last executing test programs: 3m34.56584589s ago: executing program 4 (id=1259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) readv(r0, 0x0, 0x0) 3m34.395273698s ago: executing program 3 (id=1263): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 3m34.314984285s ago: executing program 4 (id=1264): open$dir(&(0x7f0000000100)='./file0\x00', 0x40, 0x50) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x10004, &(0x7f0000000240)={[{@subsystem='pids'}]}) utime(&(0x7f0000000140)='./file0\x00', 0x0) 3m34.287138585s ago: executing program 3 (id=1265): r0 = eventfd(0x9) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) 3m34.138049913s ago: executing program 4 (id=1266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203b636cce9461747fda74a0300"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48881}, 0x24000001) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x9, 0xde, 0xa7, 0x20, 0x12d1, 0x554b, 0x5a0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x38, 0x8, 0x80, 0x4, [{{0x9, 0x4, 0xd8, 0xe0, 0x2, 0xff, 0x4, 0x17, 0x9, [], [{{0x9, 0x5, 0x86, 0x3, 0x200, 0x8, 0x73, 0x98}}, {{0x9, 0x5, 0x8a, 0x3, 0x40, 0x2, 0x4, 0x9}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000540)={0x18, &(0x7f0000000380)={0x0, 0x11, 0x5, {0x5, 0x22, "96cd76"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000a80)=""/188, 0xba) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x1c8, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @loopback}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8, 0x8be, 0x67]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x82}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x24040854) write$char_usb(r6, 0x0, 0x0) 3m34.054901028s ago: executing program 3 (id=1267): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x78, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0xa07, @private2, 0x60}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @local}]}, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3m32.954565951s ago: executing program 4 (id=1271): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "12279dfe7e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 3m32.777281428s ago: executing program 2 (id=1272): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 3m31.473134948s ago: executing program 1 (id=1275): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 3m31.225413397s ago: executing program 2 (id=1277): socket$l2tp(0x2, 0x2, 0x73) ptrace(0x4207, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) 3m31.126656625s ago: executing program 1 (id=1278): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000040)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) poll(&(0x7f0000000100), 0x0, 0x8) r5 = fcntl$getown(r1, 0x9) sendmsg$unix(r4, &(0x7f00000007c0)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000480)="5da1927f3292858fb076d7396af8e6bc62ace591b25776f9b344bae679db0f87db22d2341b3761eb9e0562996c5fcdfd45c617fcd19eb3661b06b73252687bb2a6b12f5d10b477101db89765285b6c122c49e7dcff46ef9b9daf884ae735e9649dcfc43c5028bd269f28c201e04e0e24a324cc347f88fcef34e3b33893e0821cfea7e88c7b2a3e33a8463c470a3dbab657bcdf37cf1790d268bccddf456cc649b9a6cafec21051808bb094069aacac0fa1db5740bb5848932d", 0xb9}, {&(0x7f0000000580)="68ff72cb6fc966d8a9486b7e0ddb2f90931d4488a781f58bbcf9dcc7f42c39e6951d55f05a54fb6970962fcffe1ca13c62df7f12ae96c067ad79d67bcbdbb7e32f2378e2a90202c9378d", 0x4a}, {&(0x7f0000000000)="52c7a18b963ef454f16f0be45d336831679eb4bbefcf0d3edfb5dde73c7cec365dd71b69b66c63", 0x27}, {&(0x7f0000000600)="68489a7924ae4088c1adc26fbdb885a6da70f57c3c631a5dad0533de11df7e4a84a956a0f0416cdd2b2cb4bb8768c55190c5a98f652a3e79cf3854d640b9973c93ceaa5113", 0x45}, {&(0x7f0000000680)="09b84d0f307114d996c651165130e877df52407599e822f24856d6c5d494e20acd68ab1bde3225900c3d7656c62064e5b2f85772c689f908f9ee0762ee52fb7298f0cd5f33c7ed79ba6d7eb7494b2e3aabff6a342ada95bc03ca9afa2304a1f112d2d21be33f4853ed646add1e41539c9424370b6c955f4c10769de4777b9fd2f76788e9786418be8d1e58621e5c9515", 0x90}], 0x5, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee00}}}], 0x20, 0x2000}, 0x24008811) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r7, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e", 0xa2, 0x20000000, &(0x7f0000000800)=@pppoe={0x18, 0x0, {0x3, @local, 'veth0_to_hsr\x00'}}, 0x80) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 3m31.048534051s ago: executing program 2 (id=1279): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x88) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 3m30.850750693s ago: executing program 3 (id=1280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) poll(&(0x7f0000000240)=[{r1, 0x421a}], 0x1, 0x7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m29.401668303s ago: executing program 2 (id=1281): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1, 0xb3}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2310c6f9}) fcntl$lock(r0, 0x26, &(0x7f0000000400)={0x0, 0x2, 0x7, 0x6}) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x7}) 3m29.303365126s ago: executing program 3 (id=1282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 3m29.258613149s ago: executing program 4 (id=1283): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x15, 0x5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000107, 0x0, 0x8000000000000000}]}) 3m29.05021151s ago: executing program 2 (id=1284): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfc, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x40, 0x2}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x56, &(0x7f0000000540)=@string={0x56, 0x3, "947d7804ee264c7bef8c99e535b0750bb182adc35b098d7e3ace25f513e7f4ecefd5a4b2ff1c1090e9fc35d69cc4be4c114660ae8a6d3c446946341df8aa47fb935c39226cf708bfd880ec4013f7e4db20dbe0dc"}}, {0x0, 0x0}]}) 3m28.781967294s ago: executing program 4 (id=1285): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff990908", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r1, &(0x7f0000000800)="5b8529ae2468f4df9c", 0x9, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/27, 0x1b}], 0x1, 0x9, 0x3dfc) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x6}, {0xb, 0x5}}}}, 0x9) 3m28.089590189s ago: executing program 3 (id=1286): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m27.237688216s ago: executing program 1 (id=1287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r1, &(0x7f000000a400)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x0) 3m27.229112417s ago: executing program 2 (id=1288): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x78, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0xa07, @private2, 0x60}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3m27.04259453s ago: executing program 1 (id=1289): socket$l2tp(0x2, 0x2, 0x73) ptrace(0x4207, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) 3m26.908160826s ago: executing program 1 (id=1290): mknod(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x205b9a) open(&(0x7f0000000240)='./file0\x00', 0x80, 0x4) acct(&(0x7f0000000040)='./file0\x00') 3m26.764317696s ago: executing program 1 (id=1291): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 3m10.064411772s ago: executing program 32 (id=1276): r0 = openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) mkdirat(0xffffffffffffff9c, 0x0, 0x100) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) 3m10.010790854s ago: executing program 33 (id=1291): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 3m9.864264411s ago: executing program 34 (id=1288): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x78, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0xa07, @private2, 0x60}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3m9.734175645s ago: executing program 35 (id=1286): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m9.593376762s ago: executing program 36 (id=1285): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff990908", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r1, &(0x7f0000000800)="5b8529ae2468f4df9c", 0x9, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/27, 0x1b}], 0x1, 0x9, 0x3dfc) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x6}, {0xb, 0x5}}}}, 0x9) 1m14.922943294s ago: executing program 7 (id=1459): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, 0x0, 0x107842, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x33fe0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x40, 0xfe}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x90) inotify_init1(0x800) 1m13.531998169s ago: executing program 7 (id=1461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 1m13.214381246s ago: executing program 7 (id=1463): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r1, &(0x7f0000000800)="5b8529ae2468f4", 0x7, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/27, 0x1b}], 0x1, 0x9, 0x3dfc) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x6}, {0xb, 0x5}}}}, 0x9) 1m9.191363276s ago: executing program 7 (id=1467): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x68ae75cc59057aa3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.574878794s ago: executing program 7 (id=1471): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x200, @loopback, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 1m1.246768792s ago: executing program 7 (id=1472): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 45.992571075s ago: executing program 37 (id=1472): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 18.946031887s ago: executing program 9 (id=1535): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) mkdirat(0xffffffffffffff9c, 0x0, 0x100) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x24, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 18.211769425s ago: executing program 9 (id=1536): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r0, &(0x7f0000000580)=""/174, 0xae) 17.774747293s ago: executing program 9 (id=1538): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f00000033c0), 0x0, 0x881) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000fcdbdf2500"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) io_uring_setup(0x3eaf, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe}) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x585452c9, 0x0, 0x1, [{0x4, 0x2}, {0x8, 0x9}, {0x7, 0x1000}, {0x6, 0x7}, {0x7, 0x3}, {0x2, 0x4}, {0x101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000000c0)={r6, r7, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000040)}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 15.140773209s ago: executing program 0 (id=1492): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0xffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) socket$nl_generic(0x10, 0x3, 0x10) 15.138549473s ago: executing program 8 (id=1542): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) 12.771877204s ago: executing program 0 (id=1543): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_open_dev$vim2m(&(0x7f0000000000), 0x10, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) 12.754543632s ago: executing program 6 (id=1544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000107, 0x0, 0x8000000000000000}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c050005000200000005000100"], 0x70}}, 0x8000) membarrier(0x2, 0x0) 12.738388216s ago: executing program 8 (id=1545): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f00000036c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x9) 11.558353192s ago: executing program 8 (id=1546): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) mkdirat(0xffffffffffffff9c, 0x0, 0x100) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x24, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.063690229s ago: executing program 6 (id=1547): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf8"], 0x0}, 0x0) 10.949533159s ago: executing program 5 (id=1548): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) socket$inet6_sctp(0xa, 0x1, 0x84) 10.327048368s ago: executing program 0 (id=1549): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f00000036c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x9) 10.169266696s ago: executing program 6 (id=1550): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f00000033c0), 0x0, 0x881) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000fcdbdf2500"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) io_uring_setup(0x3eaf, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe}) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x585452c9, 0x0, 0x1, [{0x4, 0x2}, {0x8, 0x9}, {0x7, 0x1000}, {0x6, 0x7}, {0x7, 0x3}, {0x2, 0x4}, {0x101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000000c0)={r6, r7, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000040)}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 9.652382476s ago: executing program 8 (id=1551): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 8.478357693s ago: executing program 9 (id=1552): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 7.213809674s ago: executing program 8 (id=1553): socketpair$unix(0x1, 0x2, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 7.029586378s ago: executing program 5 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 5.927613463s ago: executing program 5 (id=1555): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) 5.822389429s ago: executing program 0 (id=1556): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.806228468s ago: executing program 6 (id=1557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000107, 0x0, 0x8000000000000000}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c050005000200000005000100"], 0x70}}, 0x8000) membarrier(0x2, 0x0) 5.692230286s ago: executing program 6 (id=1558): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 5.427784453s ago: executing program 5 (id=1559): socketpair$unix(0x1, 0x2, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 5.049352318s ago: executing program 8 (id=1560): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 4.784656978s ago: executing program 0 (id=1561): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) mkdirat(0xffffffffffffff9c, 0x0, 0x100) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.602716516s ago: executing program 5 (id=1562): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.168644806s ago: executing program 0 (id=1563): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000002c0)={0x5, 0x101, {}, {0xee01}, 0x8, 0x315c}) mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2.473286017s ago: executing program 6 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c94e13cfdab5200000510000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcedf71a2c001280110001006272696467655f736c617665000000001400058005000800000000000500090000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000226000/0x2000)=nil, 0x2000}}) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r3, &(0x7f00000000c0)=""/144, 0x90, 0x2f) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f00000000c0)=0x10008e, 0x180000504) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000002c0)={0x5, 0x101, {}, {0xee01}, 0x8, 0x315c}) mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) syz_open_procfs(0x0, 0x0) 2.168344355s ago: executing program 9 (id=1565): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 2.143995131s ago: executing program 5 (id=1566): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f00000036c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x9) 0s ago: executing program 9 (id=1567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') kernel console output (not intermixed with test programs): point descriptor with address 0xFF, changing to 0x8F [ 615.639636][ T6284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 615.639659][ T6284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 615.639679][ T6284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 615.639720][ T6284] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 615.639743][ T6284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.738810][ T6284] usb 3-1: config 0 descriptor?? [ 616.363064][ T6284] usbhid 3-1:0.0: can't add hid device: -71 [ 616.363183][ T6284] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 616.383202][ T6284] usb 3-1: USB disconnect, device number 71 [ 616.573533][ T56] hid-generic 0080:0005:FFFFFFFE.0026: unknown main item tag 0x0 [ 616.573557][ T56] hid-generic 0080:0005:FFFFFFFE.0026: unknown main item tag 0x0 [ 616.606889][ T56] hid-generic 0080:0005:FFFFFFFE.0026: hidraw0: HID v0.03 Device [syz0] on syz1 [ 616.695861][T10523] fido_id[10523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 617.084518][ T56] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 617.204496][ T6284] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 617.234390][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 617.236283][ T56] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 617.236308][ T56] usb 4-1: config 0 has no interface number 0 [ 617.236356][ T56] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.236374][ T56] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.236396][ T56] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 617.236411][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.243025][ T56] usb 4-1: config 0 descriptor?? [ 617.384347][ T6284] usb 5-1: Using ep0 maxpacket: 16 [ 617.390566][ T6284] usb 5-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 617.390623][ T6284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 617.390651][ T6284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 617.390686][ T6284] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 617.390709][ T6284] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.466071][ T6284] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 617.466103][ T6284] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 617.466124][ T6284] usb 5-1: Manufacturer: syz [ 617.509115][ T6284] usb 5-1: config 0 descriptor?? [ 617.886046][ T6284] rc_core: IR keymap rc-hauppauge not found [ 617.886073][ T6284] Registered IR keymap rc-empty [ 617.886468][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 617.912629][ T56] uclogic 0003:28BD:0094.0027: pen parameters not found [ 617.912649][ T56] uclogic 0003:28BD:0094.0027: interface is invalid, ignoring [ 617.920054][ T56] usb 4-1: USB disconnect, device number 58 [ 617.947380][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 617.965925][ T6284] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 618.007164][ T6284] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input81 [ 618.037776][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.056455][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.086630][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.115305][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.134735][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.144463][ T9] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 618.165615][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.184749][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.204819][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.224749][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.254685][ T6284] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 618.284287][ T6284] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 618.284314][ T6284] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 618.352985][ T6284] usb 5-1: USB disconnect, device number 66 [ 619.239685][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 619.239744][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 619.239773][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.239800][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 619.239826][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 619.299692][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 619.299749][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 619.299764][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.299778][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 619.299792][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 619.300761][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 619.300834][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 619.300859][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.300873][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 619.300886][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 619.368652][ T9] usb 1-1: string descriptor 0 read error: -22 [ 619.368797][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 619.368821][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.493717][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 619.585712][T10553] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1192'. [ 619.687194][ T1237] hid-generic 0080:0005:FFFFFFFE.0028: unknown main item tag 0x0 [ 619.687229][ T1237] hid-generic 0080:0005:FFFFFFFE.0028: unknown main item tag 0x0 [ 619.690694][ T1237] hid-generic 0080:0005:FFFFFFFE.0028: hidraw0: HID v0.03 Device [syz0] on syz1 [ 619.707436][ T61] Bluetooth: hci2: unexpected event for opcode 0x080e [ 619.740299][ T31] usb 1-1: USB disconnect, device number 57 [ 620.189761][ T6284] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 620.196729][T10561] fido_id[10561]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 620.334411][ T31] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 620.365080][ T6284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 620.389603][ T6284] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 620.389624][ T6284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.389634][ T6284] usb 4-1: Product: syz [ 620.389642][ T6284] usb 4-1: Manufacturer: syz [ 620.389650][ T6284] usb 4-1: SerialNumber: syz [ 620.428583][ T6284] usb 4-1: config 0 descriptor?? [ 620.496572][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 620.496607][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 620.496632][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 620.496654][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 620.496697][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 620.496719][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.506250][ T31] usb 2-1: config 0 descriptor?? [ 620.635322][T10556] kAFS: unable to lookup cell '\,' [ 620.639918][ T6284] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 620.640019][ T6284] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 620.669023][ T6284] usb 4-1: USB disconnect, device number 59 [ 620.942486][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 620.942606][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 620.959852][ T31] usb 2-1: USB disconnect, device number 72 [ 621.626611][ T5952] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 621.626759][ T6284] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 621.628392][ T31] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 621.775237][ T6284] usb 5-1: Using ep0 maxpacket: 32 [ 621.775482][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 621.777777][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 621.777833][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 621.777919][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 621.777945][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 621.777971][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 621.779136][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.779165][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.779200][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 621.779222][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.779310][ T6284] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 621.779329][ T6284] usb 5-1: config 0 has no interface number 0 [ 621.779367][ T6284] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.779392][ T6284] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.779425][ T6284] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 621.779448][ T6284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.783397][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 621.783451][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 621.783477][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 621.783502][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 621.783527][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 621.804382][ T1237] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 621.831828][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 621.831897][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 621.831925][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 621.831949][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 621.831974][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 621.848374][ T5952] usb 4-1: string descriptor 0 read error: -22 [ 621.848518][ T5952] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 621.848541][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.954340][ T6284] usb 5-1: config 0 descriptor?? [ 621.954685][ T31] usb 3-1: config 0 descriptor?? [ 622.014401][ T1237] usb 2-1: Using ep0 maxpacket: 16 [ 622.056797][ T5952] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 622.136500][ T1237] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 622.136580][ T1237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.136608][ T1237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 622.136635][ T1237] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 622.136658][ T1237] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.138021][ T1237] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 622.138049][ T1237] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 622.138069][ T1237] usb 2-1: Manufacturer: syz [ 622.267834][ T1237] usb 2-1: config 0 descriptor?? [ 622.300459][ T5952] usb 4-1: USB disconnect, device number 60 [ 622.521880][ T31] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 622.521918][ T31] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 622.667972][ T6284] uclogic 0003:28BD:0094.0029: pen parameters not found [ 622.667999][ T6284] uclogic 0003:28BD:0094.0029: interface is invalid, ignoring [ 622.689466][ T1237] rc_core: IR keymap rc-hauppauge not found [ 622.689487][ T1237] Registered IR keymap rc-empty [ 622.690436][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.718598][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.719475][ T31] ft260 0003:0403:6030.002A: chip code: 0000 0000 [ 622.723630][ T6284] usb 5-1: USB disconnect, device number 67 [ 622.757294][ T1237] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 622.781095][ T1237] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input82 [ 622.808188][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.839692][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.854942][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.874990][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.904770][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.921983][ T31] ft260 0003:0403:6030.002A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 622.935973][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.954871][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.975448][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 622.994934][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 623.015065][ T1237] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 623.051041][ T1237] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 623.052400][ T1237] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 623.085763][ T1237] usb 2-1: USB disconnect, device number 73 [ 623.123893][ T31] ft260 0003:0403:6030.002A: failed to retrieve status: -32, no wakeup [ 623.128528][ T31] ft260 0003:0403:6030.002A: failed to retrieve status: -32 [ 623.144682][ T31] ft260 0003:0403:6030.002A: failed to reset I2C controller: -71 [ 623.508147][ T37] audit: type=1800 audit(1770544479.623:9): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1205" name="bus" dev="ramfs" ino=26517 res=0 errno=0 [ 623.509008][ T31] usb 3-1: USB disconnect, device number 72 [ 624.566737][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.566810][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.638675][ T1237] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 625.403466][ T1237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 625.403535][ T1237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 625.403563][ T1237] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.403589][ T1237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 625.403615][ T1237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 625.462443][ T1237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 625.462500][ T1237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 625.462516][ T1237] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.462529][ T1237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 625.462542][ T1237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 625.526182][ T1237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 625.526240][ T1237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 625.526269][ T1237] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.526294][ T1237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 625.526320][ T1237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 625.539933][ T1237] usb 5-1: string descriptor 0 read error: -22 [ 625.540081][ T1237] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 625.540105][ T1237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.756373][ T1237] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 625.898885][ T9] hid-generic 0080:0005:FFFFFFFE.002B: unknown main item tag 0x0 [ 625.898920][ T9] hid-generic 0080:0005:FFFFFFFE.002B: unknown main item tag 0x0 [ 625.934045][ T9] hid-generic 0080:0005:FFFFFFFE.002B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 625.991506][ T61] Bluetooth: hci3: unexpected event for opcode 0x080e [ 626.002107][ T56] usb 5-1: USB disconnect, device number 68 [ 626.252817][T10615] fido_id[10615]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 626.334396][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 626.532634][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.655422][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 626.655454][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.655474][ T9] usb 4-1: Product: syz [ 626.655499][ T9] usb 4-1: Manufacturer: syz [ 626.655513][ T9] usb 4-1: SerialNumber: syz [ 626.847592][ T9] usb 4-1: config 0 descriptor?? [ 627.088476][T10612] kAFS: unable to lookup cell '\,' [ 627.091711][ T9] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 627.091806][ T9] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 627.142141][ T9] usb 4-1: USB disconnect, device number 61 [ 627.314433][ T5809] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 627.477230][ T5809] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 627.477293][ T5809] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 627.477321][ T5809] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.479199][ T5809] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 627.479259][ T5809] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 627.479286][ T5809] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.481302][ T5809] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 627.481361][ T5809] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 627.481389][ T5809] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.521003][ T5809] usb 1-1: string descriptor 0 read error: -22 [ 627.521153][ T5809] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 627.521177][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.632227][ T5809] adutux 1-1:168.0: interrupt endpoints not found [ 629.001296][ T56] usb 1-1: USB disconnect, device number 58 [ 629.008798][ T61] Bluetooth: hci2: unexpected event for opcode 0x080e [ 630.855670][T10643] binder: BINDER_SET_CONTEXT_MGR already set [ 630.855688][T10643] binder: 10641:10643 ioctl 4018620d 200000004a80 returned -16 [ 630.915469][ T5809] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 631.066746][ T5809] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 631.066808][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.068296][ T5809] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 631.068324][ T5809] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 631.068345][ T5809] usb 4-1: Manufacturer: syz [ 631.076756][ T5809] usb 4-1: config 0 descriptor?? [ 632.104365][ T5809] rc_core: IR keymap rc-hauppauge not found [ 632.104389][ T5809] Registered IR keymap rc-empty [ 632.106157][ T5809] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 632.151967][ T5809] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83 [ 632.194290][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 632.234552][ T5952] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 632.614386][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 632.616493][ T5952] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 632.616547][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.616573][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 632.616598][ T5952] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 632.616621][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.618021][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 632.618048][ T5952] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 632.618068][ T5952] usb 1-1: Manufacturer: syz [ 632.656243][T10640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.658937][ T5952] usb 1-1: config 0 descriptor?? [ 632.660506][T10640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.145094][ T5952] rc_core: IR keymap rc-hauppauge not found [ 633.145115][ T5952] Registered IR keymap rc-empty [ 633.145534][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.178653][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.196501][ T5952] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 633.199142][ T5952] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input84 [ 633.205570][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.324157][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.336477][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.356542][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.374932][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.396006][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.523926][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.534881][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.556145][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.574740][ T5952] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 633.621793][ T5952] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 633.621819][ T5952] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 633.697505][ T5952] usb 1-1: USB disconnect, device number 59 [ 633.937815][ T1899] usb 4-1: USB disconnect, device number 62 [ 635.501476][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 635.707924][ T31] hid-generic 0080:0005:FFFFFFFE.002C: unknown main item tag 0x0 [ 635.707961][ T31] hid-generic 0080:0005:FFFFFFFE.002C: unknown main item tag 0x0 [ 635.712658][ T31] hid-generic 0080:0005:FFFFFFFE.002C: hidraw0: HID v0.03 Device [syz0] on syz1 [ 635.786089][ T1899] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 635.900201][T10766] fido_id[10766]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 635.904435][ T31] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 635.936740][ T1899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 635.937449][ T1899] usb 5-1: not running at top speed; connect to a high speed hub [ 635.938905][ T1899] usb 5-1: config 56 has an invalid interface number: 216 but max is 0 [ 635.938931][ T1899] usb 5-1: config 56 has no interface number 0 [ 635.938976][ T1899] usb 5-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 635.939004][ T1899] usb 5-1: config 56 interface 216 has no altsetting 0 [ 635.941184][ T1899] usb 5-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 635.941211][ T1899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.941230][ T1899] usb 5-1: Product: syz [ 635.941238][ T1899] usb 5-1: Manufacturer: syz [ 635.941247][ T1899] usb 5-1: SerialNumber: syz [ 635.964970][T10757] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 636.049615][ T5952] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 636.054625][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 636.057398][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.057460][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 636.057535][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 636.057561][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 636.057584][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.063054][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 636.063083][ T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 636.063156][ T31] usb 4-1: Manufacturer: syz [ 636.082331][ T31] usb 4-1: config 0 descriptor?? [ 636.198053][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 636.207457][ T5952] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 636.207702][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.207724][ T5952] usb 1-1: Product: syz [ 636.207739][ T5952] usb 1-1: Manufacturer: syz [ 636.207752][ T5952] usb 1-1: SerialNumber: syz [ 636.341742][ T5952] usb 1-1: config 0 descriptor?? [ 636.406716][ T1899] hub 5-1:56.216: bad descriptor, ignoring hub [ 636.406757][ T1899] hub 5-1:56.216: probe with driver hub failed with error -5 [ 636.430121][ T1899] option 5-1:56.216: GSM modem (1-port) converter detected [ 636.571830][T10765] kAFS: unable to lookup cell '\,' [ 636.609362][ T5952] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 636.609510][ T5952] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 636.642421][T10772] syzkaller0: entered promiscuous mode [ 636.642446][T10772] syzkaller0: entered allmulticast mode [ 636.652664][ T5952] usb 1-1: USB disconnect, device number 60 [ 636.656195][ T1899] usb 5-1: USB disconnect, device number 69 [ 636.707819][ T1899] option 5-1:56.216: device disconnected [ 637.180832][ T1899] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 638.194380][ T1899] usb 5-1: Using ep0 maxpacket: 32 [ 638.217385][ T1899] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.217412][ T1899] usb 5-1: config 0 has no interface number 0 [ 638.217671][ T1899] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.217698][ T1899] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.217735][ T1899] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 638.217971][ T1899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.242307][ T1899] usb 5-1: config 0 descriptor?? [ 638.480225][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1277'. [ 638.845426][ T31] rc_core: IR keymap rc-hauppauge not found [ 638.845449][ T31] Registered IR keymap rc-empty [ 638.847151][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 638.884657][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 638.908641][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 638.930401][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input85 [ 639.924627][ T1899] uclogic 0003:28BD:0094.002D: failed retrieving string descriptor #100: -71 [ 639.924693][ T1899] uclogic 0003:28BD:0094.002D: failed retrieving pen parameters: -71 [ 639.924712][ T1899] uclogic 0003:28BD:0094.002D: pen probing failed: -71 [ 639.924730][ T1899] uclogic 0003:28BD:0094.002D: failed probing parameters: -71 [ 639.924835][ T1899] uclogic 0003:28BD:0094.002D: probe with driver uclogic failed with error -71 [ 639.987353][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 639.993102][ T1899] usb 5-1: USB disconnect, device number 70 [ 640.004658][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 640.022729][T10813] binder: 10812:10813 ioctl c0306201 0 returned -14 [ 640.036464][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 640.057484][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 640.074719][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 640.163334][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 640.174811][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 640.194901][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 640.224808][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 640.246372][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 640.267302][ T31] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 640.267327][ T31] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 640.302139][ T31] usb 4-1: USB disconnect, device number 63 [ 640.516035][ T37] audit: type=1800 audit(1770544496.623:10): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1283" name="bus" dev="ramfs" ino=27100 res=0 errno=0 [ 640.924446][ T31] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 641.075472][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 641.094924][ T31] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 641.094958][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 641.101238][ T31] usb 3-1: string descriptor 0 read error: -22 [ 641.101324][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 641.101336][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.104389][ T6284] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 641.171496][T10825] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 641.259012][ T6284] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 641.259048][ T6284] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 641.259063][ T6284] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.259906][ T6284] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 641.259934][ T6284] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 641.259947][ T6284] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.260761][ T6284] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 641.260788][ T6284] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 641.260803][ T6284] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.263381][ T6284] usb 5-1: string descriptor 0 read error: -22 [ 641.263465][ T6284] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 641.263477][ T6284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.309268][ T6284] adutux 5-1:168.0: interrupt endpoints not found [ 641.400780][ T9] usb 3-1: USB disconnect, device number 73 [ 642.614456][T10840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1289'. [ 642.785160][T10842] Process accounting resumed [ 642.864372][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 643.329814][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 659.060957][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.061017][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 659.237875][ T5952] usb 5-1: USB disconnect, device number 71 [ 659.383873][ T9] usb 3-1: string descriptor 0 read error: -71 [ 659.383923][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 659.383948][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 659.437476][ T9] usb 3-1: config 0 descriptor?? [ 659.438044][ T9] usb 3-1: can't set config #0, error -71 [ 659.461546][ T9] usb 3-1: USB disconnect, device number 74 [ 660.011546][T10853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 660.029126][T10853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 660.047848][T10853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 660.053899][T10853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 660.056725][T10853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 660.366298][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 660.388629][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 660.392775][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 660.415036][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 660.446779][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 660.717104][T10853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 660.725544][T10853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 660.728288][T10853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 660.731528][T10853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 660.757934][T10853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 660.997686][T10853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 661.002878][T10853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 661.004182][T10853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 661.029902][ T5808] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 661.035639][ T5808] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 661.088075][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 661.093059][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 661.094509][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 661.114589][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 661.130450][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 662.154706][ T5808] Bluetooth: hci5: command tx timeout [ 662.554636][ T5808] Bluetooth: hci6: command tx timeout [ 662.874447][ T5808] Bluetooth: hci7: command tx timeout [ 663.088494][T10852] chnl_net:caif_netlink_parms(): no params data found [ 663.118195][ T5808] Bluetooth: hci8: command tx timeout [ 663.357696][T10856] chnl_net:caif_netlink_parms(): no params data found [ 663.364615][ T5808] Bluetooth: hci9: command tx timeout [ 663.383919][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.384048][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.384204][T10852] bridge_slave_0: entered allmulticast mode [ 663.396997][T10852] bridge_slave_0: entered promiscuous mode [ 663.428959][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.429067][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.429371][T10852] bridge_slave_1: entered allmulticast mode [ 663.430741][T10852] bridge_slave_1: entered promiscuous mode [ 663.458461][T10858] chnl_net:caif_netlink_parms(): no params data found [ 663.582528][T10852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.620562][T10852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.680067][T10860] chnl_net:caif_netlink_parms(): no params data found [ 663.749200][T10852] team0: Port device team_slave_0 added [ 663.749633][T10862] chnl_net:caif_netlink_parms(): no params data found [ 663.767093][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.767164][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.767341][T10856] bridge_slave_0: entered allmulticast mode [ 663.768774][T10856] bridge_slave_0: entered promiscuous mode [ 663.804499][T10852] team0: Port device team_slave_1 added [ 663.916579][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.916675][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.916806][T10856] bridge_slave_1: entered allmulticast mode [ 663.918249][T10856] bridge_slave_1: entered promiscuous mode [ 663.993081][T10858] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.993188][T10858] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.993313][T10858] bridge_slave_0: entered allmulticast mode [ 663.995598][T10858] bridge_slave_0: entered promiscuous mode [ 664.060528][T10858] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.060639][T10858] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.060947][T10858] bridge_slave_1: entered allmulticast mode [ 664.062314][T10858] bridge_slave_1: entered promiscuous mode [ 664.063757][T10852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.063767][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.063782][T10852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.084012][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.161880][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.162514][T10852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.162523][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.162538][T10852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.234586][ T5808] Bluetooth: hci5: command tx timeout [ 664.278994][T10858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.309210][T10860] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.309372][T10860] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.309551][T10860] bridge_slave_0: entered allmulticast mode [ 664.310984][T10860] bridge_slave_0: entered promiscuous mode [ 664.324063][T10858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.349506][T10856] team0: Port device team_slave_0 added [ 664.352291][T10860] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.352431][T10860] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.352606][T10860] bridge_slave_1: entered allmulticast mode [ 664.357818][T10860] bridge_slave_1: entered promiscuous mode [ 664.381868][T10862] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.381996][T10862] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.382430][T10862] bridge_slave_0: entered allmulticast mode [ 664.386007][T10862] bridge_slave_0: entered promiscuous mode [ 664.390656][T10856] team0: Port device team_slave_1 added [ 664.440798][T10862] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.440891][T10862] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.441155][T10862] bridge_slave_1: entered allmulticast mode [ 664.442515][T10862] bridge_slave_1: entered promiscuous mode [ 664.493712][T10858] team0: Port device team_slave_0 added [ 664.523807][T10852] hsr_slave_0: entered promiscuous mode [ 664.525504][T10852] hsr_slave_1: entered promiscuous mode [ 664.526434][T10852] debugfs: 'hsr0' already exists in 'hsr' [ 664.526459][T10852] Cannot create hsr debugfs directory [ 664.530502][T10860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.536814][T10858] team0: Port device team_slave_1 added [ 664.562365][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.562381][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.562406][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.591362][T10860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.599989][T10862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.601931][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.601952][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.601978][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.634516][ T5808] Bluetooth: hci6: command tx timeout [ 664.646028][T10862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.698467][T10858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.698486][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.698510][T10858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.750991][T10860] team0: Port device team_slave_0 added [ 664.751537][T10858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.751545][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.751560][T10858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.813429][T10860] team0: Port device team_slave_1 added [ 664.816579][T10862] team0: Port device team_slave_0 added [ 664.850677][T10862] team0: Port device team_slave_1 added [ 664.907561][T10856] hsr_slave_0: entered promiscuous mode [ 664.908433][T10856] hsr_slave_1: entered promiscuous mode [ 664.908990][T10856] debugfs: 'hsr0' already exists in 'hsr' [ 664.909006][T10856] Cannot create hsr debugfs directory [ 664.954444][ T5808] Bluetooth: hci7: command tx timeout [ 665.195473][ T5808] Bluetooth: hci8: command tx timeout [ 665.376474][T10860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.376487][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.376502][T10860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.431532][T10860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.431551][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.431566][T10860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.432974][T10862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.432984][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.432998][T10862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.436581][ T5808] Bluetooth: hci9: command tx timeout [ 665.452945][T10858] hsr_slave_0: entered promiscuous mode [ 665.454971][T10858] hsr_slave_1: entered promiscuous mode [ 665.455889][T10858] debugfs: 'hsr0' already exists in 'hsr' [ 665.455912][T10858] Cannot create hsr debugfs directory [ 665.504824][T10862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.504848][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.504875][T10862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.680900][T10860] hsr_slave_0: entered promiscuous mode [ 665.681701][T10860] hsr_slave_1: entered promiscuous mode [ 665.682245][T10860] debugfs: 'hsr0' already exists in 'hsr' [ 665.682260][T10860] Cannot create hsr debugfs directory [ 665.828151][T10862] hsr_slave_0: entered promiscuous mode [ 665.829048][T10862] hsr_slave_1: entered promiscuous mode [ 665.829651][T10862] debugfs: 'hsr0' already exists in 'hsr' [ 665.829669][T10862] Cannot create hsr debugfs directory [ 666.314463][ T5808] Bluetooth: hci5: command tx timeout [ 666.368601][T10852] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 666.428808][T10852] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 666.473816][T10852] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 666.538707][T10852] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 666.656108][T10856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 666.702056][T10856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 666.714764][ T5808] Bluetooth: hci6: command tx timeout [ 666.723010][T10856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 666.791934][T10856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 666.951715][T10858] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 666.989564][T10858] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 667.032989][T10858] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 667.035608][ T5808] Bluetooth: hci7: command tx timeout [ 667.100339][T10858] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 667.273047][T10862] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 667.275949][ T5808] Bluetooth: hci8: command tx timeout [ 667.326440][T10862] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 667.367425][T10862] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 667.427601][T10862] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 667.471380][T10852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.514918][ T5808] Bluetooth: hci9: command tx timeout [ 667.588694][T10860] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 667.633166][T10860] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 667.663136][T10860] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 667.701751][T10852] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.704920][T10860] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 667.776753][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.776874][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.816576][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.816669][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.819810][T10856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.912390][T10856] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.960992][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.961066][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.993613][T10858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.004106][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.007263][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.086153][T10858] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.106579][T10862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.138304][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.138462][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.192623][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.193169][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.237203][T10862] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.288534][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.288769][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.296177][T10860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.353968][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.355227][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.394490][ T5808] Bluetooth: hci5: command tx timeout [ 668.450406][T10860] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.493795][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.494041][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.546075][T10852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.581954][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.582441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.785945][T10856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.794490][ T5808] Bluetooth: hci6: command tx timeout [ 669.114769][ T5808] Bluetooth: hci7: command tx timeout [ 669.301197][T10858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.358097][ T5808] Bluetooth: hci8: command tx timeout [ 669.454723][T10852] veth0_vlan: entered promiscuous mode [ 669.501401][T10862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.522849][T10852] veth1_vlan: entered promiscuous mode [ 669.599664][ T5808] Bluetooth: hci9: command tx timeout [ 669.707637][T10852] veth0_macvtap: entered promiscuous mode [ 669.746334][T10852] veth1_macvtap: entered promiscuous mode [ 669.782338][T10860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.856886][T10852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.882124][T10852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.962813][ T1013] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.979158][ T1013] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.994234][ T1013] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.025028][T10856] veth0_vlan: entered promiscuous mode [ 670.026250][ T1013] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.127878][T10856] veth1_vlan: entered promiscuous mode [ 670.377138][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.377158][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.383922][T10858] veth0_vlan: entered promiscuous mode [ 670.483377][T10858] veth1_vlan: entered promiscuous mode [ 670.484044][ T1453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.484062][ T1453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.513634][T10856] veth0_macvtap: entered promiscuous mode [ 670.523966][T10862] veth0_vlan: entered promiscuous mode [ 670.550495][T10856] veth1_macvtap: entered promiscuous mode [ 670.577246][T10862] veth1_vlan: entered promiscuous mode [ 670.598485][T10860] veth0_vlan: entered promiscuous mode [ 670.612388][T10856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.655882][T10856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.675036][T10860] veth1_vlan: entered promiscuous mode [ 670.687258][T10858] veth0_macvtap: entered promiscuous mode [ 670.742412][ T1013] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.754491][ T1013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.868635][T10858] veth1_macvtap: entered promiscuous mode [ 670.872647][ T1013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.896296][ T1013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.001518][T10862] veth0_macvtap: entered promiscuous mode [ 671.951668][T10862] veth1_macvtap: entered promiscuous mode [ 671.965915][T10858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.090023][T10858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.090665][T10860] veth0_macvtap: entered promiscuous mode [ 672.213614][T10860] veth1_macvtap: entered promiscuous mode [ 672.245843][ T1013] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.277052][ T1013] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.288752][ T1013] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.385984][T10862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.386067][ T1013] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.412090][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.412105][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.438674][T10862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.698866][ T43] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.734741][ T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.739349][T10860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.740985][ T43] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.772247][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.772263][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.868564][ T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.907252][T10860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.137045][ T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.153194][ T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.198570][ T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.331259][ T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.356483][ T8338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.356503][ T8338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.699602][ T4522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.699623][ T4522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.744417][ T5807] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 675.864419][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 675.867125][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.867145][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.894392][ T5807] usb 6-1: Using ep0 maxpacket: 16 [ 675.903937][ T5807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 675.903971][ T5807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 675.923581][ T5807] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 675.923612][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.923633][ T5807] usb 6-1: Product: syz [ 675.923648][ T5807] usb 6-1: Manufacturer: syz [ 675.923664][ T5807] usb 6-1: SerialNumber: syz [ 675.947860][ T5807] usb 6-1: config 0 descriptor?? [ 676.015381][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 676.035491][ T10] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 676.035522][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 676.045054][ T1453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.045071][ T1453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.064482][ T10] usb 7-1: language id specifier not provided by device, defaulting to English [ 676.125177][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 676.125571][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.125593][ T10] usb 7-1: Manufacturer: 綔Ѹ⛮筌賯뀵୵花쎭ज़纍츺헯늤᳿逐ﳩ혵쒜䲾䘑깠涊䐼䙩ᴴ꫸קּ岓∹뼈胘䃬󘃠 [ 676.125616][ T10] usb 7-1: SerialNumber: syz [ 676.199947][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 676.204097][T10995] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 676.293748][ T5807] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input86 [ 676.344205][ T5807] imon:send_packet: packet tx failed (-71) [ 676.364977][ T5807] imon 6-1:0.0: panel buttons/knobs setup failed [ 676.563847][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.563868][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.551976][ T10] usb 7-1: USB disconnect, device number 2 [ 677.794349][ T5807] rc_core: IR keymap rc-imon-pad not found [ 677.794373][ T5807] Registered IR keymap rc-empty [ 677.794458][ T5807] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 677.794477][ T5807] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 677.794796][ T5807] imon:send_packet: packet tx failed (-71) [ 677.840511][ T5807] imon 6-1:0.0: remote input dev register failed [ 677.840679][ T5807] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 678.553473][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.553493][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.689233][ T5911] hid-generic 0080:0005:FFFFFFFE.002E: unknown main item tag 0x0 [ 678.689272][ T5911] hid-generic 0080:0005:FFFFFFFE.002E: unknown main item tag 0x0 [ 678.764963][ T5807] imon 6-1:0.0: unable to initialize intf0, err 0 [ 678.764985][ T5807] imon:imon_probe: failed to initialize context! [ 678.764998][ T5807] imon 6-1:0.0: unable to register, err -19 [ 678.766310][ T5911] hid-generic 0080:0005:FFFFFFFE.002E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 678.944895][ T5807] usb 6-1: USB disconnect, device number 2 [ 679.024413][ T1899] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 679.124793][ T5886] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 679.218274][ T1899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.218310][ T1899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.218349][ T1899] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 679.218373][ T1899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.569598][ T1899] usb 7-1: config 0 descriptor?? [ 680.084101][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 680.113961][ T5886] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 680.113993][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.114070][ T5886] usb 8-1: Product: syz [ 680.114087][ T5886] usb 8-1: Manufacturer: syz [ 680.114102][ T5886] usb 8-1: SerialNumber: syz [ 681.095770][ T5886] usb 8-1: config 0 descriptor?? [ 682.364433][T11010] kAFS: unable to lookup cell '\,' [ 682.584438][ T1899] usb 7-1: string descriptor 0 read error: -71 [ 682.585260][ T1899] uclogic 0003:256C:006D.002F: failed retrieving string descriptor #200: -71 [ 682.585320][ T1899] uclogic 0003:256C:006D.002F: failed retrieving pen parameters: -71 [ 682.585338][ T1899] uclogic 0003:256C:006D.002F: failed probing pen v2 parameters: -71 [ 682.585386][ T1899] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 682.585516][ T1899] uclogic 0003:256C:006D.002F: probe with driver uclogic failed with error -71 [ 682.592896][ T5886] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 682.592998][ T5886] dvb_usb_af9035 8-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 682.637944][ T5886] usb 8-1: USB disconnect, device number 2 [ 682.642209][ T1899] usb 7-1: USB disconnect, device number 3 [ 686.056828][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.056898][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.349902][T11061] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1311'. [ 686.563465][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 686.827716][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 687.863753][ T31] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 687.863787][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.863808][ T31] usb 7-1: Product: syz [ 687.863823][ T31] usb 7-1: Manufacturer: syz [ 687.863838][ T31] usb 7-1: SerialNumber: syz [ 687.913138][ T31] usb 7-1: config 0 descriptor?? [ 687.919552][ T31] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 688.483807][ T31] gspca_sonixj: reg_w1 err -110 [ 688.483914][ T31] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 689.365983][ T10] usb 7-1: USB disconnect, device number 4 [ 689.434403][ T5807] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 689.588855][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.592762][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.592805][ T5807] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 689.627249][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.820741][ T5807] usb 8-1: config 0 descriptor?? [ 690.879479][ T5807] usb 8-1: string descriptor 0 read error: -71 [ 690.879993][ T5807] uclogic 0003:256C:006D.0030: failed retrieving string descriptor #200: -71 [ 690.880052][ T5807] uclogic 0003:256C:006D.0030: failed retrieving pen parameters: -71 [ 690.880071][ T5807] uclogic 0003:256C:006D.0030: failed probing pen v2 parameters: -71 [ 690.880125][ T5807] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 690.880233][ T5807] uclogic 0003:256C:006D.0030: probe with driver uclogic failed with error -71 [ 690.971245][ T5807] usb 8-1: USB disconnect, device number 3 [ 691.269973][T11092] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 693.132174][ T37] audit: type=1800 audit(1770544549.213:11): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1320" name="bus" dev="ramfs" ino=31229 res=0 errno=0 [ 693.444042][T11119] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1322'. [ 693.515981][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1323'. [ 695.344658][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 695.494744][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 695.509631][ T10] usb 7-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 695.509691][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.509720][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 695.509744][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 695.509870][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.513238][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 695.513268][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 695.513288][ T10] usb 7-1: Manufacturer: syz [ 695.623857][ T10] usb 7-1: config 0 descriptor?? [ 696.194481][ T10] rc_core: IR keymap rc-hauppauge not found [ 696.194496][ T10] Registered IR keymap rc-empty [ 696.194854][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.214738][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.236524][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 696.239640][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input88 [ 696.350752][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.382777][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.406917][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.430146][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.446931][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.522877][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.535650][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.561556][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.588338][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.607089][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 696.673828][ T10] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 696.673855][ T10] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 696.752354][ T10] usb 7-1: USB disconnect, device number 5 [ 699.664482][ T5886] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 699.684403][ T5807] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 699.814373][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 699.816476][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 699.816507][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 699.846741][ T5807] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 699.846803][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.848091][ T5807] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 699.848119][ T5807] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 699.848139][ T5807] usb 8-1: Manufacturer: syz [ 699.863384][ T5807] usb 8-1: config 0 descriptor?? [ 699.928660][ T5886] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 699.928692][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.928713][ T5886] usb 7-1: Product: syz [ 699.928728][ T5886] usb 7-1: Manufacturer: syz [ 699.928742][ T5886] usb 7-1: SerialNumber: syz [ 699.973611][ T5886] usb 7-1: config 0 descriptor?? [ 700.204361][ T5807] rc_core: IR keymap rc-hauppauge not found [ 700.204382][ T5807] Registered IR keymap rc-empty [ 700.206093][ T5807] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 700.232640][ T5807] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input89 [ 700.260477][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 700.311107][ T5886] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input90 [ 700.335928][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 700.340300][ T5886] imon:send_packet: packet tx failed (-71) [ 700.354635][ T5886] imon 7-1:0.0: panel buttons/knobs setup failed [ 700.415858][T11168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.416400][T11168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.704467][ T5886] rc_core: IR keymap rc-imon-pad not found [ 700.704488][ T5886] Registered IR keymap rc-empty [ 700.704566][ T5886] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 700.704585][ T5886] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 700.704914][ T5886] imon:send_packet: packet tx failed (-71) [ 700.726424][ T5886] imon 7-1:0.0: remote input dev register failed [ 700.726587][ T5886] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 700.794743][ T5807] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 700.944464][ T5807] usb 10-1: Using ep0 maxpacket: 16 [ 700.944636][ T5886] imon 7-1:0.0: unable to initialize intf0, err 0 [ 700.944653][ T5886] imon:imon_probe: failed to initialize context! [ 700.944664][ T5886] imon 7-1:0.0: unable to register, err -19 [ 700.960284][ T5807] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 700.960356][ T5807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.960377][ T5807] usb 10-1: Product: syz [ 700.960391][ T5807] usb 10-1: Manufacturer: syz [ 700.960405][ T5807] usb 10-1: SerialNumber: syz [ 701.010987][ T5886] usb 7-1: USB disconnect, device number 6 [ 701.062632][T11163] syzkaller0: entered promiscuous mode [ 701.062656][T11163] syzkaller0: entered allmulticast mode [ 701.414375][ T5886] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 701.496268][T10847] usb 8-1: USB disconnect, device number 4 [ 701.562348][ T5807] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 701.584420][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 701.586491][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 701.586525][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 701.589186][ T5886] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 701.589211][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.589228][ T5886] usb 7-1: Product: syz [ 701.589240][ T5886] usb 7-1: Manufacturer: syz [ 701.589252][ T5886] usb 7-1: SerialNumber: syz [ 701.873391][ T5886] usb 7-1: config 0 descriptor?? [ 702.794651][ T5886] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input92 [ 702.868466][T11177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.880930][ T5807] snd-usb-audio 10-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 702.912001][T11177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.097742][ T5886] rc_core: IR keymap rc-imon-pad not found [ 703.097769][ T5886] Registered IR keymap rc-empty [ 703.097908][ T5886] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 703.097927][ T5886] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 703.134425][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 703.293138][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 703.293173][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 703.293200][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 703.293223][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 703.293266][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 703.293342][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.309304][ T10] usb 9-1: config 0 descriptor?? [ 703.502669][ T5886] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 703.574457][ T5886] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input93 [ 703.623676][ T5886] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:7> initialized [ 703.663653][T10896] udevd[10896]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 703.862541][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.863978][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.864007][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.864024][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.864039][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.864066][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.869916][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.869951][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.869977][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.870003][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 703.951049][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 703.954706][ T10] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 703.976413][T11019] usb 10-1: USB disconnect, device number 2 [ 704.006255][ T5807] usb 7-1: USB disconnect, device number 7 [ 704.031249][ T10] usb 9-1: USB disconnect, device number 2 [ 704.245197][T11178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.360809][T11194] fido_id[11194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 704.734935][T11200] binder: 11196:11200 ioctl c0d05605 0 returned -22 [ 704.796352][T11199] syz.6.1341 (11199): drop_caches: 2 [ 706.232224][T11206] binder: BINDER_SET_CONTEXT_MGR already set [ 706.232240][T11206] binder: 11201:11206 ioctl 4018620d 200000004a80 returned -16 [ 707.870718][T11222] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 711.247511][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.247535][T11247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.325593][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.325613][T11247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.666663][T11251] binder: BINDER_SET_CONTEXT_MGR already set [ 711.666679][T11251] binder: 11249:11251 ioctl 4018620d 200000004a80 returned -16 [ 714.196418][T11269] tipc: Enabling of bearer rejected, failed to enable media [ 714.196953][T11269] syzkaller0: entered promiscuous mode [ 714.196967][T11269] syzkaller0: entered allmulticast mode [ 714.914410][ T5886] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 715.076214][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.076249][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.076281][ T5886] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 715.076293][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.194691][ T5886] usb 9-1: config 0 descriptor?? [ 716.308904][T11283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1365'. [ 716.482432][ T5886] usb 9-1: string descriptor 0 read error: -71 [ 716.637498][ T5886] uclogic 0003:256C:006D.0032: failed retrieving string descriptor #200: -71 [ 716.637559][ T5886] uclogic 0003:256C:006D.0032: failed retrieving pen parameters: -71 [ 716.637575][ T5886] uclogic 0003:256C:006D.0032: failed probing pen v2 parameters: -71 [ 716.637624][ T5886] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 716.637723][ T5886] uclogic 0003:256C:006D.0032: probe with driver uclogic failed with error -71 [ 717.472905][ T5886] usb 9-1: USB disconnect, device number 3 [ 718.913453][T11300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 718.913638][T11300] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 718.913970][T11300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 724.399639][ T37] audit: type=1800 audit(1770544580.513:12): pid=11319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1373" name="bus" dev="ramfs" ino=31659 res=0 errno=0 [ 725.373824][T11332] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1376'. [ 726.079223][T11338] syzkaller0: entered promiscuous mode [ 726.079239][T11338] syzkaller0: entered allmulticast mode [ 726.284631][ T1237] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 726.506542][ T1237] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 726.506603][ T1237] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 726.506628][ T1237] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 726.506641][ T1237] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 726.506655][ T1237] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 726.507729][ T1237] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 726.507780][ T1237] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 726.507807][ T1237] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 726.507822][ T1237] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 726.507836][ T1237] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 726.508816][ T1237] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 726.508866][ T1237] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 726.508894][ T1237] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 726.508914][ T1237] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 726.508927][ T1237] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 726.511885][ T1237] usb 7-1: string descriptor 0 read error: -22 [ 726.512001][ T1237] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 726.512015][ T1237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.564845][ T1237] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 729.845344][ T1899] usb 7-1: USB disconnect, device number 8 [ 729.850467][T11359] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1385'. [ 731.214357][ T1237] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 731.371962][ T1237] usb 9-1: Using ep0 maxpacket: 32 [ 731.405060][ T1237] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.405081][ T1237] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.405104][ T1237] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 731.405116][ T1237] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.469910][T11367] netlink: 'syz.6.1387': attribute type 62 has an invalid length. [ 731.479343][ T1237] usb 9-1: config 0 descriptor?? [ 731.706829][ T1237] usbhid 9-1:0.0: can't add hid device: -71 [ 731.706924][ T1237] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 731.709228][ T1237] usb 9-1: USB disconnect, device number 4 [ 731.949682][T11375] bridge_slave_0: left allmulticast mode [ 731.949705][T11375] bridge_slave_0: left promiscuous mode [ 732.040297][T11375] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.134381][ T5911] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 732.227836][T11375] bridge_slave_1: left allmulticast mode [ 732.227868][T11375] bridge_slave_1: left promiscuous mode [ 732.228111][T11375] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.284409][ T5911] usb 10-1: Using ep0 maxpacket: 32 [ 732.288700][ T5911] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.288742][ T5911] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.288781][ T5911] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 732.288804][ T5911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.353611][ T5911] usb 10-1: config 0 descriptor?? [ 732.522472][T11375] bond0: (slave bond_slave_0): Releasing backup interface [ 732.622212][T11375] bond0: (slave bond_slave_1): Releasing backup interface [ 732.795521][ T5911] hid_parser_main: 5 callbacks suppressed [ 732.795545][ T5911] ft260 0003:0403:6030.0033: unknown main item tag 0x0 [ 732.795576][ T5911] ft260 0003:0403:6030.0033: unknown main item tag 0x0 [ 732.920001][T11375] team0: Port device team_slave_0 removed [ 732.984520][ T5911] ft260 0003:0403:6030.0033: chip code: 0000 0000 [ 733.134194][T11375] team0: Port device team_slave_1 removed [ 733.149336][T11375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.149412][T11375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.188661][ T5911] ft260 0003:0403:6030.0033: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0 [ 733.212225][T11375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.212369][T11375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.272595][T11375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 733.393393][ T5911] ft260 0003:0403:6030.0033: failed to retrieve status: -32, no wakeup [ 733.403224][ T5911] ft260 0003:0403:6030.0033: failed to retrieve status: -5 [ 733.614523][ T5911] ft260 0003:0403:6030.0033: failed to reset I2C controller: -71 [ 733.700497][ T5911] usb 10-1: USB disconnect, device number 3 [ 734.014477][ T5971] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 734.185983][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.186017][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.186052][ T5971] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 734.186074][ T5971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.196437][ T5971] usb 8-1: config 0 descriptor?? [ 734.395764][ T5886] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 734.544380][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 734.585816][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.585908][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.585948][ T5886] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 734.585971][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.943256][ T5886] usb 6-1: config 0 descriptor?? [ 735.526181][ T5886] ft260 0003:0403:6030.0035: unknown main item tag 0x0 [ 735.526206][ T5886] ft260 0003:0403:6030.0035: unknown main item tag 0x0 [ 735.562031][ T5971] usb 8-1: string descriptor 0 read error: -71 [ 735.562591][ T5971] uclogic 0003:256C:006D.0034: failed retrieving string descriptor #200: -71 [ 735.562655][ T5971] uclogic 0003:256C:006D.0034: failed retrieving pen parameters: -71 [ 735.562672][ T5971] uclogic 0003:256C:006D.0034: failed probing pen v2 parameters: -71 [ 735.562724][ T5971] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 735.562831][ T5971] uclogic 0003:256C:006D.0034: probe with driver uclogic failed with error -71 [ 735.573635][ T5971] usb 8-1: USB disconnect, device number 5 [ 736.013906][ T5886] ft260 0003:0403:6030.0035: chip code: 0000 0000 [ 736.297793][ T5886] ft260 0003:0403:6030.0035: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 736.500246][ T5886] ft260 0003:0403:6030.0035: failed to retrieve status: -32, no wakeup [ 736.764373][ T5886] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 737.598116][ T5971] usb 6-1: USB disconnect, device number 3 [ 738.019595][T11416] overlayfs: overlapping lowerdir path [ 738.137261][T11417] overlayfs: overlapping lowerdir path [ 738.938086][T11425] bridge_slave_0: left allmulticast mode [ 738.938117][T11425] bridge_slave_0: left promiscuous mode [ 738.938365][T11425] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.944366][ T37] audit: type=1800 audit(1770544595.053:13): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1400" name="bus" dev="ramfs" ino=32936 res=0 errno=0 [ 739.280127][T11425] bridge_slave_1: left allmulticast mode [ 739.280161][T11425] bridge_slave_1: left promiscuous mode [ 739.280386][T11425] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.444578][T11436] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 740.074487][ T5971] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 740.274477][ T5971] usb 8-1: Using ep0 maxpacket: 16 [ 740.277077][ T5971] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.277131][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.277159][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 740.277186][ T5971] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 740.277209][ T5971] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.281544][ T5971] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 740.281572][ T5971] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 740.281593][ T5971] usb 8-1: Manufacturer: syz [ 740.377717][ T5971] usb 8-1: config 0 descriptor?? [ 740.426302][T11425] bond0: (slave bond_slave_0): Releasing backup interface [ 740.514450][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 740.535780][T11425] bond0: (slave bond_slave_1): Releasing backup interface [ 740.629276][T11425] team0: Port device team_slave_0 removed [ 740.674430][ T5971] rc_core: IR keymap rc-hauppauge not found [ 740.674454][ T5971] Registered IR keymap rc-empty [ 740.674903][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 740.676103][T11425] team0: Port device team_slave_1 removed [ 740.676734][T11425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.676750][T11425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.686184][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 740.686215][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 740.686239][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 740.686260][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 740.686295][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.686316][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.789822][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 740.806328][ T9] usb 10-1: config 0 descriptor?? [ 740.806753][ T5971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 740.809390][ T5971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input94 [ 740.833433][T11425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.833462][T11425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.862663][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 740.875754][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 740.898535][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 740.934481][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 740.961002][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 740.967269][T11425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 740.974726][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 740.994780][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 741.015135][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 741.036066][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 741.054773][ T5971] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 741.096076][ T5971] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 741.096103][ T5971] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 741.138741][ T5971] usb 8-1: USB disconnect, device number 6 [ 741.263780][ T9] plantronics 0003:047F:FFFF.0036: ignoring exceeding usage max [ 741.265279][ T9] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 741.265314][ T9] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 741.265341][ T9] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 741.265367][ T9] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 741.265393][ T9] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 741.391146][ T9] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 741.509637][T11447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.796201][T11443] usb 10-1: string descriptor 0 read error: -71 [ 744.121294][ T37] audit: type=1800 audit(1770544600.233:14): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1412" name="bus" dev="ramfs" ino=33897 res=0 errno=0 [ 744.162225][ T1237] usb 10-1: USB disconnect, device number 4 [ 744.525711][T11482] overlayfs: missing 'lowerdir' [ 750.012040][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.012111][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.458328][T11498] bridge_slave_0: left allmulticast mode [ 750.458351][T11498] bridge_slave_0: left promiscuous mode [ 750.458487][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.672453][T11498] bridge_slave_1: left allmulticast mode [ 750.672482][T11498] bridge_slave_1: left promiscuous mode [ 750.672735][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.905245][T11498] bond0: (slave bond_slave_0): Releasing backup interface [ 752.108372][T11513] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 752.876196][T11498] bond0: (slave bond_slave_1): Releasing backup interface [ 753.048319][T11498] team0: Port device team_slave_0 removed [ 753.118607][T11498] team0: Port device team_slave_1 removed [ 753.119194][T11498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.119209][T11498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.462291][T11498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.462320][T11498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.524413][T10847] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 753.531776][T11498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 753.814831][T10847] usb 9-1: Using ep0 maxpacket: 16 [ 754.978541][T10847] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 754.978575][T10847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.978596][T10847] usb 9-1: Product: syz [ 754.978610][T10847] usb 9-1: Manufacturer: syz [ 754.978625][T10847] usb 9-1: SerialNumber: syz [ 755.665686][T10847] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 755.763797][ T37] audit: type=1800 audit(1770544611.873:15): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1429" name="bus" dev="ramfs" ino=33108 res=0 errno=0 [ 755.933264][T10847] snd-usb-audio 9-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 756.065436][T10993] udevd[10993]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.132185][T11519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.132481][T11519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.965500][ T1237] usb 9-1: USB disconnect, device number 5 [ 758.354447][ T1237] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 758.714432][ T1237] usb 9-1: Using ep0 maxpacket: 16 [ 758.716238][ T1237] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.716273][ T1237] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.716287][ T1237] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 758.716299][ T1237] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 758.716311][ T1237] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.717285][ T1237] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.717301][ T1237] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 758.717312][ T1237] usb 9-1: Manufacturer: syz [ 758.720117][ T1237] usb 9-1: config 0 descriptor?? [ 761.624214][ T1237] rc_core: IR keymap rc-hauppauge not found [ 761.624237][ T1237] Registered IR keymap rc-empty [ 761.624432][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 761.688155][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.605930][ T1237] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 762.609149][ T1237] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input95 [ 762.664573][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.687607][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.706364][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.724486][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.746342][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.775036][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.794591][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.815634][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.846380][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.864452][ T1237] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 762.890124][ T1237] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 762.890149][ T1237] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 762.920734][ T1237] usb 9-1: USB disconnect, device number 6 [ 762.998811][T11574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 763.074608][T11019] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 763.346574][T11019] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.346609][T11019] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.346647][T11019] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 763.346671][T11019] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.357925][T11019] usb 10-1: config 0 descriptor?? [ 764.367027][ T1237] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 764.850462][T11019] usb 10-1: language id specifier not provided by device, defaulting to English [ 765.013044][T11590] overlayfs: failed to resolve './file0': -2 [ 766.618513][T11019] uclogic 0003:256C:006D.0037: failed retrieving Huion firmware version: -71 [ 766.618575][T11019] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 766.618679][T11019] uclogic 0003:256C:006D.0037: probe with driver uclogic failed with error -71 [ 766.685174][T11019] usb 10-1: USB disconnect, device number 5 [ 767.236616][T11583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.812475][T11610] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 767.812664][T11610] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 767.813000][T11610] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 769.575635][T11602] tipc: Started in network mode [ 769.575667][T11602] tipc: Node identity 7f000001, cluster identity 4711 [ 769.577803][T11602] tipc: Enabled bearer , priority 10 [ 769.924399][ T1899] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 770.112463][ T1899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 770.115719][ T1899] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 770.115740][ T1899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.115751][ T1899] usb 7-1: Product: syz [ 770.115758][ T1899] usb 7-1: Manufacturer: syz [ 770.115766][ T1899] usb 7-1: SerialNumber: syz [ 770.126601][ T1899] usb 7-1: config 0 descriptor?? [ 770.334069][T11613] kAFS: unable to lookup cell '\,' [ 770.341880][ T1899] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 770.341966][ T1899] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 770.383432][ T1899] usb 7-1: USB disconnect, device number 9 [ 770.694439][ T1899] tipc: Node number set to 2130706433 [ 771.481984][T11627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 773.060900][T11645] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 773.955670][ T37] audit: type=1800 audit(1770544630.073:16): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1454" name="bus" dev="ramfs" ino=33465 res=0 errno=0 [ 774.574483][ T5911] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 775.737151][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.737188][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.737227][ T5911] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 775.737252][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.778499][ T5911] usb 9-1: config 0 descriptor?? [ 776.509165][ T5911] usb 9-1: language id specifier not provided by device, defaulting to English [ 776.713022][ T5911] uclogic 0003:256C:006D.0038: failed retrieving Huion firmware version: -71 [ 776.713059][ T5911] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 776.713119][ T5911] uclogic 0003:256C:006D.0038: probe with driver uclogic failed with error -71 [ 776.810723][ T5911] usb 9-1: USB disconnect, device number 8 [ 776.996750][T10847] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 777.296178][T11676] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 777.296362][T11676] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 777.296704][T11676] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 778.759928][T10847] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 778.759987][T10847] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 778.760016][T10847] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 778.760042][T10847] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 778.760069][T10847] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 778.766693][T10847] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 778.766748][T10847] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 778.766775][T10847] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 778.766801][T10847] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 778.766828][T10847] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 778.768123][T10847] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 778.768173][T10847] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 778.768201][T10847] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 778.768227][T10847] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 778.768253][T10847] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 778.773288][T10847] usb 8-1: string descriptor 0 read error: -22 [ 778.773458][T10847] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 778.773482][T10847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.797208][T10847] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 780.334644][ T1237] usb 8-1: USB disconnect, device number 7 [ 780.994499][T11685] overlayfs: failed to resolve './file0': -2 [ 785.514744][T11693] Bluetooth: hci5: command 0x0406 tx timeout [ 785.514784][T11693] Bluetooth: hci7: command 0x0406 tx timeout [ 785.514808][T11693] Bluetooth: hci8: command 0x0406 tx timeout [ 785.594549][T11692] Bluetooth: hci6: command 0x0406 tx timeout [ 785.594591][T11692] Bluetooth: hci9: command 0x0406 tx timeout [ 786.611953][ T1899] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 786.804801][ T1899] usb 7-1: Using ep0 maxpacket: 16 [ 787.413358][ T1899] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.413420][ T1899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 787.413449][ T1899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 787.413477][ T1899] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 787.413500][ T1899] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.471234][ T1899] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 787.471267][ T1899] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 787.471288][ T1899] usb 7-1: Manufacturer: syz [ 788.240708][T10847] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 788.344676][ T1899] usb 7-1: config 0 descriptor?? [ 788.564363][T10847] usb 9-1: Using ep0 maxpacket: 16 [ 788.615200][T10847] usb 9-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 788.615266][T10847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.615293][T10847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 788.615318][T10847] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 788.615341][T10847] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.617822][T10847] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 788.617853][T10847] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 788.617874][T10847] usb 9-1: Manufacturer: syz [ 788.651004][T10847] usb 9-1: config 0 descriptor?? [ 788.944408][ T1899] rc_core: IR keymap rc-hauppauge not found [ 788.944435][ T1899] Registered IR keymap rc-empty [ 788.945132][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 788.982091][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 789.045217][ T1899] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 789.048407][ T1899] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input96 [ 789.104453][T10847] rc_core: IR keymap rc-hauppauge not found [ 789.104467][T10847] Registered IR keymap rc-empty [ 789.104810][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 789.124752][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 791.377180][T10847] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc1 [ 791.465962][T10847] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc1/input97 [ 791.631412][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 791.644798][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 791.665664][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 791.684884][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 791.704761][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 791.724938][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 791.884470][ T6284] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 792.106563][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 792.115222][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 792.132321][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 792.135140][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 792.144761][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 792.188520][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 792.324389][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 792.344696][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 792.359143][T10847] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 792.365055][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 792.383238][ T6284] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.383258][ T6284] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.383281][ T6284] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 792.383294][ T6284] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.416982][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 793.443834][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 793.454979][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 793.474926][ T1899] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 794.229012][T10847] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 794.229040][T10847] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.230941][ T6284] usb 10-1: config 0 descriptor?? [ 794.265898][ T1899] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 794.265925][ T1899] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.339548][T10847] usb 9-1: USB disconnect, device number 9 [ 794.356623][ T6284] usb 10-1: can't set config #0, error -71 [ 794.409217][ T6284] usb 10-1: USB disconnect, device number 6 [ 794.434693][ T1899] usb 7-1: USB disconnect, device number 10 [ 794.813914][T11742] overlayfs: failed to resolve './file1': -2 [ 798.418010][T11757] overlayfs: failed to resolve './file1': -2 [ 803.123292][T11783] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1490'. [ 804.365171][T10853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.390078][T10853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.393214][T10853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.414768][T10853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 804.415494][T10853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 804.652912][T11791] tipc: Enabling of bearer rejected, already enabled [ 806.062131][ T1237] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 806.316642][ T1237] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 806.316702][ T1237] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.318157][ T1237] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 806.318185][ T1237] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 806.318206][ T1237] usb 10-1: Manufacturer: syz [ 806.323759][ T1237] usb 10-1: config 0 descriptor?? [ 806.555993][ T1237] rc_core: IR keymap rc-hauppauge not found [ 806.556014][ T1237] Registered IR keymap rc-empty [ 806.557732][ T1237] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 806.561034][ T1237] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input98 [ 806.687595][T11691] Bluetooth: hci0: command tx timeout [ 806.732942][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 807.731615][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.738403][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.070680][T11814] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1499'. [ 808.497271][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1499'. [ 809.975264][T11691] Bluetooth: hci0: command tx timeout [ 811.252189][ T5886] usb 10-1: USB disconnect, device number 7 [ 812.150012][T11691] Bluetooth: hci0: command tx timeout [ 812.494358][ T37] audit: type=1800 audit(1770544668.603:17): pid=11845 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1506" name="bus" dev="ramfs" ino=34490 res=0 errno=0 [ 812.864493][ T5886] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 812.972490][T11789] chnl_net:caif_netlink_parms(): no params data found [ 813.008623][T11854] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1507'. [ 813.056851][ T5886] usb 10-1: Using ep0 maxpacket: 16 [ 813.064043][ T5886] usb 10-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 813.064119][ T5886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 813.064147][ T5886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 813.064175][ T5886] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 813.064198][ T5886] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.069219][ T5886] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 813.069250][ T5886] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 813.069271][ T5886] usb 10-1: Manufacturer: syz [ 813.087008][ T5886] usb 10-1: config 0 descriptor?? [ 813.368474][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1507'. [ 813.464456][ T1899] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 813.484519][ T5886] rc_core: IR keymap rc-hauppauge not found [ 813.484541][ T5886] Registered IR keymap rc-empty [ 813.484969][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 813.505041][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 813.564787][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 813.568529][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input99 [ 813.615174][ T1899] usb 9-1: Using ep0 maxpacket: 16 [ 813.623159][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 813.625877][ T1899] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 813.625905][ T1899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.626027][ T1899] usb 9-1: Product: syz [ 813.626041][ T1899] usb 9-1: Manufacturer: syz [ 813.626056][ T1899] usb 9-1: SerialNumber: syz [ 813.645181][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 813.677816][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.678563][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.679116][T11789] bridge_slave_0: entered allmulticast mode [ 813.679397][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 813.694819][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 813.844466][T11789] bridge_slave_0: entered promiscuous mode [ 813.866192][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.866382][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.866813][T11789] bridge_slave_1: entered allmulticast mode [ 813.933106][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.933165][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.956269][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 814.013566][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 814.022321][T11789] bridge_slave_1: entered promiscuous mode [ 814.028554][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 814.055379][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 814.075019][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 814.104867][ T5886] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 814.137682][ T5886] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 814.137710][ T5886] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 814.154412][T11691] Bluetooth: hci0: command tx timeout [ 814.203930][ T5886] usb 10-1: USB disconnect, device number 8 [ 814.259507][ T1899] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 814.499279][T11789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.503789][T11789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.617742][ T1899] snd-usb-audio 9-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 814.729644][T11856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.730563][T11856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.763450][T11789] team0: Port device team_slave_0 added [ 814.780671][T11789] team0: Port device team_slave_1 added [ 814.803876][T10993] udevd[10993]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.889207][ T1899] usb 9-1: USB disconnect, device number 10 [ 817.124564][T11789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.124582][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.124609][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.137234][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.137250][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.137275][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.557444][T11789] hsr_slave_0: entered promiscuous mode [ 817.560870][T11789] hsr_slave_1: entered promiscuous mode [ 817.578851][T11789] debugfs: 'hsr0' already exists in 'hsr' [ 817.578884][T11789] Cannot create hsr debugfs directory [ 819.878481][ T37] audit: type=1800 audit(1770544675.993:18): pid=11893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1516" name="bus" dev="ramfs" ino=34594 res=0 errno=0 [ 820.772808][T11900] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 821.722087][T11789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.041227][T11789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.239371][T11923] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 824.596148][T11789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.924333][T10847] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 824.978116][T11928] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 825.075728][T10847] usb 6-1: Using ep0 maxpacket: 16 [ 825.081241][T10847] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 825.081276][T10847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.081294][T10847] usb 6-1: Product: syz [ 825.081306][T10847] usb 6-1: Manufacturer: syz [ 825.081318][T10847] usb 6-1: SerialNumber: syz [ 825.381098][T11789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.669108][T10847] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 825.927955][T10847] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 826.083123][T10993] udevd[10993]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.097682][T11925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.099859][T11925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.309048][T11789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 826.426020][T11789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 826.478823][T11789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 826.703470][T11789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 827.518656][ T5911] usb 6-1: USB disconnect, device number 4 [ 827.832679][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.854387][ T6284] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 828.045424][ T6284] usb 7-1: Using ep0 maxpacket: 32 [ 828.052413][ T6284] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 828.502451][ T6284] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 828.502587][ T6284] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 828.502662][ T6284] usb 7-1: Product: syz [ 828.502700][ T6284] usb 7-1: Manufacturer: syz [ 828.502747][ T6284] usb 7-1: SerialNumber: syz [ 828.823378][ T6284] usb 7-1: config 0 descriptor?? [ 828.912926][T11944] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 828.915103][ T6284] hub 7-1:0.0: bad descriptor, ignoring hub [ 828.915139][ T6284] hub 7-1:0.0: probe with driver hub failed with error -5 [ 828.966856][T11789] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.992279][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.992474][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.080083][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.080236][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.960343][ T1899] usb 7-1: USB disconnect, device number 11 [ 830.302688][T11958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.469343][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.509399][ T37] audit: type=1800 audit(1770544686.623:19): pid=11973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1534" name="bus" dev="ramfs" ino=35227 res=0 errno=0 [ 830.793930][T11789] veth0_vlan: entered promiscuous mode [ 830.848326][T11789] veth1_vlan: entered promiscuous mode [ 830.962500][T11789] veth0_macvtap: entered promiscuous mode [ 830.999059][T11789] veth1_macvtap: entered promiscuous mode [ 831.105001][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.125464][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.178144][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.186091][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.207522][ T1474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.212772][ T1474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.703102][T11979] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 831.870895][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.870919][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.009929][ T1453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.009952][ T1453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.290122][T11989] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1538'. [ 834.666857][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1538'. [ 834.949486][T12003] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 836.176648][T12005] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 838.191126][ T37] audit: type=1800 audit(1770544694.293:20): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1544" name="bus" dev="ramfs" ino=36288 res=0 errno=0 [ 840.551232][T12034] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1550'. [ 840.562733][T12034] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1550'. [ 840.625174][ T1899] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 840.786875][ T1899] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.786911][ T1899] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.786951][ T1899] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 840.786975][ T1899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.793068][ T1899] usb 9-1: config 0 descriptor?? [ 841.449294][ T1899] usb 9-1: language id specifier not provided by device, defaulting to English [ 841.662178][ T1899] uclogic 0003:256C:006D.0039: failed retrieving Huion firmware version: -71 [ 841.662215][ T1899] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 841.662275][ T1899] uclogic 0003:256C:006D.0039: probe with driver uclogic failed with error -71 [ 841.720975][ T1899] usb 9-1: USB disconnect, device number 11 [ 844.089449][T12054] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 851.036072][ T1899] ------------[ cut here ]------------ [ 851.036087][ T1899] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 851.036110][ T1899] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#1: kworker/1:3/1899 [ 851.036163][ T1899] Modules linked in: [ 851.036198][ T1899] CPU: 1 UID: 0 PID: 1899 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 851.036220][ T1899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 851.036233][ T1899] Workqueue: events drm_fb_helper_damage_work [ 851.036262][ T1899] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 851.036286][ T1899] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0f b0 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 851.036305][ T1899] RSP: 0018:ffffc90006597860 EFLAGS: 00010246 [ 851.036321][ T1899] RAX: 1ffff110281fb800 RBX: ffffffff8f52a070 RCX: 0000000000000000 [ 851.036336][ T1899] RDX: ffffffff8b9eb1e0 RSI: ffffffff8ba06f40 RDI: ffffffff8f52a070 [ 851.036351][ T1899] RBP: ffffc90006597948 R08: 0000000000000000 R09: 0000000000000000 [ 851.036364][ T1899] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffffffff8ba06f40 [ 851.036379][ T1899] R13: ffff888140fdc000 R14: 1ffff92000cb2f10 R15: ffffffff8b9eb1e0 [ 851.036394][ T1899] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 851.036410][ T1899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 851.036424][ T1899] CR2: 0000200000218030 CR3: 000000003d47a000 CR4: 00000000003526f0 [ 851.036441][ T1899] Call Trace: [ 851.036450][ T1899] [ 851.036469][ T1899] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 851.036494][ T1899] ? __pfx_autoremove_wake_function+0x10/0x10 [ 851.036518][ T1899] ? rt_spin_unlock+0x160/0x200 [ 851.036542][ T1899] ? drm_vblank_get+0x147/0x260 [ 851.036568][ T1899] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 851.036593][ T1899] drm_fb_helper_damage_work+0x131/0x6f0 [ 851.036620][ T1899] ? process_scheduled_works+0xa0f/0x17a0 [ 851.036644][ T1899] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 851.036670][ T1899] ? preempt_schedule_thunk+0x16/0x30 [ 851.036693][ T1899] ? process_scheduled_works+0xa0f/0x17a0 [ 851.036711][ T1899] ? process_scheduled_works+0xa0f/0x17a0 [ 851.036732][ T1899] process_scheduled_works+0xaec/0x17a0 [ 851.036780][ T1899] ? __pfx_process_scheduled_works+0x10/0x10 [ 851.036797][ T1899] ? do_raw_spin_lock+0x12b/0x2f0 [ 851.036826][ T1899] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 851.036849][ T1899] ? schedule+0x90/0x360 [ 851.036880][ T1899] worker_thread+0xda6/0x1360 [ 851.036917][ T1899] ? __kthread_parkme+0x19c/0x1f0 [ 851.036945][ T1899] kthread+0x726/0x8b0 [ 851.036970][ T1899] ? __pfx_worker_thread+0x10/0x10 [ 851.036990][ T1899] ? __pfx_kthread+0x10/0x10 [ 851.037014][ T1899] ? rt_spin_unlock+0x14f/0x200 [ 851.037038][ T1899] ? rt_spin_unlock+0x160/0x200 [ 851.037056][ T1899] ? __pfx_kthread+0x10/0x10 [ 851.037080][ T1899] ret_from_fork+0x51b/0xa40 [ 851.037102][ T1899] ? __pfx_ret_from_fork+0x10/0x10 [ 851.037121][ T1899] ? __switch_to+0xc82/0x1410 [ 851.037151][ T1899] ? __pfx_kthread+0x10/0x10 [ 851.037174][ T1899] ret_from_fork_asm+0x1a/0x30 [ 851.037215][ T1899] [ 851.037229][ T1899] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 851.037243][ T1899] CPU: 1 UID: 0 PID: 1899 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 851.037264][ T1899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 851.037275][ T1899] Workqueue: events drm_fb_helper_damage_work [ 851.037298][ T1899] Call Trace: [ 851.037306][ T1899] [ 851.037314][ T1899] vpanic+0x1e0/0x670 [ 851.037341][ T1899] panic+0xc5/0xd0 [ 851.037363][ T1899] ? __pfx_panic+0x10/0x10 [ 851.037396][ T1899] ? ret_from_fork_asm+0x1a/0x30 [ 851.037426][ T1899] __warn+0x315/0x4a0 [ 851.037447][ T1899] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 851.037472][ T1899] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 851.037497][ T1899] __report_bug+0x29a/0x540 [ 851.037526][ T1899] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 851.037550][ T1899] ? __pfx___report_bug+0x10/0x10 [ 851.037593][ T1899] report_bug_entry+0x19a/0x290 [ 851.037616][ T1899] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 851.037638][ T1899] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 851.037660][ T1899] handle_bug+0xca/0x200 [ 851.037686][ T1899] exc_invalid_op+0x1a/0x50 [ 851.037711][ T1899] asm_exc_invalid_op+0x1a/0x20 [ 851.037730][ T1899] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 851.037751][ T1899] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0f b0 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 851.037771][ T1899] RSP: 0018:ffffc90006597860 EFLAGS: 00010246 [ 851.037788][ T1899] RAX: 1ffff110281fb800 RBX: ffffffff8f52a070 RCX: 0000000000000000 [ 851.037802][ T1899] RDX: ffffffff8b9eb1e0 RSI: ffffffff8ba06f40 RDI: ffffffff8f52a070 [ 851.037817][ T1899] RBP: ffffc90006597948 R08: 0000000000000000 R09: 0000000000000000 [ 851.037830][ T1899] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffffffff8ba06f40 [ 851.037845][ T1899] R13: ffff888140fdc000 R14: 1ffff92000cb2f10 R15: ffffffff8b9eb1e0 [ 851.037881][ T1899] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 851.037905][ T1899] ? __pfx_autoremove_wake_function+0x10/0x10 [ 851.037927][ T1899] ? rt_spin_unlock+0x160/0x200 [ 851.037951][ T1899] ? drm_vblank_get+0x147/0x260 [ 851.037976][ T1899] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 851.038005][ T1899] drm_fb_helper_damage_work+0x131/0x6f0 [ 851.038032][ T1899] ? process_scheduled_works+0xa0f/0x17a0 [ 851.038056][ T1899] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 851.038081][ T1899] ? preempt_schedule_thunk+0x16/0x30 [ 851.038102][ T1899] ? process_scheduled_works+0xa0f/0x17a0 [ 851.038120][ T1899] ? process_scheduled_works+0xa0f/0x17a0 [ 851.038141][ T1899] process_scheduled_works+0xaec/0x17a0 [ 851.038188][ T1899] ? __pfx_process_scheduled_works+0x10/0x10 [ 851.038205][ T1899] ? do_raw_spin_lock+0x12b/0x2f0 [ 851.038233][ T1899] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 851.038256][ T1899] ? schedule+0x90/0x360 [ 851.038287][ T1899] worker_thread+0xda6/0x1360 [ 851.038323][ T1899] ? __kthread_parkme+0x19c/0x1f0 [ 851.038350][ T1899] kthread+0x726/0x8b0 [ 851.038375][ T1899] ? __pfx_worker_thread+0x10/0x10 [ 851.038394][ T1899] ? __pfx_kthread+0x10/0x10 [ 851.038413][ T1899] ? rt_spin_unlock+0x14f/0x200 [ 851.038438][ T1899] ? rt_spin_unlock+0x160/0x200 [ 851.038456][ T1899] ? __pfx_kthread+0x10/0x10 [ 851.038479][ T1899] ret_from_fork+0x51b/0xa40 [ 851.038502][ T1899] ? __pfx_ret_from_fork+0x10/0x10 [ 851.038520][ T1899] ? __switch_to+0xc82/0x1410 [ 851.038549][ T1899] ? __pfx_kthread+0x10/0x10 [ 851.038572][ T1899] ret_from_fork_asm+0x1a/0x30 [ 851.038613][ T1899] [ 851.039077][ T1899] Kernel Offset: disabled