 422.634977][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 422.638814][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.667436][ T5878] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 422.667466][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.667481][ T5878] usb 5-1: Product: syz [ 422.667492][ T5878] usb 5-1: Manufacturer: syz [ 422.667503][ T5878] usb 5-1: SerialNumber: syz [ 422.671475][ T5878] usb 5-1: config 0 descriptor?? [ 422.823096][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.990615][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.066672][ T13] bond0 (unregistering): Released all slaves [ 423.156620][ T5878] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 423.335933][ T7623] ntfs3(nullb0): Primary boot signature is not NTFS. [ 423.353188][ T5878] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 423.353625][ T5878] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 423.360655][ T7623] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 423.440740][ T5878] usb 5-1: USB disconnect, device number 18 [ 424.152219][ T6205] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 424.152637][ T13] hsr_slave_0: left promiscuous mode [ 424.215164][ T13] hsr_slave_1: left promiscuous mode [ 424.216182][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.270313][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.312195][ T6205] usb 1-1: Using ep0 maxpacket: 32 [ 424.332568][ T6205] usb 1-1: config 0 interface 0 has no altsetting 0 [ 424.362200][ T6205] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 424.362233][ T6205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.362257][ T6205] usb 1-1: Product: syz [ 424.362268][ T6205] usb 1-1: Manufacturer: syz [ 424.362278][ T6205] usb 1-1: SerialNumber: syz [ 424.405899][ T6205] usb 1-1: config 0 descriptor?? [ 424.492509][ T13] hsr_slave_0: left promiscuous mode [ 424.532347][ T13] hsr_slave_1: left promiscuous mode [ 424.534820][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.784118][ T6205] gs_usb 1-1:0.0: Couldn't send data format (err=-110) [ 425.784151][ T6205] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 425.826636][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.249947][ T10] usb 1-1: USB disconnect, device number 22 [ 426.945501][ T13] team0 (unregistering): Port device team_slave_1 removed [ 428.077914][ T7648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.125925][ T13] team0 (unregistering): Port device team_slave_0 removed [ 428.150929][ T7650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.002319][ T5875] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 430.152485][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 430.154860][ T5875] usb 1-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 430.154919][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.154949][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 430.154977][ T5875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 430.155002][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.156555][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 430.156584][ T5875] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 430.156605][ T5875] usb 1-1: Manufacturer: syz [ 430.288959][ T5875] usb 1-1: config 0 descriptor?? [ 430.672206][ T5875] rc_core: IR keymap rc-hauppauge not found [ 430.672229][ T5875] Registered IR keymap rc-empty [ 430.672708][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.694033][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.723895][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 430.727758][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 430.750794][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.772700][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.802584][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.822658][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.852518][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.882435][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.902540][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.932610][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.962505][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 430.982487][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 431.021539][ T5875] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 431.021567][ T5875] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 431.082663][ T5875] usb 1-1: USB disconnect, device number 23 [ 433.925788][ T13] team0 (unregistering): Port device team_slave_1 removed [ 433.942300][ T5878] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 434.108166][ T5878] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 434.108199][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.108220][ T5878] usb 1-1: Product: syz [ 434.108242][ T5878] usb 1-1: Manufacturer: syz [ 434.108257][ T5878] usb 1-1: SerialNumber: syz [ 434.145073][ T5878] usb 1-1: config 0 descriptor?? [ 434.192949][ T13] team0 (unregistering): Port device team_slave_0 removed [ 434.359618][ T5878] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.722347][ T5878] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 436.760779][ T5878] usb 1-1: USB disconnect, device number 24 [ 436.935452][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 436.971692][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.981768][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 436.993913][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.011003][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.602950][ T5875] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 437.762944][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 437.778507][ T5875] usb 1-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 437.778548][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 437.778569][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 437.778588][ T5875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 437.778605][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.798417][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 437.798440][ T5875] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 437.798455][ T5875] usb 1-1: Manufacturer: syz [ 437.830220][ T5875] usb 1-1: config 0 descriptor?? [ 439.135636][ T5795] Bluetooth: hci5: command tx timeout [ 439.458482][ T5875] rc_core: IR keymap rc-hauppauge not found [ 439.458504][ T5875] Registered IR keymap rc-empty [ 439.458914][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.474339][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.509786][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 439.536168][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28 [ 439.580126][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.593000][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.612568][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.636117][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.652503][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.672525][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.692499][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.712508][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.733469][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.758569][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 439.799841][ T5875] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 439.799870][ T5875] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 439.922689][ T5878] usb 1-1: USB disconnect, device number 25 [ 440.301624][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 440.316802][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 440.318684][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 440.319819][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 440.340268][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 440.917021][ T7687] chnl_net:caif_netlink_parms(): no params data found [ 441.202371][ T5795] Bluetooth: hci5: command tx timeout [ 442.402233][ T5795] Bluetooth: hci2: command tx timeout [ 443.109555][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.109733][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.109927][ T7687] bridge_slave_0: entered allmulticast mode [ 443.111800][ T7687] bridge_slave_0: entered promiscuous mode [ 443.282647][ T5795] Bluetooth: hci5: command tx timeout [ 443.403840][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.403936][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.404139][ T7687] bridge_slave_1: entered allmulticast mode [ 443.408141][ T7687] bridge_slave_1: entered promiscuous mode [ 443.641184][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.667949][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 443.671327][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 443.706725][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.719307][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.034111][ T7687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.438301][ T7687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.482163][ T5795] Bluetooth: hci2: command tx timeout [ 444.942209][ T44] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 445.124389][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 445.131168][ T44] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 445.131206][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.131221][ T44] usb 1-1: Product: syz [ 445.131232][ T44] usb 1-1: Manufacturer: syz [ 445.131242][ T44] usb 1-1: SerialNumber: syz [ 445.184153][ T44] usb 1-1: config 0 descriptor?? [ 445.261523][ T44] gspca_main: se401-2.14.0 probing 047d:5003 [ 445.372830][ T5795] Bluetooth: hci5: command tx timeout [ 445.401199][ T7687] team0: Port device team_slave_0 added [ 445.453408][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.455768][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.655651][ T7687] team0: Port device team_slave_1 added [ 445.660805][ T44] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 445.660899][ T44] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 445.707820][ T44] usb 1-1: USB disconnect, device number 26 [ 445.842233][ T5795] Bluetooth: hci0: command tx timeout [ 446.267823][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.267838][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.267860][ T7687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.565043][ T5795] Bluetooth: hci2: command tx timeout [ 447.134917][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.134931][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.134953][ T7687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.289998][ T7699] chnl_net:caif_netlink_parms(): no params data found [ 447.763548][ T7687] hsr_slave_0: entered promiscuous mode [ 447.776628][ T7687] hsr_slave_1: entered promiscuous mode [ 447.779428][ T7687] debugfs: 'hsr0' already exists in 'hsr' [ 447.779502][ T7687] Cannot create hsr debugfs directory [ 447.922319][ T5795] Bluetooth: hci0: command tx timeout [ 448.043854][ T13] bridge_slave_1: left allmulticast mode [ 448.043892][ T13] bridge_slave_1: left promiscuous mode [ 448.044150][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.105375][ T13] bridge_slave_0: left allmulticast mode [ 448.105400][ T13] bridge_slave_0: left promiscuous mode [ 448.105582][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.646205][ T5795] Bluetooth: hci2: command tx timeout [ 448.889884][ T7749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.116370][ T5795] Bluetooth: hci0: command tx timeout [ 450.992268][ T5875] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 451.142130][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 451.148005][ T5875] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 451.148039][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.148062][ T5875] usb 1-1: Product: syz [ 451.148077][ T5875] usb 1-1: Manufacturer: syz [ 451.148093][ T5875] usb 1-1: SerialNumber: syz [ 451.190895][ T5875] usb 1-1: config 0 descriptor?? [ 451.218955][ T5875] gspca_main: se401-2.14.0 probing 047d:5003 [ 451.343058][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.595330][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.930367][ T13] bond0 (unregistering): Released all slaves [ 451.951660][ T5875] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 451.951776][ T5875] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 451.975328][ T5875] usb 1-1: USB disconnect, device number 27 [ 452.164875][ T5795] Bluetooth: hci0: command tx timeout [ 452.423147][ T13] hsr_slave_0: left promiscuous mode [ 452.442358][ T13] hsr_slave_1: left promiscuous mode [ 452.443327][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.490507][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.862223][ T5875] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 453.022281][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 453.041812][ T5875] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 453.041872][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.041895][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 453.041915][ T5875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 453.041932][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.092173][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 453.092205][ T5875] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 453.092226][ T5875] usb 1-1: Manufacturer: syz [ 453.154963][ T5875] usb 1-1: config 0 descriptor?? [ 453.432258][ T5875] rc_core: IR keymap rc-hauppauge not found [ 453.432283][ T5875] Registered IR keymap rc-empty [ 453.432782][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.469902][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.483763][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 453.486822][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 453.521158][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.532517][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.552882][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.572653][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.592970][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.612752][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.632696][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.659759][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.672530][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.702579][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 453.735723][ T5875] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 453.735752][ T5875] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 453.830764][ T5875] usb 1-1: USB disconnect, device number 28 [ 453.844139][ T13] team0 (unregistering): Port device team_slave_1 removed [ 454.497005][ T7806] __vm_enough_memory: pid: 7806, comm: syz.4.438, bytes: 4503599627366400 not enough memory for the allocation [ 454.713060][ T13] team0 (unregistering): Port device team_slave_0 removed [ 455.133228][ T7814] syz.0.441 (7814) used greatest stack depth: 18496 bytes left [ 456.072694][ T44] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 456.237139][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 456.239399][ T44] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 456.239557][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.239593][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 456.239621][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 456.239647][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.241032][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 456.241066][ T44] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 456.241088][ T44] usb 1-1: Manufacturer: syz [ 456.330056][ T44] usb 1-1: config 0 descriptor?? [ 456.632169][ T44] rc_core: IR keymap rc-hauppauge not found [ 456.632192][ T44] Registered IR keymap rc-empty [ 456.632687][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.663846][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.683842][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 456.687440][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 456.732443][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.753549][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.773205][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.792449][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.813158][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.832526][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.852702][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.872752][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.892533][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.935006][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.965466][ T44] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 456.965493][ T44] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 457.018532][ T44] usb 1-1: USB disconnect, device number 29 [ 457.517619][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.520645][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.520904][ T7699] bridge_slave_0: entered allmulticast mode [ 457.554706][ T7699] bridge_slave_0: entered promiscuous mode [ 457.583136][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.583328][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.583536][ T7699] bridge_slave_1: entered allmulticast mode [ 457.586542][ T7699] bridge_slave_1: entered promiscuous mode [ 457.881041][ T7699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.026870][ T7699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.027304][ T7735] chnl_net:caif_netlink_parms(): no params data found [ 458.750619][ T6205] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 458.959498][ T6205] usb 1-1: Using ep0 maxpacket: 16 [ 459.181649][ T6205] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 459.181712][ T6205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.181734][ T6205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 459.181753][ T6205] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 459.181771][ T6205] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.183183][ T6205] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 459.183214][ T6205] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 459.183229][ T6205] usb 1-1: Manufacturer: syz [ 459.188055][ T6205] usb 1-1: config 0 descriptor?? [ 459.436403][ T7699] team0: Port device team_slave_0 added [ 459.480697][ T7699] team0: Port device team_slave_1 added [ 459.625656][ T6205] rc_core: IR keymap rc-hauppauge not found [ 459.625678][ T6205] Registered IR keymap rc-empty [ 459.626153][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.642777][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.675775][ T6205] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 459.679467][ T6205] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 459.726306][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.756814][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.772910][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.789685][ T7846] Bluetooth: MGMT ver 1.23 [ 459.789732][ T7846] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 459.803967][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.822476][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.844877][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.862552][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.882502][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.902534][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.922721][ T6205] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 459.959679][ T6205] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 459.960076][ T6205] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 460.034688][ T6205] usb 1-1: USB disconnect, device number 30 [ 460.080747][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.080767][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.080794][ T7699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.158694][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.158712][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.158736][ T7699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.268107][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.268309][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.268537][ T7735] bridge_slave_0: entered allmulticast mode [ 460.280301][ T7735] bridge_slave_0: entered promiscuous mode [ 460.326005][ T5875] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 460.454379][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.454489][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.454698][ T7735] bridge_slave_1: entered allmulticast mode [ 460.456573][ T7735] bridge_slave_1: entered promiscuous mode [ 460.482230][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 460.492356][ T5875] usb 5-1: config 4 has an invalid interface number: 196 but max is 0 [ 460.492434][ T5875] usb 5-1: config 4 has no interface number 0 [ 460.492570][ T5875] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 460.492644][ T5875] usb 5-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.492708][ T5875] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 460.492772][ T5875] usb 5-1: config 4 interface 196 has no altsetting 0 [ 460.556453][ T5875] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 460.556487][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 460.556502][ T5875] usb 5-1: Product: syz [ 460.556513][ T5875] usb 5-1: Manufacturer: syz [ 460.556523][ T5875] usb 5-1: SerialNumber: syz [ 460.600007][ T7848] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 460.901873][ T7735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.978345][ T7699] hsr_slave_0: entered promiscuous mode [ 461.001229][ T7699] hsr_slave_1: entered promiscuous mode [ 461.017898][ T7699] debugfs: 'hsr0' already exists in 'hsr' [ 461.017928][ T7699] Cannot create hsr debugfs directory [ 461.037095][ T7735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.080808][ T7735] team0: Port device team_slave_0 added [ 462.120033][ T7735] team0: Port device team_slave_1 added [ 462.548750][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.548772][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.548860][ T7735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.653027][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.653047][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.653077][ T7735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.256864][ T5875] ipheth 5-1:4.196: ipheth_get_macaddr: usb_control_msg: -71 [ 463.257293][ T5875] ipheth 5-1:4.196: probe with driver ipheth failed with error -71 [ 463.293883][ T5875] usb 5-1: USB disconnect, device number 19 [ 463.742648][ T7735] hsr_slave_0: entered promiscuous mode [ 463.758995][ T7735] hsr_slave_1: entered promiscuous mode [ 463.763636][ T7735] debugfs: 'hsr0' already exists in 'hsr' [ 463.763729][ T7735] Cannot create hsr debugfs directory [ 463.958658][ T7687] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 463.982163][ T5875] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 464.050552][ T7687] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 464.146959][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 464.156827][ T5875] usb 5-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 464.157269][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.157357][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 464.157433][ T5875] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 464.157516][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.219438][ T5875] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 464.219478][ T5875] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 464.219494][ T5875] usb 5-1: Manufacturer: syz [ 464.279304][ T5875] usb 5-1: config 0 descriptor?? [ 464.358860][ T7687] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 464.552436][ T5875] rc_core: IR keymap rc-hauppauge not found [ 464.552460][ T5875] Registered IR keymap rc-empty [ 464.552926][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.560150][ T7687] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 464.579949][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.602306][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 464.604907][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 464.608308][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.668226][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.684371][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.703516][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.724585][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.747668][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.769045][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.782908][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.802764][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.824560][ T5875] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 464.883562][ T5875] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 464.883862][ T5875] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 465.035416][ T5875] usb 5-1: USB disconnect, device number 20 [ 466.879783][ T13] bridge_slave_1: left allmulticast mode [ 466.879818][ T13] bridge_slave_1: left promiscuous mode [ 466.880127][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.955658][ T13] bridge_slave_0: left allmulticast mode [ 466.955690][ T13] bridge_slave_0: left promiscuous mode [ 466.956245][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.068270][ T13] bridge_slave_1: left allmulticast mode [ 467.068303][ T13] bridge_slave_1: left promiscuous mode [ 467.068559][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.192288][ T44] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 467.278711][ T13] bridge_slave_0: left allmulticast mode [ 467.278785][ T13] bridge_slave_0: left promiscuous mode [ 467.283617][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.342747][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 467.346109][ T44] usb 1-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 467.346184][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.346213][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 467.346242][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 467.346268][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.348844][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 467.348874][ T44] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 467.348897][ T44] usb 1-1: Manufacturer: syz [ 468.763522][ T44] usb 1-1: config 0 descriptor?? [ 469.052218][ T44] rc_core: IR keymap rc-hauppauge not found [ 469.052286][ T44] Registered IR keymap rc-empty [ 469.052832][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.084830][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.104750][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 469.107309][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 469.110735][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.145312][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.160838][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.172593][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.192861][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.214834][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.232483][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.233867][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.257895][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.275414][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.293018][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.312542][ T44] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.321737][ T13] bond0 (unregistering): Released all slaves [ 469.350489][ T44] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 469.350510][ T44] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 469.450943][ T44] usb 1-1: USB disconnect, device number 31 [ 469.753140][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.834598][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.914575][ T13] bond0 (unregistering): Released all slaves [ 470.207898][ T7687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.384910][ T7687] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.403199][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.403372][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.439518][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.439664][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.592227][ T44] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 470.786792][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 470.790080][ T44] usb 5-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 470.790146][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.790177][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 470.790205][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 470.790230][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.795609][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.795642][ T44] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.795664][ T44] usb 5-1: Manufacturer: syz [ 470.809182][ T44] usb 5-1: config 0 descriptor?? [ 471.292638][ T44] rc_core: IR keymap rc-hauppauge not found [ 471.292660][ T44] Registered IR keymap rc-empty [ 471.293132][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.312505][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.336785][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 471.340359][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34 [ 471.416837][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.434923][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.453350][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.472663][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.492534][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.512518][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.532510][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.552548][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.572464][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.592444][ T13] hsr_slave_0: left promiscuous mode [ 471.592500][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 471.622596][ T44] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 471.622622][ T44] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 471.657958][ T13] hsr_slave_1: left promiscuous mode [ 471.660005][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.698972][ T10] usb 5-1: USB disconnect, device number 21 [ 471.723121][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.912409][ T13] hsr_slave_0: left promiscuous mode [ 471.936732][ T13] hsr_slave_1: left promiscuous mode [ 471.937624][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.983395][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.434757][ T7952] ntfs3(nullb0): Primary boot signature is not NTFS. [ 472.434932][ T7952] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 472.622167][ T44] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 472.772190][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 472.779534][ T44] usb 5-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 472.779597][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.779618][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 472.779638][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 472.779656][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.781033][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.781064][ T44] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.781079][ T44] usb 5-1: Manufacturer: syz [ 472.801434][ T44] usb 5-1: config 0 descriptor?? [ 472.869898][ T5965] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 473.064059][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 473.081672][ T5965] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 473.081703][ T5965] usb 1-1: config 0 has no interface number 0 [ 473.081759][ T5965] usb 1-1: config 0 interface 12 has no altsetting 0 [ 473.103139][ T5965] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 473.103187][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.103241][ T5965] usb 1-1: Product: syz [ 473.103276][ T5965] usb 1-1: Manufacturer: syz [ 473.103291][ T5965] usb 1-1: SerialNumber: syz [ 473.150609][ T5965] usb 1-1: config 0 descriptor?? [ 473.262134][ T44] rc_core: IR keymap rc-hauppauge not found [ 473.262159][ T44] Registered IR keymap rc-empty [ 473.262615][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.263565][ T13] team0 (unregistering): Port device team_slave_1 removed [ 473.282438][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.308782][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 473.329234][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 473.350973][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.362824][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.394799][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.412527][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.432585][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.453744][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.472568][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.514914][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.532525][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.552508][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.575204][ T13] team0 (unregistering): Port device team_slave_0 removed [ 473.595617][ T44] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 473.595647][ T44] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 473.667327][ T44] usb 5-1: USB disconnect, device number 22 [ 474.500465][ T5965] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 474.500528][ T5965] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 474.500546][ T5965] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 474.500642][ T5965] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 474.567525][ T5965] usb 1-1: USB disconnect, device number 32 [ 475.172895][ T13] team0 (unregistering): Port device team_slave_1 removed [ 475.282318][ T5965] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 475.325448][ T13] team0 (unregistering): Port device team_slave_0 removed [ 475.443553][ T5965] usb 5-1: Using ep0 maxpacket: 32 [ 475.446775][ T5965] usb 5-1: config 4 has an invalid interface number: 196 but max is 0 [ 475.446805][ T5965] usb 5-1: config 4 has no interface number 0 [ 475.446887][ T5965] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 475.446906][ T5965] usb 5-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 475.446922][ T5965] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 475.446939][ T5965] usb 5-1: config 4 interface 196 has no altsetting 0 [ 475.449481][ T5965] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 475.449514][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 475.449529][ T5965] usb 5-1: Product: syz [ 475.449539][ T5965] usb 5-1: Manufacturer: syz [ 475.449550][ T5965] usb 5-1: SerialNumber: syz [ 475.497584][ T7971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 476.892251][ T5875] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 477.062277][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 477.067262][ T5875] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 477.067382][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 477.067414][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 477.067440][ T5875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 477.067462][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.069437][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 477.069526][ T5875] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 477.069556][ T5875] usb 1-1: Manufacturer: syz [ 477.318400][ T5875] usb 1-1: config 0 descriptor?? [ 477.772876][ T5875] rc_core: IR keymap rc-hauppauge not found [ 477.772900][ T5875] Registered IR keymap rc-empty [ 477.773469][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 477.839014][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 477.861387][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 477.892304][ T7699] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 477.899521][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input36 [ 478.056294][ T7699] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 478.061324][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.103423][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.122535][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.165267][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.182521][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.212503][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.232564][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.253577][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.272619][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.317710][ T5875] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 478.359963][ T5875] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 478.360177][ T5875] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 478.522637][ T5875] usb 1-1: USB disconnect, device number 33 [ 478.698600][ T7699] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 479.004019][ T5965] ipheth 5-1:4.196: ipheth_get_macaddr: usb_control_msg: -71 [ 479.004327][ T5965] ipheth 5-1:4.196: probe with driver ipheth failed with error -71 [ 479.053154][ T5965] usb 5-1: USB disconnect, device number 23 [ 479.097241][ T7699] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 480.009939][ T7687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.309558][ T7735] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 480.349529][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 481.692417][ T7735] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 481.761570][ T7735] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 481.906823][ T7735] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 483.332152][ T6205] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 483.401345][ T7687] veth0_vlan: entered promiscuous mode [ 483.462553][ T7687] veth1_vlan: entered promiscuous mode [ 483.492433][ T6205] usb 5-1: Using ep0 maxpacket: 32 [ 483.513754][ T7699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.516468][ T6205] usb 5-1: config 4 has an invalid interface number: 196 but max is 0 [ 483.516500][ T6205] usb 5-1: config 4 has no interface number 0 [ 483.516569][ T6205] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 483.516598][ T6205] usb 5-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 483.516623][ T6205] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 483.516647][ T6205] usb 5-1: config 4 interface 196 has no altsetting 0 [ 483.520871][ T6205] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 483.520913][ T6205] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 483.520933][ T6205] usb 5-1: Product: syz [ 483.520948][ T6205] usb 5-1: Manufacturer: syz [ 483.520975][ T6205] usb 5-1: SerialNumber: syz [ 483.562995][ T8052] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 483.684784][ T8042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 483.770015][ T8052] usb 1-1: Using ep0 maxpacket: 16 [ 483.795762][ T8052] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 483.795883][ T8052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 483.795920][ T8052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 483.795940][ T8052] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 483.796139][ T8052] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.797846][ T8052] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 483.797870][ T8052] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 483.797885][ T8052] usb 1-1: Manufacturer: syz [ 483.864609][ T7699] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.929507][ T8052] usb 1-1: config 0 descriptor?? [ 483.986028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.986477][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.018182][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.068054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.072988][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.092700][ T7687] veth0_macvtap: entered promiscuous mode [ 484.181365][ T7687] veth1_macvtap: entered promiscuous mode [ 484.250332][ T7735] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.319265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.319490][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.388355][ T7687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.401610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.401823][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.458195][ T7687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.485775][ T8052] rc_core: IR keymap rc-hauppauge not found [ 484.485800][ T8052] Registered IR keymap rc-empty [ 484.486552][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.513704][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.539016][ T8052] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 484.561830][ T987] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.580421][ T987] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.593497][ T8052] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 484.603223][ T987] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.652805][ T6014] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.657604][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.682648][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.702746][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.722681][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.752477][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.772810][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.792463][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.822561][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.852537][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.870762][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.895438][ T8052] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 484.895471][ T8052] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 484.966719][ T8052] usb 1-1: USB disconnect, device number 34 [ 486.363153][ T8052] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 486.471171][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.471194][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.532152][ T8052] usb 1-1: Using ep0 maxpacket: 16 [ 486.552383][ T8052] usb 1-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 486.552501][ T8052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.552534][ T8052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 486.552562][ T8052] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 486.552587][ T8052] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.561013][ T8052] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 486.561122][ T8052] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 486.561146][ T8052] usb 1-1: Manufacturer: syz [ 486.688398][ T8052] usb 1-1: config 0 descriptor?? [ 486.971631][ T7699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.162105][ T8052] rc_core: IR keymap rc-hauppauge not found [ 487.162126][ T8052] Registered IR keymap rc-empty [ 487.162737][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.198081][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.232456][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.232480][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.239800][ T8052] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 487.317603][ T8052] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 487.454973][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.472683][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.502837][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.522566][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.542709][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.572503][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.610584][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.627040][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.652964][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.672536][ T8052] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 487.737436][ T8052] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 487.737849][ T8052] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 487.845072][ T8052] usb 1-1: USB disconnect, device number 35 [ 488.410075][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.956232][ T6205] ipheth 5-1:4.196: ipheth_get_macaddr: usb_control_msg: -71 [ 489.956544][ T6205] ipheth 5-1:4.196: probe with driver ipheth failed with error -71 [ 490.011789][ T6205] usb 5-1: USB disconnect, device number 24 [ 490.162628][ T5878] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 490.227961][ T7699] veth0_vlan: entered promiscuous mode [ 490.256569][ T7699] veth1_vlan: entered promiscuous mode [ 490.313366][ T5878] usb 7-1: Using ep0 maxpacket: 32 [ 490.346347][ T5878] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 490.346380][ T5878] usb 7-1: config 0 has no interface number 0 [ 490.346430][ T5878] usb 7-1: config 0 interface 12 has no altsetting 0 [ 490.402750][ T5878] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 490.402781][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.402800][ T5878] usb 7-1: Product: syz [ 490.402812][ T5878] usb 7-1: Manufacturer: syz [ 490.402825][ T5878] usb 7-1: SerialNumber: syz [ 490.462206][ T5878] usb 7-1: config 0 descriptor?? [ 490.560865][ T7699] veth0_macvtap: entered promiscuous mode [ 490.659175][ T7699] veth1_macvtap: entered promiscuous mode [ 490.747878][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.836633][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.032238][ T8117] __vm_enough_memory: pid: 8117, comm: syz.4.503, bytes: 4503599627366400 not enough memory for the allocation [ 491.219494][ T69] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.220015][ T69] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.220061][ T69] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.220102][ T69] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.788874][ T5878] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 491.788928][ T5878] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 491.788945][ T5878] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 491.789021][ T5878] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 491.878829][ T5878] usb 7-1: USB disconnect, device number 2 [ 493.209091][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.209118][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.600804][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.600829][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.772212][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 493.898566][ T7735] veth0_vlan: entered promiscuous mode [ 493.925263][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 493.934419][ T10] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 493.934529][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.934585][ T10] usb 7-1: config 0 has no interface number 0 [ 493.934899][ T10] usb 7-1: config 0 interface 31 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 493.934988][ T10] usb 7-1: config 0 interface 31 has no altsetting 0 [ 494.013475][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 494.014734][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 494.015277][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.015311][ T10] usb 7-1: Product: syz [ 494.015322][ T10] usb 7-1: Manufacturer: syz [ 494.015333][ T10] usb 7-1: SerialNumber: syz [ 494.081650][ T10] usb 7-1: config 0 descriptor?? [ 494.098917][ T7735] veth1_vlan: entered promiscuous mode [ 494.433586][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 494.494558][ T9] usb 5-1: config 4 has an invalid interface number: 196 but max is 0 [ 494.494590][ T9] usb 5-1: config 4 has no interface number 0 [ 494.494692][ T9] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 494.494721][ T9] usb 5-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 494.494745][ T9] usb 5-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 494.494771][ T9] usb 5-1: config 4 interface 196 has no altsetting 0 [ 494.636292][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 494.636344][ T9] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 494.636367][ T9] usb 5-1: Product: syz [ 494.636384][ T9] usb 5-1: Manufacturer: syz [ 494.636401][ T9] usb 5-1: SerialNumber: syz [ 494.697692][ T8151] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 494.835728][ T7735] veth0_macvtap: entered promiscuous mode [ 494.980787][ T31] usb 7-1: USB disconnect, device number 3 [ 495.254805][ T7735] veth1_macvtap: entered promiscuous mode [ 495.598010][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.889779][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.034831][ T6014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.035701][ T6014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.035753][ T6014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.035795][ T6014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.354874][ T9] ipheth 5-1:4.196: ipheth_get_macaddr: usb_control_msg: -71 [ 497.355100][ T9] ipheth 5-1:4.196: probe with driver ipheth failed with error -71 [ 497.888164][ T9] usb 5-1: USB disconnect, device number 25 [ 498.224076][ T815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.224101][ T815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.452432][ T815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.452460][ T815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.882175][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 502.046264][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 502.048001][ T9] usb 1-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 502.048041][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.048062][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 502.048081][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 502.048099][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.049054][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.049074][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.049089][ T9] usb 1-1: Manufacturer: syz [ 502.073584][ T9] usb 1-1: config 0 descriptor?? [ 502.409641][ T8225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.447873][ T9] rc_core: IR keymap rc-hauppauge not found [ 503.447950][ T9] Registered IR keymap rc-empty [ 503.449600][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.475399][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 503.891470][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 504.051529][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 504.794311][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 504.813254][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 504.842485][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 504.862586][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 504.884613][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 504.914048][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 504.957034][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 504.977656][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 504.992542][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 505.012576][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 505.069899][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 505.069927][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 505.203624][ T9] usb 1-1: USB disconnect, device number 36 [ 507.302805][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.302879][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.731695][ T8261] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 511.198719][ T8271] syz.6.539 (8271) used greatest stack depth: 16344 bytes left [ 512.483214][ T5878] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 512.709504][ T5878] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 512.709536][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.709556][ T5878] usb 7-1: Product: syz [ 512.709571][ T5878] usb 7-1: Manufacturer: syz [ 512.709587][ T5878] usb 7-1: SerialNumber: syz [ 512.790804][ T5878] usb 7-1: config 0 descriptor?? [ 513.000780][ T5878] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 513.542153][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 513.641421][ T5878] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 513.716000][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 513.719793][ T9] usb 6-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 513.719840][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.719862][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 513.719881][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 513.719899][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.721836][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 513.721866][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 513.721890][ T9] usb 6-1: Manufacturer: syz [ 513.873274][ T9] usb 6-1: config 0 descriptor?? [ 514.282135][ T9] rc_core: IR keymap rc-hauppauge not found [ 514.282153][ T9] Registered IR keymap rc-empty [ 514.311088][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.323517][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.432377][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 514.435898][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40 [ 514.503584][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.522510][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.542401][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.563638][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.597702][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.612303][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.636732][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.652340][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.676056][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.692360][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 514.767846][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 514.767867][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 514.839627][ T9] usb 6-1: USB disconnect, device number 2 [ 515.287696][ T44] usb 7-1: USB disconnect, device number 4 [ 515.832230][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 515.992140][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 515.997279][ T9] usb 7-1: config 4 has an invalid interface number: 196 but max is 0 [ 515.997325][ T9] usb 7-1: config 4 has no interface number 0 [ 515.997384][ T9] usb 7-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 515.997423][ T9] usb 7-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 515.997446][ T9] usb 7-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 515.997471][ T9] usb 7-1: config 4 interface 196 has no altsetting 0 [ 516.000164][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 516.000197][ T9] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 516.000219][ T9] usb 7-1: Product: syz [ 516.000234][ T9] usb 7-1: Manufacturer: syz [ 516.000249][ T9] usb 7-1: SerialNumber: syz [ 516.120456][ T8310] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 518.896263][ T9] ipheth 7-1:4.196: ipheth_get_macaddr: usb_control_msg: -71 [ 518.896483][ T9] ipheth 7-1:4.196: probe with driver ipheth failed with error -71 [ 518.905907][ T9] usb 7-1: USB disconnect, device number 5 [ 522.820057][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 523.384172][ T8358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.422077][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 523.424547][ T31] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 523.424578][ T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.424595][ T31] usb 8-1: config 0 has no interface number 0 [ 523.424659][ T31] usb 8-1: config 0 interface 31 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.424696][ T31] usb 8-1: config 0 interface 31 has no altsetting 0 [ 523.437736][ T31] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 523.437782][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.437803][ T31] usb 8-1: Product: syz [ 523.437818][ T31] usb 8-1: Manufacturer: syz [ 523.437833][ T31] usb 8-1: SerialNumber: syz [ 523.563384][ T31] usb 8-1: config 0 descriptor?? [ 523.592127][ T44] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 523.752420][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 523.757965][ T44] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 523.757996][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.758016][ T44] usb 6-1: config 0 has no interface number 0 [ 523.758060][ T44] usb 6-1: config 0 interface 31 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.758089][ T44] usb 6-1: config 0 interface 31 has no altsetting 0 [ 523.967858][ T5965] usb 8-1: USB disconnect, device number 2 [ 523.981236][ T44] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 523.981269][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.981291][ T44] usb 6-1: Product: syz [ 523.981307][ T44] usb 6-1: Manufacturer: syz [ 523.981322][ T44] usb 6-1: SerialNumber: syz [ 524.265290][ T44] usb 6-1: config 0 descriptor?? [ 524.835627][ T10] usb 6-1: USB disconnect, device number 3 [ 526.499303][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.7.569'. [ 526.499346][ T8393] netlink: 32 bytes leftover after parsing attributes in process `syz.7.569'. [ 527.337237][ T8393] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 530.226386][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 530.272123][ T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 530.392176][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 530.394965][ T9] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 530.394994][ T9] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 530.395050][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.395079][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 530.395108][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 530.395135][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.396882][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 530.396913][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 530.396935][ T9] usb 1-1: Manufacturer: syz [ 530.442466][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 530.460525][ T9] usb 1-1: config 0 descriptor?? [ 530.476525][ T31] usb 7-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 530.476593][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.476625][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 530.476652][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 530.476679][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.539810][ T31] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 530.539846][ T31] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 530.539869][ T31] usb 7-1: Manufacturer: syz [ 530.696694][ T31] usb 7-1: config 0 descriptor?? [ 533.282423][ T9] rc_core: IR keymap rc-hauppauge not found [ 533.282444][ T9] Registered IR keymap rc-empty [ 533.282951][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.318189][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.422253][ T31] rc_core: IR keymap rc-hauppauge not found [ 533.422276][ T31] Registered IR keymap rc-empty [ 533.422765][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.446466][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 533.475855][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.504917][ T31] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1 [ 533.535775][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input41 [ 533.535979][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1/input42 [ 533.586935][ T5878] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 533.589639][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.618406][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.623228][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.643067][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.643502][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.663085][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.669348][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.689461][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.701870][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.702696][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.723068][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.741805][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.751665][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.770738][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.783106][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 533.788658][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.826910][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.847641][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.864731][ T31] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 533.864841][ T31] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 533.876286][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.915868][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.952043][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 533.995666][ T5878] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 533.995698][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.995777][ T5878] usb 5-1: config 0 has no interface number 0 [ 533.995827][ T5878] usb 5-1: config 0 interface 31 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 533.995856][ T5878] usb 5-1: config 0 interface 31 has no altsetting 0 [ 534.151135][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 534.151172][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 534.245652][ T5878] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 534.245747][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.245770][ T5878] usb 5-1: Product: syz [ 534.245785][ T5878] usb 5-1: Manufacturer: syz [ 534.245801][ T5878] usb 5-1: SerialNumber: syz [ 534.925295][ T9] usb 1-1: USB disconnect, device number 37 [ 535.793720][ T5878] usb 5-1: config 0 descriptor?? [ 536.251850][ T8049] usb 7-1: USB disconnect, device number 6 [ 538.609884][ T5878] usb 5-1: can't set config #0, error -71 [ 538.720161][ T5878] usb 5-1: USB disconnect, device number 26 [ 540.292170][ T5784] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 540.944619][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 540.967461][ T5784] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 540.967493][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.967515][ T5784] usb 5-1: Product: syz [ 540.967531][ T5784] usb 5-1: Manufacturer: syz [ 540.967545][ T5784] usb 5-1: SerialNumber: syz [ 541.018432][ T5784] usb 5-1: config 0 descriptor?? [ 541.163818][ T8501] ieee802154 phy0 wpan0: encryption failed: -22 [ 541.513120][ T5784] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 541.613674][ T5784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 541.623161][ T5784] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 541.623267][ T5784] usb 5-1: media controller created [ 541.752142][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 541.798134][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.833492][ T8060] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 541.944962][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 542.215409][ T9] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 542.215438][ T9] usb 7-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 542.215500][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.215555][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 542.215583][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 542.215607][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.216999][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 542.217035][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 542.217050][ T9] usb 7-1: Manufacturer: syz [ 542.234680][ T8060] usb 8-1: Using ep0 maxpacket: 16 [ 542.276456][ T8060] usb 8-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 542.276644][ T8060] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.276745][ T8060] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 542.276830][ T8060] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 542.276903][ T8060] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.316457][ T8060] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 542.316542][ T8060] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 542.316605][ T8060] usb 8-1: Manufacturer: syz [ 542.600050][ T9] usb 7-1: config 0 descriptor?? [ 542.601596][ T8060] usb 8-1: config 0 descriptor?? [ 543.389470][ T5784] zl10353_read_register: readreg error (reg=127, ret==0) [ 543.389538][ T5784] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 543.389571][ T5784] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 543.452215][ T5784] usb 5-1: USB disconnect, device number 27 [ 543.822090][ T9] rc_core: IR keymap rc-hauppauge not found [ 543.822112][ T9] Registered IR keymap rc-empty [ 543.822577][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 543.858466][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.287321][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 544.291419][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input43 [ 544.391258][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.423084][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.444989][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.462752][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.482441][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.504355][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.523411][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.549464][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.573782][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.592906][ T9] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 544.713378][ T5876] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 544.940803][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 544.952592][ T8060] rc_core: IR keymap rc-hauppauge not found [ 544.952616][ T8060] Registered IR keymap rc-empty [ 544.954438][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 544.984316][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.037200][ T5876] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 545.037231][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.037252][ T5876] usb 1-1: config 0 has no interface number 0 [ 545.037372][ T5876] usb 1-1: config 0 interface 31 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 545.037401][ T5876] usb 1-1: config 0 interface 31 has no altsetting 0 [ 545.052161][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 545.052196][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.052217][ T5876] usb 1-1: Product: syz [ 545.052233][ T5876] usb 1-1: Manufacturer: syz [ 545.052248][ T5876] usb 1-1: SerialNumber: syz [ 545.174697][ T8060] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1 [ 545.182499][ T9] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 545.182528][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 545.223589][ T5784] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 545.225574][ T5876] usb 1-1: config 0 descriptor?? [ 545.250727][ T8060] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1/input44 [ 545.342097][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.343059][ T9] usb 7-1: USB disconnect, device number 7 [ 545.362473][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.383028][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.402442][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.422747][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.449974][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.462653][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.482497][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.515169][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.532499][ T8060] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 545.556409][ T8060] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 545.556438][ T8060] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 545.667543][ T5856] usb 1-1: USB disconnect, device number 38 [ 545.680325][ T8060] usb 8-1: USB disconnect, device number 3 [ 548.152108][ T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 548.372246][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 548.372281][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.372302][ T9] usb 1-1: Product: syz [ 548.372316][ T9] usb 1-1: Manufacturer: syz [ 548.372331][ T9] usb 1-1: SerialNumber: syz [ 548.413667][ T8060] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 548.458805][ T9] usb 1-1: config 0 descriptor?? [ 548.562297][ T8060] usb 5-1: Using ep0 maxpacket: 32 [ 548.570131][ T8060] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 548.570164][ T8060] usb 5-1: config 0 has no interface number 0 [ 548.570288][ T8060] usb 5-1: config 0 interface 12 has no altsetting 0 [ 548.626381][ T8060] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 548.626420][ T8060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.626444][ T8060] usb 5-1: Product: syz [ 548.626460][ T8060] usb 5-1: Manufacturer: syz [ 548.626713][ T8060] usb 5-1: SerialNumber: syz [ 548.680763][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 548.704220][ T8060] usb 5-1: config 0 descriptor?? [ 549.342558][ T5856] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 549.348203][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 549.870585][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.884797][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 549.920439][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 549.934828][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 549.970040][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 550.122311][ T5856] usb 7-1: Using ep0 maxpacket: 16 [ 550.125065][ T5856] usb 7-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 550.125122][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 550.125149][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 550.125173][ T5856] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 550.125194][ T5856] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.133321][ T5856] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 550.133353][ T5856] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 550.133374][ T5856] usb 7-1: Manufacturer: syz [ 550.160299][ T5856] usb 7-1: config 0 descriptor?? [ 550.370792][ T9] usb 1-1: USB disconnect, device number 39 [ 550.824931][ T5856] rc_core: IR keymap rc-hauppauge not found [ 550.824956][ T5856] Registered IR keymap rc-empty [ 550.828695][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 550.852821][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 550.891647][ T5856] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 550.936456][ T8060] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 550.936517][ T8060] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 550.936535][ T8060] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 550.936636][ T8060] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 550.952605][ T5856] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input45 [ 551.172692][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.198392][ T8060] usb 5-1: USB disconnect, device number 28 [ 551.205517][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.227441][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.242616][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.270626][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.285395][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.301796][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 551.305237][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.350680][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.365980][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.399309][ T5856] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 551.483821][ T5856] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 551.483849][ T5856] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 551.492298][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 551.526572][ T31] usb 8-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 551.526633][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.526662][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 551.526690][ T31] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 551.526715][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.611645][ T31] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 551.611681][ T31] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 551.611704][ T31] usb 8-1: Manufacturer: syz [ 551.812364][ T5856] usb 7-1: USB disconnect, device number 8 [ 551.867120][ T31] usb 8-1: config 0 descriptor?? [ 552.791772][ T61] Bluetooth: hci3: command tx timeout [ 553.032056][ T31] rc_core: IR keymap rc-hauppauge not found [ 553.032078][ T31] Registered IR keymap rc-empty [ 553.032553][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.092800][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.114558][ T31] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1 [ 553.118525][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1/input46 [ 553.184333][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.204953][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.233682][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.252880][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.283745][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.302904][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.323302][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.343072][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.363728][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.382595][ T31] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.421548][ T31] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 553.421577][ T31] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 553.451127][ T8598] 9pnet_fd: p9_fd_create_tcp (8598): problem connecting socket to 127.0.0.1 [ 553.481791][ T31] usb 8-1: USB disconnect, device number 4 [ 553.574449][ T8606] 9pnet_fd: p9_fd_create_tcp (8606): problem connecting socket to 127.0.0.1 [ 555.243603][ T61] Bluetooth: hci3: command tx timeout [ 555.262097][ T6205] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 556.003314][ T6205] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 556.003349][ T6205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.003370][ T6205] usb 1-1: Product: syz [ 556.003385][ T6205] usb 1-1: Manufacturer: syz [ 556.003400][ T6205] usb 1-1: SerialNumber: syz [ 556.015320][ T6205] usb 1-1: config 0 descriptor?? [ 556.258022][ T6205] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 557.222523][ T8060] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 557.287799][ T5795] Bluetooth: hci3: command tx timeout [ 557.476939][ T8060] usb 7-1: Using ep0 maxpacket: 8 [ 557.691903][ T8060] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 557.692219][ T8060] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.692277][ T8060] usb 7-1: config 0 has no interface number 0 [ 557.692454][ T8060] usb 7-1: config 0 interface 31 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 557.692486][ T8060] usb 7-1: config 0 interface 31 has no altsetting 0 [ 557.710997][ T8060] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 557.711125][ T8060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.711184][ T8060] usb 7-1: Product: syz [ 557.711202][ T8060] usb 7-1: Manufacturer: syz [ 557.711262][ T8060] usb 7-1: SerialNumber: syz [ 557.852720][ T6205] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 557.856544][ T6205] usb 1-1: USB disconnect, device number 40 [ 557.888051][ T8060] usb 7-1: config 0 descriptor?? [ 558.119721][ T8060] usb 7-1: USB disconnect, device number 9 [ 559.171280][ T31] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 560.146727][ T61] Bluetooth: hci3: command tx timeout [ 560.162334][ T8568] Bluetooth: hci5: command 0x0406 tx timeout [ 560.252092][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 561.560814][ T8398] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.402169][ T31] usb 1-1: unable to read config index 0 descriptor/all [ 562.402233][ T31] usb 1-1: can't read configurations, error -71 [ 565.225723][ T8398] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.937896][ T8568] Bluetooth: hci2: command 0x0406 tx timeout [ 568.819366][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.833755][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.227737][ T8398] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.572211][ T5784] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 573.650388][ T8398] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.732967][ T8566] chnl_net:caif_netlink_parms(): no params data found [ 573.750911][ T5784] usb 7-1: Using ep0 maxpacket: 16 [ 573.774961][ T5784] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 573.775007][ T5784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.775030][ T5784] usb 7-1: Product: syz [ 573.775046][ T5784] usb 7-1: Manufacturer: syz [ 573.775061][ T5784] usb 7-1: SerialNumber: syz [ 573.828466][ T5784] usb 7-1: config 0 descriptor?? [ 574.302401][ T8049] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 574.306132][ T5784] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 574.356186][ T5784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 574.357572][ T5784] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 574.357630][ T5784] usb 7-1: media controller created [ 574.416905][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.453665][ T8049] usb 1-1: Using ep0 maxpacket: 16 [ 574.476203][ T8049] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 574.476237][ T8049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.476276][ T8049] usb 1-1: Product: syz [ 574.476293][ T8049] usb 1-1: Manufacturer: syz [ 574.476308][ T8049] usb 1-1: SerialNumber: syz [ 574.610424][ T8049] usb 1-1: config 0 descriptor?? [ 574.622673][ T5784] zl10353_read_register: readreg error (reg=127, ret==0) [ 574.622737][ T5784] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 574.622754][ T5784] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 574.675146][ T5784] usb 7-1: USB disconnect, device number 10 [ 575.957458][ T5784] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 575.963664][ T8049] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 576.015590][ T8049] usb 1-1: USB disconnect, device number 43 [ 578.570462][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.570599][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.570873][ T8566] bridge_slave_0: entered allmulticast mode [ 578.586368][ T8566] bridge_slave_0: entered promiscuous mode [ 579.770588][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.770730][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.770986][ T8566] bridge_slave_1: entered allmulticast mode [ 579.796897][ T8566] bridge_slave_1: entered promiscuous mode [ 580.872375][ T8566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.912905][ T8566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.147052][ T8568] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 581.322587][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 581.535061][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 581.927869][ T10] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 581.927943][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.928003][ T10] usb 1-1: Product: syz [ 581.928090][ T10] usb 1-1: Manufacturer: syz [ 581.928107][ T10] usb 1-1: SerialNumber: syz [ 582.252630][ T10] usb 1-1: config 0 descriptor?? [ 582.258458][ T8568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.272585][ T8398] bridge_slave_1: left allmulticast mode [ 582.272623][ T8398] bridge_slave_1: left promiscuous mode [ 582.272888][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.298165][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 583.105449][ T8568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 583.587793][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 583.587821][ T10] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 583.587861][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.587892][ T10] Tainted: [L]=SOFTLOCKUP [ 583.587900][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 583.587915][ T10] Workqueue: usb_hub_wq hub_event [ 583.587979][ T10] RIP: 0010:usb_gadget_udc_reset+0x27/0x60 [ 583.588009][ T10] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 5e 8a ce fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 fb f1 32 fb 4d 8b 1e 48 89 df 2e 2e [ 583.588030][ T10] RSP: 0018:ffffc900000f6448 EFLAGS: 00010202 [ 583.588048][ T10] RAX: 0000000000000008 RBX: ffff888027fd0c40 RCX: dffffc0000000000 [ 583.588064][ T10] RDX: ffffc9001a79a000 RSI: 000000000001332d RDI: 000000000001332e [ 583.588079][ T10] RBP: ffff88801f6ef16c R08: ffffffff8f47df77 R09: 1ffffffff1e8fbee [ 583.588096][ T10] R10: dffffc0000000000 R11: fffffbfff1e8fbef R12: ffff888027fd0c40 [ 583.588113][ T10] R13: 1ffff11004ff94a1 R14: 0000000000000040 R15: 1ffff11004ffa187 [ 583.588130][ T10] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 583.588147][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.588162][ T10] CR2: 0000001b2f30bff8 CR3: 00000000342ce000 CR4: 00000000003526f0 [ 583.588182][ T10] Call Trace: [ 583.588190][ T10] [ 583.588204][ T10] set_link_state+0x80b/0x1220 [ 583.588234][ T10] dummy_hub_control+0xa09/0x1a00 [ 583.588261][ T10] ? usb_hcd_submit_urb+0x786/0x1b50 [ 583.588291][ T10] usb_hcd_submit_urb+0xdbe/0x1b50 [ 583.588323][ T10] usb_start_wait_urb+0x12b/0x510 [ 583.588361][ T10] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 583.588407][ T10] usb_control_msg+0x232/0x3e0 [ 583.588443][ T10] hub_port_reset+0x3c7/0x1820 [ 583.588478][ T10] hub_port_init+0x299/0x28c0 [ 583.588507][ T10] ? usb_enable_endpoint+0x104/0x1b0 [ 583.588529][ T10] usb_reset_and_verify_device+0x4ea/0x1af0 [ 583.588575][ T10] ? __pfx_usb_reset_and_verify_device+0x10/0x10 [ 583.588621][ T10] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 583.588652][ T10] ? mutex_lock_nested+0x152/0x1d0 [ 583.588675][ T10] ? usb_reset_device+0x548/0xb40 [ 583.588729][ T10] usb_reset_device+0x551/0xb40 [ 583.588770][ T10] sd_config+0x27f/0x15b0 [ 583.588804][ T10] ? snprintf+0xe8/0x140 [ 583.588824][ T10] ? snprintf+0xe8/0x140 [ 583.588845][ T10] ? __pfx_sd_config+0x10/0x10 [ 583.588870][ T10] ? __pfx_snprintf+0x10/0x10 [ 583.588893][ T10] ? __rt_spin_lock_init+0x3e/0x50 [ 583.588929][ T10] ? __init_waitqueue_head+0xae/0x160 [ 583.588968][ T10] gspca_dev_probe2+0x81e/0x1450 [ 583.588994][ T10] ? gspca_dev_probe+0x18e/0x250 [ 583.589020][ T10] usb_probe_interface+0x668/0xc90 [ 583.589050][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 583.589073][ T10] really_probe+0x267/0xaf0 [ 583.589110][ T10] __driver_probe_device+0x18c/0x320 [ 583.589142][ T10] driver_probe_device+0x4f/0x240 [ 583.589176][ T10] __device_attach_driver+0x279/0x430 [ 583.589210][ T10] bus_for_each_drv+0x25b/0x2f0 [ 583.589235][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 583.589267][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 583.589290][ T10] ? rt_spin_unlock+0x160/0x200 [ 583.589317][ T10] __device_attach+0x2c8/0x450 [ 583.589348][ T10] ? __pfx___device_attach+0x10/0x10 [ 583.589378][ T10] ? rt_spin_unlock+0x160/0x200 [ 583.589405][ T10] device_initial_probe+0xa1/0xd0 [ 583.589437][ T10] bus_probe_device+0x12d/0x220 [ 583.589458][ T10] ? device_add+0x726/0xb80 [ 583.589486][ T10] device_add+0x7b6/0xb80 [ 583.589515][ T10] usb_set_configuration+0x1a87/0x2110 [ 583.589553][ T10] usb_generic_driver_probe+0x8d/0x150 [ 583.589576][ T10] usb_probe_device+0x1c4/0x3b0 [ 583.589602][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 583.589624][ T10] really_probe+0x267/0xaf0 [ 583.589659][ T10] __driver_probe_device+0x18c/0x320 [ 583.589692][ T10] driver_probe_device+0x4f/0x240 [ 583.589725][ T10] __device_attach_driver+0x279/0x430 [ 583.589759][ T10] bus_for_each_drv+0x25b/0x2f0 [ 583.589782][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 583.589815][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 583.589838][ T10] ? rt_spin_unlock+0x160/0x200 [ 583.589866][ T10] __device_attach+0x2c8/0x450 [ 583.589897][ T10] ? __pfx___device_attach+0x10/0x10 [ 583.589927][ T10] ? rt_spin_unlock+0x160/0x200 [ 583.589963][ T10] device_initial_probe+0xa1/0xd0 [ 583.589995][ T10] bus_probe_device+0x12d/0x220 [ 583.590017][ T10] ? device_add+0x726/0xb80 [ 583.590045][ T10] device_add+0x7b6/0xb80 [ 583.590075][ T10] usb_new_device+0x9f8/0x16e0 [ 583.590114][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 583.590150][ T10] hub_event+0x2a49/0x4f60 [ 583.590197][ T10] ? __pfx_hub_event+0x10/0x10 [ 583.590217][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 583.590243][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 583.590263][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 583.590284][ T10] process_scheduled_works+0xaec/0x17a0 [ 583.590320][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 583.590340][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 583.590374][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 583.590408][ T10] ? schedule+0x90/0x360 [ 583.590438][ T10] worker_thread+0xda6/0x1360 [ 583.590473][ T10] kthread+0x726/0x8b0 [ 583.590501][ T10] ? __pfx_worker_thread+0x10/0x10 [ 583.590522][ T10] ? __pfx_kthread+0x10/0x10 [ 583.590547][ T10] ? rt_spin_unlock+0x14f/0x200 [ 583.590572][ T10] ? rt_spin_unlock+0x160/0x200 [ 583.590593][ T10] ? __pfx_kthread+0x10/0x10 [ 583.590620][ T10] ret_from_fork+0x51b/0xa40 [ 583.590644][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 583.590665][ T10] ? __switch_to+0xc82/0x1410 [ 583.590701][ T10] ? __pfx_kthread+0x10/0x10 [ 583.590728][ T10] ret_from_fork_asm+0x1a/0x30 [ 583.590769][ T10] [ 583.590784][ T10] Modules linked in: [ 583.590810][ T10] ---[ end trace 0000000000000000 ]--- [ 583.590827][ T10] RIP: 0010:usb_gadget_udc_reset+0x27/0x60 [ 583.590857][ T10] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 5e 8a ce fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 fb f1 32 fb 4d 8b 1e 48 89 df 2e 2e [ 583.590877][ T10] RSP: 0018:ffffc900000f6448 EFLAGS: 00010202 [ 583.590895][ T10] RAX: 0000000000000008 RBX: ffff888027fd0c40 RCX: dffffc0000000000 [ 583.590912][ T10] RDX: ffffc9001a79a000 RSI: 000000000001332d RDI: 000000000001332e [ 583.590927][ T10] RBP: ffff88801f6ef16c R08: ffffffff8f47df77 R09: 1ffffffff1e8fbee [ 583.590952][ T10] R10: dffffc0000000000 R11: fffffbfff1e8fbef R12: ffff888027fd0c40 [ 583.590969][ T10] R13: 1ffff11004ff94a1 R14: 0000000000000040 R15: 1ffff11004ffa187 [ 583.590986][ T10] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 583.591004][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.591020][ T10] CR2: 0000001b2f30bff8 CR3: 00000000342ce000 CR4: 00000000003526f0 [ 583.591046][ T10] Kernel panic - not syncing: Fatal exception [ 583.591701][ T10] Kernel Offset: disabled