last executing test programs: 24m3.638795524s ago: executing program 32 (id=315): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) 23m22.670639059s ago: executing program 5 (id=317): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 23m22.181934664s ago: executing program 5 (id=597): bpf$PROG_LOAD(0x5, 0x0, 0x0) 23m21.878059463s ago: executing program 5 (id=600): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 23m21.487043022s ago: executing program 0 (id=605): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x5f}, {0xfffffffffffffffd}}}, 0xb8}}, 0x50) r0 = add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 23m21.288735083s ago: executing program 0 (id=607): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setregid(0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r6}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[], 0x20) 23m20.153768789s ago: executing program 0 (id=608): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 23m19.871323995s ago: executing program 0 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 23m18.230474825s ago: executing program 0 (id=616): r0 = socket$inet6(0xa, 0x3, 0x3c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 23m18.229601622s ago: executing program 5 (id=617): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x5f}, {0xfffffffffffffffd}}}, 0xb8}}, 0x50) r0 = add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 23m17.994428135s ago: executing program 5 (id=620): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) 23m17.734782244s ago: executing program 0 (id=623): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) poll(&(0x7f0000000580)=[{r5, 0x3048}], 0x1, 0x8f) connect$unix(r5, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x0) 23m0.47906816s ago: executing program 33 (id=620): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) 22m56.682454839s ago: executing program 34 (id=623): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) poll(&(0x7f0000000580)=[{r5, 0x3048}], 0x1, 0x8f) connect$unix(r5, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x0) 17m43.805041376s ago: executing program 7 (id=1976): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x424, 0x5a, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8007, 0x180, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000100)={0xa, 0xa9d, 0x3, @mcast1}, 0x1c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 17m40.007299919s ago: executing program 7 (id=1986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0xad45, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x40000000000000b, 0x4d, 0xfff7fffb, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f00000001c0)='./file0\x00') 17m39.696449596s ago: executing program 7 (id=1991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m39.302344236s ago: executing program 7 (id=1995): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) pread64(r0, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 17m38.8024022s ago: executing program 7 (id=1997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 17m37.421429712s ago: executing program 7 (id=1999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800c054) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) 17m36.384119879s ago: executing program 35 (id=1999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800c054) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) 8m45.974636502s ago: executing program 2 (id=3444): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x28, 0x1, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005a2000/0x3000)=nil, 0x3000, 0x19) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffff, r0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x7}, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xfffffffd}) 8m40.13940214s ago: executing program 2 (id=3461): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x22, 0x2, 0x3) sendto$inet6(r2, &(0x7f0000847fff), 0x0, 0x8800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xfffffffa, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "3d186e85f3a07d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r4) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x200, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000400)={0x46, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) 8m38.762324699s ago: executing program 2 (id=3463): r0 = fspick(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000400)={0x0, 0x1ff, 0x6}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5b, 0x521}, &(0x7f0000001080)=0x90) r2 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB="58f173d07c6ffaed28c97f6dac7e1870feb163d9a4a6679c8012f23990465531efa0cd46bd8e5e1459e726183b9932a66bc319", @ANYRES16=r1, @ANYRES16], 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) syz_usb_control_io$hid(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x40, 0x5, 0x55, {0x55, 0x31, "e4100eb15342198b16e39a3e2daf9242988c870e4dbb010543a908867ef71dfb18c49cc3f118d555e57a28e569987770181da73453da21066969802af5858f3f49b9e30ec596f210449d5f8188bd7c0b2114cb"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "c99e48d6ad77d7f6e3abfd89fc67077809774037987adfcdc7e1ae53"}}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x40000000000007b, 0x4004) syz_usb_control_io$hid(r2, 0x0, 0x0) 8m35.22615088s ago: executing program 2 (id=3474): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x0, 0x43, 0xa0, 0x260, 0x98, 0x400, 0x178, 0x178, 0x400, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_to_bond\x00'}, 0x12a, 0xa8, 0x108, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xa, 0x7, 0x0, 0x2], 0x2, 0x6}, {0x1, [0x1, 0x1, 0x1, 0x4, 0x4, 0x7], 0x0, 0x2}}}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@loopback, [], 0x0, 0x0, 0x67}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f, {0x90000, 0x0, 0x0, 0x0, 0xfffffffc}}) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m33.891725207s ago: executing program 2 (id=3476): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x9}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0xffffffff, 0xf761, 0x5c4, {0xff, 0x2, 0x6f83, 0x57e, 0x5}, {0x1, 0x1, 0x1000, 0x280, 0x8, 0x2}, 0x2, 0xfffffdde, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) 8m32.744118273s ago: executing program 2 (id=3480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 8m17.135156658s ago: executing program 36 (id=3480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 4m2.545357694s ago: executing program 4 (id=4072): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xbec, 0xfffffffffffffffb, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002100)=ANY=[], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="040fe80000"], 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x861}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3m58.653339775s ago: executing program 4 (id=4075): inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe6, 0x3, 0x641f, 0xfffff07c, 0x8001], [0x7, 0x18, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x8, 0x800, 0x5]], '\x00', [{0x8000, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x200, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x3, 0x0, 0x1}], '\x00', 0x2}) 3m56.837427834s ago: executing program 4 (id=4078): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m56.806754889s ago: executing program 4 (id=4079): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x0, 0x43, 0xa0, 0x260, 0x98, 0x400, 0x178, 0x178, 0x400, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_to_bond\x00'}, 0x12a, 0xa8, 0x108, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xa, 0x7, 0x0, 0x2], 0x2, 0x6}, {0x1, [0x1, 0x1, 0x1, 0x4, 0x4, 0x7], 0x0, 0x2}}}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@loopback, [], 0x0, 0x0, 0x67}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m55.23132379s ago: executing program 4 (id=4080): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0xb816, 0x0, 0x0, 0x0) 3m55.097510363s ago: executing program 4 (id=4081): r0 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x8, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4008031, &(0x7f0000000080)={0x11, 0x18, r6, 0x1, 0x83, 0x6, @random="4b9bfa4d7da1"}, 0x14) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000140)=""/217, &(0x7f0000000040)=0xd9) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r8 = syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000001b"]) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0x20, r10, 0x4f79951a91b7df8f, 0x70bd2c, 0x3, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r11, &(0x7f0000002100)=""/205, 0xcd) syz_usb_control_io$uac1(r7, 0x0, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x0, 0x8001, {0x0}, {0xee01}, 0xfffffffffffffffd, 0x3}) ptrace$peeksig(0x4209, r13, &(0x7f0000000140)={0x10001}, &(0x7f0000000180)) 3m39.467150238s ago: executing program 37 (id=4081): r0 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x8, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4008031, &(0x7f0000000080)={0x11, 0x18, r6, 0x1, 0x83, 0x6, @random="4b9bfa4d7da1"}, 0x14) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000140)=""/217, &(0x7f0000000040)=0xd9) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r8 = syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000001b"]) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0x20, r10, 0x4f79951a91b7df8f, 0x70bd2c, 0x3, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r11, &(0x7f0000002100)=""/205, 0xcd) syz_usb_control_io$uac1(r7, 0x0, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x0, 0x8001, {0x0}, {0xee01}, 0xfffffffffffffffd, 0x3}) ptrace$peeksig(0x4209, r13, &(0x7f0000000140)={0x10001}, &(0x7f0000000180)) 39.644174026s ago: executing program 1 (id=4487): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r2, 0x2, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={r6}) 39.285367074s ago: executing program 1 (id=4490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 36.306758652s ago: executing program 1 (id=4512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x58c4, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b4562f117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0xfffffffffffffffd, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x73}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r6}) 35.19044677s ago: executing program 1 (id=4520): socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x110, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0xe0, 0x2, [@TCA_BASIC_ACT={0x80, 0x3, [@m_gact={0x7c, 0xe, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x143e, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x13e8, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x25aa, 0x20000003}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x40000002, 0x0, 0x3}}]}, {0x11, 0x6, "435d6adbcfe776fc01021bd1ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xfff2}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x9419dd028165f667}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x565b}, {0x1, 0x3, 0x4}}}, @TCF_EM_META={0x10, 0x1, 0x0, 0x0, {{0xa000, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}]}]}}]}, 0x110}}, 0x20004005) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.210183315s ago: executing program 1 (id=4527): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r4 = accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 31.425349303s ago: executing program 1 (id=4543): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x4020400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x4020400) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0xc8a02, 0x0) 20.993381272s ago: executing program 8 (id=4584): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) 20.497581519s ago: executing program 8 (id=4585): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20001044) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e63, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r2, 0xb) listen(r1, 0x53) 20.010243963s ago: executing program 8 (id=4586): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa0d, 0xfffffffb}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) dup2(0xffffffffffffffff, r2) io_uring_enter(0xffffffffffffffff, 0x47f6, 0xb277, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f0000000200)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000300)={0x7fffffff, 0x0, {r4}, {r5}, 0x7fff, 0x81}) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 19.901100422s ago: executing program 8 (id=4587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.663669206s ago: executing program 8 (id=4589): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x63, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x225, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, &(0x7f0000000380)}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) connect$inet(r3, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x8}, 0x18) socket$kcm(0x29, 0x2, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0x6050, 0x2, 0x3}, 0x18, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000340)={r4, 0xc}) 19.353151938s ago: executing program 8 (id=4590): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x4, 0x288743) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2d8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2a4, 0x2, [@TCA_MATCHALL_ACT={0x2a0, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x120, 0xc, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) 15.647969966s ago: executing program 38 (id=4543): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x4020400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x4020400) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0xc8a02, 0x0) 10.886324492s ago: executing program 3 (id=4606): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 10.070531877s ago: executing program 9 (id=4607): r0 = socket(0x2, 0x3, 0xff) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000040)=0x3d) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x18c) semget$private(0x0, 0x2, 0x45e) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 8.678437799s ago: executing program 9 (id=4609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x140a, 0x100, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4040894}, 0x4008810) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000021c0)="1e", 0x1}], 0x1, &(0x7f0000000200)=ANY=[], 0x10}}], 0x2, 0x4000045) 8.592482207s ago: executing program 9 (id=4610): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d740109730773396000000010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 7.726530424s ago: executing program 3 (id=4614): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r2, 0x6, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x1, 0x3, 0x8}}, 0x120) syz_io_uring_setup(0x1327, &(0x7f0000000080)={0x0, 0x7303, 0x24003, 0x0, 0x2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) dup(0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) fcntl$setsig(r6, 0xa, 0x21) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x2) close(0xffffffffffffffff) 4.464650645s ago: executing program 9 (id=4616): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @loopback, 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r2, 0x84, 0x14, &(0x7f0000000040)="0100000000000000", 0x8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000140)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) r5 = socket$qrtr(0x2a, 0x2, 0x0) syz_usb_connect(0x0, 0x81, 0x0, 0x0) connect$qrtr(r5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x90012, 0xffffffffffffffff, 0xffffe000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "4225c444"}]}}, 0x0}, 0x0) r6 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r6, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x21, 0x62, {0x62, 0xb, "f2d4769d199ca2cf794f72bc6dfe2da12b0ff171c54e9d0f9772c7c03305bc6bba6042f4c389c8b0d6afc2224f3bfa9e7382f7dc878eef1e032d986143fc1b425b6dab386ac8efdb2701f910eed10cc539ba6e8ed9b8508945256d96ccb8bdaa"}}, &(0x7f00000001c0)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "5de7bc14335109719acdb7de49b9daa718a0b076b5ae99fa4eec83d1778eef64abcac048ea304263f744fbe308d9544a853da97ef1feb9da916fd5681686598d55c34c894abb820e05fe9d60ca957db5b60752f0cae3294f78c32f11481dd9f2f867bd546db29702"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000240)={0x40, 0x30, 0x14, "b60eca93908d033e4f1f653eaf267b3621c6b270"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "d51664906e1695b21c677214e75dac483f4d29b5b56ae5c96de313f3adb7f5ef44e3f68a91fef062338466e94f0301"}}) 4.290237175s ago: executing program 3 (id=4617): r0 = socket(0x2, 0x3, 0xff) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000040)=0x3d) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x18c) semget$private(0x0, 0x2, 0x45e) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 3.689127645s ago: executing program 6 (id=4619): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.707264281s ago: executing program 6 (id=4620): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYRES32=r1], 0x90}}, 0x0) 2.706170859s ago: executing program 3 (id=4621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}}, 0x128}}, 0x0) 2.643211127s ago: executing program 6 (id=4622): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000004}, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.627932197s ago: executing program 3 (id=4623): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x1}, 0xf) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.457151203s ago: executing program 3 (id=4624): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0xa, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={r3, 0x4, 0x28}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x12, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1c3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000004c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0x8}, {0x1, 0x2, 0x5, 0x8}], 0x10, 0x2}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x4b46, &(0x7f00000000c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vbi(&(0x7f0000000640), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0585609, &(0x7f0000000000)={0x2, 0x3, 0x4, 0x0, 0x3, {}, {0x2, 0x1, 0x3, 0x69, 0xb, 0x8d, "35679936"}, 0x4, 0x4, {}, 0x9}) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000240)={0xa, 0x2, 0x2, {0x46, 0x13, 0xfffb, 0xf7168000}}) 1.366094042s ago: executing program 9 (id=4625): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008e88052086800095d82cc1020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x3, &(0x7f0000000080)={0x18, "d09bf4f30d7969a0420805782a879867f27c442e2f000cdec22f1ce8a9f7b91865"}}) 859.259744ms ago: executing program 6 (id=4626): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getlink={0x20, 0x12, 0xee279624cde2f6fd, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xac01, 0xc6c5}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b800"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 505.71409ms ago: executing program 6 (id=4627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000102810100000000000000000a0000003c000180"], 0x50}}, 0x0) 283.19116ms ago: executing program 6 (id=4628): socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x248, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x218, 0x2, [@TCA_BASIC_ACT={0x80, 0x3, [@m_gact={0x7c, 0xe, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x143e, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x13e8, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x25aa, 0x20000003}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x40000002, 0x0, 0x3}}]}, {0x11, 0x6, "435d6adbcfe776fc01021bd1ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xfff2}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x9419dd028165f667}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x174, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc8, 0x2, 0x0, 0x0, {{0x9, 0x0, 0xdf5c}, "b20bf7d44d79768efc1025fafaab4d46ccf12c71b182f69bde312ab36d9de9f05ddc05d9606512ff18ee4b3a8f4f90bedcb2eb853369c7509d39f98d7f11deccef7ca8f73e04c0e513090b6d943a107ac7548bb5e1be08c78260bd8dcd1556b3ba9078826a3c418f6c5b35ce69e233bd8618578e5e2a900d034fb4421cd253097fb698fab72ce0ea61b18a239f099aa5a45ed6b6d36fc41c1c1c112e285c61c783b06082f2fc424ad3de19ce730b6eddb3de8f83ef2861bab5dbf8"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xfff}, {0x80000, 0xfff, 0x6, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x6}, {0x1, 0x8001, 0xf001, 0x2, 0x3, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x7}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x2}, {{0x2, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0xf}, {0x3, 0x6, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x565b}, {0x1, 0x3, 0x4}}}, @TCF_EM_META={0x10, 0x1, 0x0, 0x0, {{0xa000, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}]}]}}]}, 0x248}}, 0x20004005) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 9 (id=4629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x20800) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x100000000000000, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') readv(r5, &(0x7f0000000780)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) kernel console output (not intermixed with test programs): 9][T15956] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1265.381954][T15956] input input47: Device does not respond to id packet N [ 1265.382477][T15956] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1265.382826][T15956] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1265.383176][T15956] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1265.385110][T15956] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1265.489074][T15956] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input47 [ 1265.636889][T15956] usb 7-1: USB disconnect, device number 83 [ 1266.479693][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3913'. [ 1266.479743][T18642] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3913'. [ 1266.689425][T15783] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1266.852149][T15783] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1266.852187][T15783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1266.852226][T15783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1266.852270][T15783] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1266.852316][T15783] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1266.852342][T15783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.894007][T15783] usb 5-1: config 0 descriptor?? [ 1267.328507][T15783] usbhid 5-1:0.0: can't add hid device: -71 [ 1267.335032][T15783] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1267.356009][T15783] usb 5-1: USB disconnect, device number 87 [ 1267.998470][T18664] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1267.998495][T18664] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1268.000405][T18664] vhci_hcd vhci_hcd.0: Device attached [ 1268.010423][T18664] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 1268.010457][T18664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1268.010514][T18664] vhci_hcd vhci_hcd.0: Device attached [ 1268.020809][T18664] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 1268.020836][T18664] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1268.020892][T18664] vhci_hcd vhci_hcd.0: Device attached [ 1268.023804][T18664] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 1268.023830][T18664] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1268.023885][T18664] vhci_hcd vhci_hcd.0: Device attached [ 1268.027003][T18664] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 1268.027030][T18664] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1268.027083][T18664] vhci_hcd vhci_hcd.0: Device attached [ 1268.182695][T15956] vhci_hcd: vhci_device speed not set [ 1268.248750][T15956] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1269.173725][T18677] vhci_hcd: connection closed [ 1269.176865][T18673] vhci_hcd: connection closed [ 1269.177222][T18671] vhci_hcd: connection closed [ 1269.177496][T18675] vhci_hcd: connection closed [ 1269.178673][ T37] vhci_hcd: stop threads [ 1269.178694][ T37] vhci_hcd: release socket [ 1269.180280][ T37] vhci_hcd: disconnect device [ 1269.180443][ T37] vhci_hcd: stop threads [ 1269.180453][ T37] vhci_hcd: release socket [ 1269.180517][ T37] vhci_hcd: disconnect device [ 1269.183917][T18669] vhci_hcd: connection reset by peer [ 1269.183923][ T37] vhci_hcd: stop threads [ 1269.183934][ T37] vhci_hcd: release socket [ 1269.184157][ T37] vhci_hcd: disconnect device [ 1269.184800][ T37] vhci_hcd: stop threads [ 1269.184810][ T37] vhci_hcd: release socket [ 1269.185011][ T37] vhci_hcd: disconnect device [ 1269.186172][ T37] vhci_hcd: stop threads [ 1269.186184][ T37] vhci_hcd: release socket [ 1269.186394][ T37] vhci_hcd: disconnect device [ 1269.780598][ T5968] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1269.938722][ T5968] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1269.938752][ T5968] usb 5-1: config 1 has no interface number 0 [ 1269.938805][ T5968] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1269.939734][ T5968] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1269.946680][ T5968] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1269.946703][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.946719][ T5968] usb 5-1: Product: syz [ 1269.946729][ T5968] usb 5-1: Manufacturer: syz [ 1269.946740][ T5968] usb 5-1: SerialNumber: syz [ 1270.050714][T18703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1270.050929][T18703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1270.095558][ T5968] usb 5-1: Expected 3 endpoints, found: 2 [ 1271.488731][ T5968] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1271.651752][ T5968] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1271.651790][ T5968] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1271.651820][ T5968] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1271.651845][ T5968] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1271.651901][ T5968] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1271.651928][ T5968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.657942][ T5968] usb 10-1: config 0 descriptor?? [ 1272.204230][ T5968] usbhid 10-1:0.0: can't add hid device: -71 [ 1272.204337][ T5968] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1272.207591][ T5968] usb 10-1: USB disconnect, device number 22 [ 1273.035800][T15783] usb 5-1: USB disconnect, device number 88 [ 1273.349662][T15956] vhci_hcd: vhci_device speed not set [ 1274.463374][T18741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3938'. [ 1275.022655][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3940'. [ 1277.794782][ T5968] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 1277.958887][ T5968] usb 10-1: Invalid ep0 maxpacket: 64 [ 1278.098749][ T5968] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 1278.259120][ T5968] usb 10-1: Invalid ep0 maxpacket: 64 [ 1278.262610][ T5968] usb usb10-port1: attempt power cycle [ 1278.598748][ T5968] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 1278.620273][ T5968] usb 10-1: Invalid ep0 maxpacket: 64 [ 1278.758879][ T5968] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 1278.782511][ T5968] usb 10-1: Invalid ep0 maxpacket: 64 [ 1278.782910][ T5968] usb usb10-port1: unable to enumerate USB device [ 1279.866785][T18777] trusted_key: encrypted_key: key user:syz not found [ 1280.138847][ C0] vkms_vblank_simulate: vblank timer overrun [ 1281.435474][T13107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1281.459478][T13107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1281.465030][T13107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1281.466699][T13107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1281.467437][T13107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1281.851696][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.338342][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.900849][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.628754][T16291] Bluetooth: hci0: command tx timeout [ 1283.852199][ T13] team0: Port device netdevsim0 removed [ 1283.886913][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.039412][T18809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1284.958159][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3959'. [ 1284.958196][T18821] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3959'. [ 1285.193887][T18791] chnl_net:caif_netlink_parms(): no params data found [ 1285.668868][T16291] Bluetooth: hci0: command tx timeout [ 1287.184704][ T13] bridge_slave_1: left allmulticast mode [ 1287.184739][ T13] bridge_slave_1: left promiscuous mode [ 1287.185039][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.593211][ T13] : left allmulticast mode [ 1287.594653][ T13] : left promiscuous mode [ 1287.594915][ T13] bridge0: port 1() entered disabled state [ 1287.748974][T16291] Bluetooth: hci0: command tx timeout [ 1288.668829][T18850] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1289.885442][T16291] Bluetooth: hci0: command tx timeout [ 1291.965456][T18879] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3970'. [ 1294.777374][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.106579][ T13] dvmrp1 (unregistering): left allmulticast mode [ 1295.272310][T18901] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3975'. [ 1295.958835][T15783] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1296.114183][T15783] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1296.114206][T15783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.114221][T15783] usb 4-1: Product: syz [ 1296.114232][T15783] usb 4-1: Manufacturer: syz [ 1296.114243][T15783] usb 4-1: SerialNumber: syz [ 1296.269941][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.769190][T15783] rtl8150 4-1:1.0: couldn't reset the device [ 1296.769459][T15783] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1296.827416][T15783] usb 4-1: USB disconnect, device number 90 [ 1296.849963][T18409] udevd[18409]: setting owner of /dev/bus/usb/004/090 to uid=0, gid=0 failed: No such file or directory [ 1296.934509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.118910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.360902][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.534734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.434806][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.586383][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.647846][ T13] bond0 (unregistering): Released all slaves [ 1299.664380][ T13] bond1 (unregistering): Released all slaves [ 1299.738264][ T13] bond2 (unregistering): Released all slaves [ 1301.532498][ T13] bond3 (unregistering): Released all slaves [ 1301.599763][ T13] bond4 (unregistering): Released all slaves [ 1302.379850][ T13] tipc: Left network mode [ 1302.768109][T18791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.768274][T18791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.768546][T18791] bridge_slave_0: entered allmulticast mode [ 1302.792101][T18791] bridge_slave_0: entered promiscuous mode [ 1302.861855][T18791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.862011][T18791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.862283][T18791] bridge_slave_1: entered allmulticast mode [ 1302.899214][T18791] bridge_slave_1: entered promiscuous mode [ 1303.301753][ T5887] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1303.458727][ T5887] usb 10-1: Using ep0 maxpacket: 16 [ 1303.462527][ T5887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.462553][ T5887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.462582][ T5887] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1303.462599][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.468231][ T5887] usb 10-1: config 0 descriptor?? [ 1303.931872][ T5887] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 1303.931902][ T5887] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 1303.931923][ T5887] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 1303.931942][ T5887] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 1303.931962][ T5887] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 1303.933592][ T5887] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1304.109212][ T5887] usb 10-1: USB disconnect, device number 27 [ 1304.307833][T18791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.519721][T18791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.597309][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.597419][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.968790][ T5887] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1306.185674][T18984] binder: BINDER_SET_CONTEXT_MGR already set [ 1306.185691][T18984] binder: 18983:18984 ioctl 4018620d 2000000002c0 returned -16 [ 1306.188525][ T5887] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.188571][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1306.199059][ T5887] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1306.199134][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.199158][ T5887] usb 10-1: Product: syz [ 1306.199173][ T5887] usb 10-1: Manufacturer: syz [ 1306.199190][ T5887] usb 10-1: SerialNumber: syz [ 1306.316867][ T5887] usb 10-1: config 0 descriptor?? [ 1306.344302][ T5887] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1306.401408][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1306.403700][ T5887] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1306.403793][ T5887] usb 10-1: media controller created [ 1306.457152][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1306.723835][ T5887] DVB: Unable to find symbol tda10046_attach() [ 1306.723853][ T5887] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1306.723870][ T5887] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1306.800634][ T13] hsr_slave_0: left promiscuous mode [ 1306.844737][ T13] hsr_slave_1: left promiscuous mode [ 1306.847085][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.847115][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.930727][ T5887] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1306.936702][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1306.936733][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.970992][ T5887] usb 10-1: USB disconnect, device number 28 [ 1306.978481][T18826] udevd[18826]: setting owner of /dev/bus/usb/010/028 to uid=0, gid=0 failed: No such file or directory [ 1307.152740][ T13] veth1_macvtap: left promiscuous mode [ 1307.152864][ T13] veth0_macvtap: left promiscuous mode [ 1307.156117][ T13] veth1_vlan: left promiscuous mode [ 1307.156328][ T13] veth0_vlan: left promiscuous mode [ 1307.479015][T15690] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1307.642721][T15690] usb 5-1: config index 0 descriptor too short (expected 215, got 45) [ 1307.653446][T15690] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1307.653485][T15690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.653509][T15690] usb 5-1: Product: syz [ 1307.653525][T15690] usb 5-1: Manufacturer: syz [ 1307.653540][T15690] usb 5-1: SerialNumber: syz [ 1308.031484][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1308.031543][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1308.031566][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1308.135022][T15690] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1308.182571][ T13] pim6reg (unregistering): left allmulticast mode [ 1308.228998][T15690] usb 5-1: USB disconnect, device number 89 [ 1308.664208][T15690] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1308.900907][T15690] usb 5-1: config index 0 descriptor too short (expected 215, got 45) [ 1308.903567][T15690] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1308.903606][T15690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.903626][T15690] usb 5-1: Product: syz [ 1308.903637][T15690] usb 5-1: Manufacturer: syz [ 1308.903650][T15690] usb 5-1: SerialNumber: syz [ 1309.379355][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1309.379424][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1310.652189][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1311.266308][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1311.268281][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1311.268321][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1311.269200][T15690] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1311.331255][T15690] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1311.375061][T15690] usb 5-1: USB disconnect, device number 90 [ 1313.403302][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1314.163647][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1314.531085][ T5887] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1314.738806][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 1314.740958][ T5887] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1314.740977][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.740991][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1314.743498][ T5887] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1314.743520][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.743535][ T5887] usb 5-1: Product: syz [ 1314.743547][ T5887] usb 5-1: Manufacturer: syz [ 1314.743558][ T5887] usb 5-1: SerialNumber: syz [ 1315.763149][ T5887] usb 5-1: 0:2 : does not exist [ 1315.767824][ T5887] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 1315.878816][ T5887] usb 5-1: USB disconnect, device number 91 [ 1316.511458][T19040] binder: BINDER_SET_CONTEXT_MGR already set [ 1316.511474][T19040] binder: 19039:19040 ioctl 4018620d 2000000002c0 returned -16 [ 1316.894163][T19043] fuse: Bad value for 'fd' [ 1317.648799][ T5873] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 1317.818823][ T5873] usb 5-1: Invalid ep0 maxpacket: 64 [ 1317.988899][ T5873] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 1318.138772][ T5873] usb 5-1: Invalid ep0 maxpacket: 64 [ 1318.139259][ T5873] usb usb5-port1: attempt power cycle [ 1318.488810][ T5873] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 1318.548985][ T5873] usb 5-1: Invalid ep0 maxpacket: 64 [ 1318.678830][ T5873] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 1318.700906][ T5873] usb 5-1: Invalid ep0 maxpacket: 64 [ 1318.701449][ T5873] usb usb5-port1: unable to enumerate USB device [ 1319.593010][T18791] team0: Port device team_slave_0 added [ 1319.650591][T18791] team0: Port device team_slave_1 added [ 1320.334147][T18791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.334162][T18791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.334183][T18791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.400043][T18791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.400057][T18791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.400078][T18791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.102272][T18791] hsr_slave_0: entered promiscuous mode [ 1321.145555][T18791] hsr_slave_1: entered promiscuous mode [ 1321.146633][T18791] debugfs: 'hsr0' already exists in 'hsr' [ 1321.146659][T18791] Cannot create hsr debugfs directory [ 1322.895109][ T13] IPVS: stop unused estimator thread 0... [ 1326.158783][T15783] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1326.308803][T15783] usb 4-1: Using ep0 maxpacket: 32 [ 1326.371107][T15783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.371290][T15783] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1326.371317][T15783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.425162][T15783] usb 4-1: config 0 descriptor?? [ 1326.445191][T15783] hub 4-1:0.0: bad descriptor, ignoring hub [ 1326.445222][T15783] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1329.360699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.642849][T18791] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1329.711121][T18791] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1329.896059][T18791] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1329.974499][T18791] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1330.099366][ T5873] usb 4-1: USB disconnect, device number 91 [ 1330.468979][ T5873] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1330.619664][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 1330.667420][ T5873] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1330.667452][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.667473][ T5873] usb 4-1: Product: syz [ 1330.667483][ T5873] usb 4-1: Manufacturer: syz [ 1330.667494][ T5873] usb 4-1: SerialNumber: syz [ 1330.721149][ T5873] usb 4-1: config 0 descriptor?? [ 1330.971816][ T5873] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1331.532584][T18791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.762545][T18791] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.773267][T15751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.773620][T15751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.856205][T11715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.880094][T11715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.446445][ T5873] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1332.496619][ T5873] usb 4-1: USB disconnect, device number 92 [ 1334.007656][T18791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.063963][T19220] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4053'. [ 1338.394280][T18791] veth0_vlan: entered promiscuous mode [ 1338.569483][T18791] veth1_vlan: entered promiscuous mode [ 1338.807453][T18791] veth0_macvtap: entered promiscuous mode [ 1341.198740][T15690] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1341.362874][T15690] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1341.363029][T15690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.363053][T15690] usb 5-1: Product: syz [ 1341.363069][T15690] usb 5-1: Manufacturer: syz [ 1341.363085][T15690] usb 5-1: SerialNumber: syz [ 1341.618336][T13107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1341.637149][T13107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1341.641930][T13107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1341.659773][T13107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1341.660795][T13107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1342.071844][T15690] rtl8150 5-1:1.0: couldn't reset the device [ 1342.072235][T15690] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1342.236919][T15690] usb 5-1: USB disconnect, device number 96 [ 1343.288744][ T5977] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1343.748805][T13107] Bluetooth: hci5: command tx timeout [ 1343.843384][ T5977] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1343.843433][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.843447][ T5977] usb 5-1: Product: syz [ 1343.843458][ T5977] usb 5-1: Manufacturer: syz [ 1343.843469][ T5977] usb 5-1: SerialNumber: syz [ 1343.849445][ T5977] usb 5-1: config 0 descriptor?? [ 1343.871395][ T5977] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1344.862317][ T5977] gspca_sunplus: reg_r err -32 [ 1344.862421][ T5977] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 1345.828761][T13107] Bluetooth: hci5: command tx timeout [ 1345.972348][ T5977] usb 5-1: USB disconnect, device number 97 [ 1346.394383][T19270] chnl_net:caif_netlink_parms(): no params data found [ 1347.718770][T15783] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 1347.868943][T15783] usb 10-1: Invalid ep0 maxpacket: 64 [ 1347.908807][T13107] Bluetooth: hci5: command tx timeout [ 1348.000273][T15783] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 1348.168819][T15783] usb 10-1: Invalid ep0 maxpacket: 64 [ 1348.176102][T15783] usb usb10-port1: attempt power cycle [ 1348.639071][T15783] usb 10-1: new low-speed USB device number 31 using dummy_hcd [ 1348.659739][T15783] usb 10-1: Invalid ep0 maxpacket: 64 [ 1348.788977][T15783] usb 10-1: new low-speed USB device number 32 using dummy_hcd [ 1348.812343][T15783] usb 10-1: Invalid ep0 maxpacket: 64 [ 1348.813586][T15783] usb usb10-port1: unable to enumerate USB device [ 1349.886738][T19270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.890184][T19270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.890510][T19270] bridge_slave_0: entered allmulticast mode [ 1349.925434][T19270] bridge_slave_0: entered promiscuous mode [ 1349.994387][T13107] Bluetooth: hci5: command tx timeout [ 1349.996465][T19270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.996560][T19270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.996751][T19270] bridge_slave_1: entered allmulticast mode [ 1350.033303][T19270] bridge_slave_1: entered promiscuous mode [ 1350.594244][T19270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.642364][T19270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.857187][T19270] team0: Port device team_slave_0 added [ 1352.086270][T19270] team0: Port device team_slave_1 added [ 1352.575598][T19270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.575617][T19270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.575649][T19270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.585696][T19270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.585718][T19270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.585754][T19270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.131149][ T3012] bridge_slave_1: left allmulticast mode [ 1353.131184][ T3012] bridge_slave_1: left promiscuous mode [ 1353.132182][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.241095][ T3012] bridge_slave_0: left allmulticast mode [ 1353.241130][ T3012] bridge_slave_0: left promiscuous mode [ 1353.241503][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.228934][T15783] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1356.508857][T15783] usb 4-1: Using ep0 maxpacket: 16 [ 1358.120692][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.230617][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.260324][ T3012] bond0 (unregistering): Released all slaves [ 1359.095346][T19270] hsr_slave_0: entered promiscuous mode [ 1359.118011][T19270] hsr_slave_1: entered promiscuous mode [ 1359.130484][T19270] debugfs: 'hsr0' already exists in 'hsr' [ 1359.130508][T19270] Cannot create hsr debugfs directory [ 1359.358738][ T5887] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1359.361526][ T3012] hsr_slave_0: left promiscuous mode [ 1359.398913][ T3012] hsr_slave_1: left promiscuous mode [ 1359.400125][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.441622][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.518889][ T5887] usb 10-1: Using ep0 maxpacket: 32 [ 1359.524121][ T5887] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1359.524143][ T5887] usb 10-1: config 0 has no interface number 0 [ 1359.524214][ T5887] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1359.562260][ T5887] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1359.562295][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.562317][ T5887] usb 10-1: Product: syz [ 1359.562332][ T5887] usb 10-1: Manufacturer: syz [ 1359.562348][ T5887] usb 10-1: SerialNumber: syz [ 1359.608090][ T5887] usb 10-1: config 0 descriptor?? [ 1359.611276][T19389] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1359.719039][ T3012] veth0_macvtap: left promiscuous mode [ 1359.720111][ T3012] veth1_vlan: left promiscuous mode [ 1359.723206][ T3012] veth0_vlan: left promiscuous mode [ 1359.907710][T19389] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1360.862379][ T5887] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1360.862415][ T5887] asix 10-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1360.862710][ T5887] asix 10-1:0.188: probe with driver asix failed with error -61 [ 1361.588990][T15783] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1361.590224][T15783] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 1361.590250][T15783] usb 4-1: chopping to 0 config(s) [ 1361.590287][T15783] usb 4-1: can't read configurations, error -32 [ 1362.119969][T15690] usb 10-1: USB disconnect, device number 33 [ 1362.603827][T19411] usb usb8: usbfs: process 19411 (syz.8.4089) did not claim interface 0 before use [ 1362.793556][T15783] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1363.012558][T15783] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1363.012595][T15783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1363.012620][T15783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1363.012636][T15783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1363.012668][T15783] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1363.012686][T15783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.016439][T15783] usb 4-1: config 0 descriptor?? [ 1363.450517][T15783] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1363.657844][T15783] usb 4-1: USB disconnect, device number 95 [ 1363.724368][T19420] fido_id[19420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1364.138928][T15956] usb 10-1: new low-speed USB device number 34 using dummy_hcd [ 1364.388668][T15956] usb 10-1: Invalid ep0 maxpacket: 64 [ 1364.558748][T15956] usb 10-1: new low-speed USB device number 35 using dummy_hcd [ 1364.758740][T15956] usb 10-1: Invalid ep0 maxpacket: 64 [ 1364.780251][T15956] usb usb10-port1: attempt power cycle [ 1365.173919][T15956] usb 10-1: new low-speed USB device number 36 using dummy_hcd [ 1365.194232][ T5887] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1365.217039][T15956] usb 10-1: Invalid ep0 maxpacket: 64 [ 1365.358714][T15956] usb 10-1: new low-speed USB device number 37 using dummy_hcd [ 1365.387443][T15956] usb 10-1: Invalid ep0 maxpacket: 64 [ 1365.387703][T15956] usb usb10-port1: unable to enumerate USB device [ 1365.408803][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 1367.042572][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.042849][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.646345][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 1368.490349][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 1370.710673][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1370.730724][ T5887] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 1370.730756][ T5887] usb 4-1: chopping to 0 config(s) [ 1370.730785][ T5887] usb 4-1: can't read configurations, error -32 [ 1370.869348][ T5887] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1370.998747][ T5887] usb 4-1: device descriptor read/64, error -32 [ 1371.109546][ T5887] usb usb4-port1: attempt power cycle [ 1371.509241][ T5873] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1371.672580][ T5873] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1371.672605][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.672620][ T5873] usb 10-1: Product: syz [ 1371.672631][ T5873] usb 10-1: Manufacturer: syz [ 1371.672641][ T5873] usb 10-1: SerialNumber: syz [ 1371.680627][ T5873] usb 10-1: config 0 descriptor?? [ 1371.686433][ T5873] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1371.711289][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1371.717578][ T5873] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1371.717650][ T5873] usb 10-1: media controller created [ 1371.984049][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1372.573492][T16291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1372.603596][T16291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1372.605929][T16291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1372.608294][T16291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1372.646041][T16291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1372.711114][ T5873] DVB: Unable to find symbol mt352_attach() [ 1372.765936][ T5873] DVB: Unable to find symbol nxt6000_attach() [ 1372.765954][ T5873] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1373.054577][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input49 [ 1373.059434][ T5873] dvb-usb: schedule remote query interval to 1000 msecs. [ 1373.059460][ T5873] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1373.059926][ T5873] dvb-usb: bulk message failed: -22 (7/0) [ 1373.059949][ T5873] dvb-usb: bulk message failed: -22 (7/0) [ 1373.081674][ T5873] usb 10-1: USB disconnect, device number 38 [ 1373.314305][T19472] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4109'. [ 1373.314345][T19472] netlink: 'syz.9.4109': attribute type 7 has an invalid length. [ 1373.314361][T19472] netlink: 'syz.9.4109': attribute type 8 has an invalid length. [ 1373.314375][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4109'. [ 1373.757680][ T5873] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1374.718846][T16291] Bluetooth: hci0: command tx timeout [ 1375.886639][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.978383][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.049191][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.789193][T16291] Bluetooth: hci0: command tx timeout [ 1378.072880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.248009][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.473020][T19523] usb usb8: usbfs: process 19523 (syz.8.4120) did not claim interface 0 before use [ 1378.887041][T16291] Bluetooth: hci0: command tx timeout [ 1379.590068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.066708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.532728][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.668915][T15783] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1380.682322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.906242][T15783] usb 4-1: Using ep0 maxpacket: 16 [ 1380.916363][T15783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.916426][T15783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1380.916457][T15783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1380.916479][T15783] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1380.916504][T15783] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1380.932875][T15783] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1380.932915][T15783] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1380.932941][T15783] usb 4-1: Manufacturer: syz [ 1380.948710][T16291] Bluetooth: hci0: command tx timeout [ 1380.992985][T15783] usb 4-1: config 0 descriptor?? [ 1381.478734][T15783] rc_core: IR keymap rc-hauppauge not found [ 1381.478757][T15783] Registered IR keymap rc-empty [ 1381.478923][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.503954][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.523223][T15783] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1381.556540][T15783] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 1381.582196][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.607445][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.619103][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.642299][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.659083][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.679204][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.698849][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.718973][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.738847][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.759149][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1381.827931][T15783] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1381.827959][T15783] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1381.879810][T15783] usb 4-1: USB disconnect, device number 99 [ 1383.433601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.718733][T15690] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1383.718976][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1383.848799][T15690] usb 4-1: device descriptor read/64, error -32 [ 1384.213582][T15690] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1384.718843][T15690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.718873][T15690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.722016][T15690] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1384.722047][T15690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1384.722069][T15690] usb 4-1: SerialNumber: syz [ 1385.015814][T15690] usb 4-1: 0:2 : does not exist [ 1385.038179][T15690] usb 4-1: USB disconnect, device number 101 [ 1385.086642][T19468] chnl_net:caif_netlink_parms(): no params data found [ 1385.155475][T18409] udevd[18409]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.366828][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.486812][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.532462][ T3012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.656215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.825521][ T3012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.131218][ T5977] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1387.272847][ T5977] usb 10-1: device descriptor read/64, error -71 [ 1387.578720][ T5977] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1387.580233][ T3012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.710749][ T5977] usb 10-1: device descriptor read/64, error -71 [ 1387.818991][ T5977] usb usb10-port1: attempt power cycle [ 1388.168739][ T5977] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1388.240373][ T5977] usb 10-1: device descriptor read/8, error -71 [ 1388.458321][T19468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.458524][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.464977][T19468] bridge_slave_0: entered allmulticast mode [ 1388.469528][T19468] bridge_slave_0: entered promiscuous mode [ 1388.501709][ T5977] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1388.521370][ T5977] usb 10-1: device descriptor read/8, error -71 [ 1388.543826][T19468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.543992][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.544266][T19468] bridge_slave_1: entered allmulticast mode [ 1388.546935][T19468] bridge_slave_1: entered promiscuous mode [ 1388.629157][ T5977] usb usb10-port1: unable to enumerate USB device [ 1389.081467][T19468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.089209][T19270] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1389.188253][T19468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.251667][T19270] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1391.046138][T19270] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1392.002907][T19270] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1392.329560][T19468] team0: Port device team_slave_0 added [ 1392.496391][T19468] team0: Port device team_slave_1 added [ 1392.959395][T19468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.959413][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.959443][T19468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.149840][T19468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.149859][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.149892][T19468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.834704][ T3012] bridge_slave_1: left allmulticast mode [ 1393.834734][ T3012] bridge_slave_1: left promiscuous mode [ 1393.835072][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.915816][ T3012] bridge_slave_0: left allmulticast mode [ 1393.915841][ T3012] bridge_slave_0: left promiscuous mode [ 1393.916032][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.966736][ T5977] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1394.139893][ T5977] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1394.139930][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.139946][ T5977] usb 4-1: Product: syz [ 1394.139957][ T5977] usb 4-1: Manufacturer: syz [ 1394.139968][ T5977] usb 4-1: SerialNumber: syz [ 1394.157498][ T5977] usb 4-1: config 0 descriptor?? [ 1394.175204][ T5977] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1395.383029][ T5977] gspca_sunplus: reg_r err -32 [ 1395.383130][ T5977] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1395.759291][ T5977] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1395.955462][ T5977] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1395.955487][ T5977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.955502][ T5977] usb 10-1: Product: syz [ 1395.955512][ T5977] usb 10-1: Manufacturer: syz [ 1395.955523][ T5977] usb 10-1: SerialNumber: syz [ 1396.539089][ T5977] rtl8150 10-1:1.0: couldn't reset the device [ 1396.539477][ T5977] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 1396.574379][ T5977] usb 10-1: USB disconnect, device number 43 [ 1396.631898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.670980][T18409] udevd[18409]: setting mode of /dev/bus/usb/010/043 to 020664 failed: No such file or directory [ 1396.673856][T18409] udevd[18409]: setting owner of /dev/bus/usb/010/043 to uid=0, gid=0 failed: No such file or directory [ 1396.728705][ T5873] usb 4-1: USB disconnect, device number 102 [ 1396.852231][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.989889][T19645] usb usb8: usbfs: process 19645 (syz.3.4148) did not claim interface 0 before use [ 1397.488928][T15956] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1397.674999][T15956] usb 10-1: Using ep0 maxpacket: 16 [ 1397.675855][T15956] usb 10-1: no configurations [ 1397.675868][T15956] usb 10-1: can't read configurations, error -22 [ 1397.800623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.829264][T15956] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1397.947742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.252560][T15956] usb 10-1: Using ep0 maxpacket: 16 [ 1398.254220][T15956] usb 10-1: no configurations [ 1398.254234][T15956] usb 10-1: can't read configurations, error -22 [ 1398.254604][T15956] usb usb10-port1: attempt power cycle [ 1398.618946][T15956] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1398.689629][T15956] usb 10-1: Using ep0 maxpacket: 16 [ 1398.690183][T15956] usb 10-1: no configurations [ 1398.690194][T15956] usb 10-1: can't read configurations, error -22 [ 1398.888831][T15956] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1398.919692][T15956] usb 10-1: Using ep0 maxpacket: 16 [ 1398.920560][T15956] usb 10-1: no configurations [ 1398.920578][T15956] usb 10-1: can't read configurations, error -22 [ 1398.921013][T15956] usb usb10-port1: unable to enumerate USB device [ 1399.060093][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.152605][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.228266][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.480822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.016358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.135345][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.464954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.494384][T13107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1400.504936][T13107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1400.506643][T13107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1400.510710][T13107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1400.511585][T13107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1400.626714][ C1] vkms_vblank_simulate: vblank timer overrun [ 1401.290598][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.350056][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.409549][ T3012] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 1401.471643][ T3012] veth0: left promiscuous mode [ 1401.473589][ T3012] bond0 (unregistering): Released all slaves [ 1402.574874][T16291] Bluetooth: hci3: command tx timeout [ 1402.783176][ T3012] bond1 (unregistering): Released all slaves [ 1403.015957][ T3012] tipc: Left network mode [ 1403.037798][T19468] hsr_slave_0: entered promiscuous mode [ 1403.045580][T19468] hsr_slave_1: entered promiscuous mode [ 1403.046589][T19468] debugfs: 'hsr0' already exists in 'hsr' [ 1403.046616][T19468] Cannot create hsr debugfs directory [ 1404.498781][ T5977] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1404.628695][T16291] Bluetooth: hci3: command tx timeout [ 1404.688879][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 1404.689771][ T5977] usb 4-1: no configurations [ 1404.689789][ T5977] usb 4-1: can't read configurations, error -22 [ 1404.818710][ T5977] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1404.968758][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 1404.969671][ T5977] usb 4-1: no configurations [ 1404.969690][ T5977] usb 4-1: can't read configurations, error -22 [ 1404.970122][ T5977] usb usb4-port1: attempt power cycle [ 1405.180620][ T3012] hsr_slave_0: left promiscuous mode [ 1405.218863][ T3012] hsr_slave_1: left promiscuous mode [ 1405.219743][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1405.219764][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.269966][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.269999][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.308755][ T5977] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1405.332248][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 1405.335380][ T5977] usb 4-1: no configurations [ 1405.335401][ T5977] usb 4-1: can't read configurations, error -22 [ 1405.358523][ T3012] veth1_macvtap: left promiscuous mode [ 1405.360533][ T3012] veth0_macvtap: left promiscuous mode [ 1405.360902][ T3012] veth1_vlan: left promiscuous mode [ 1405.364415][ T3012] veth0_vlan: left promiscuous mode [ 1405.468723][ T5977] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1405.489670][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 1405.490735][ T5977] usb 4-1: no configurations [ 1405.490753][ T5977] usb 4-1: can't read configurations, error -22 [ 1405.497279][ T5977] usb usb4-port1: unable to enumerate USB device [ 1406.718823][T16291] Bluetooth: hci3: command tx timeout [ 1407.579674][T19699] KVM: debugfs: duplicate directory 19699-7 [ 1407.845687][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.904935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.969100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.025449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.081802][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.134346][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.343311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.413583][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.480488][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 1408.519887][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.650879][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.759417][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 1408.798881][T16291] Bluetooth: hci3: command tx timeout [ 1408.918204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.982592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.082790][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.203214][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.269278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.398828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.473839][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.661026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.791930][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.918476][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.979499][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.130398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.195931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.388308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.460872][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.697552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.777747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.852504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.912220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.263053][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.482247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.602586][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.664138][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.745254][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.809840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.887555][T19689] netlink: 112 bytes leftover after parsing attributes in process `syz.9.4163'. [ 1412.158152][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4167'. [ 1414.880909][T19741] usb usb8: usbfs: process 19741 (syz.8.4174) did not claim interface 0 before use [ 1414.886679][ T5968] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1414.954193][ T3012] IPVS: stop unused estimator thread 0... [ 1415.038803][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 1415.097530][ T5968] usb 4-1: no configurations [ 1415.097553][ T5968] usb 4-1: can't read configurations, error -22 [ 1415.228832][ T5968] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1415.436525][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 1415.572755][ T5968] usb 4-1: no configurations [ 1415.572772][ T5968] usb 4-1: can't read configurations, error -22 [ 1415.573201][ T5968] usb usb4-port1: attempt power cycle [ 1415.809542][T19651] chnl_net:caif_netlink_parms(): no params data found [ 1415.847963][T19747] netlink: 'syz.9.4175': attribute type 6 has an invalid length. [ 1415.910390][ T5968] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1415.934927][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 1415.938315][ T5968] usb 4-1: no configurations [ 1415.938337][ T5968] usb 4-1: can't read configurations, error -22 [ 1416.088834][ T5968] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1416.125357][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 1416.126405][ T5968] usb 4-1: no configurations [ 1416.126421][ T5968] usb 4-1: can't read configurations, error -22 [ 1416.127830][ T5968] usb usb4-port1: unable to enumerate USB device [ 1417.708786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.780298][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4178'. [ 1417.980322][T19651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.980838][T19651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.981182][T19651] bridge_slave_0: entered allmulticast mode [ 1418.002939][T19651] bridge_slave_0: entered promiscuous mode [ 1418.462110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1418.612487][T19778] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4180'. [ 1418.779139][T19651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.779247][T19651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.779442][T19651] bridge_slave_1: entered allmulticast mode [ 1418.781679][T19651] bridge_slave_1: entered promiscuous mode [ 1419.788781][ T5977] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1419.881203][T19468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1419.928969][T19651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.944056][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 1419.947179][ T5977] usb 4-1: config 253 has an invalid interface number: 71 but max is 0 [ 1419.947216][ T5977] usb 4-1: config 253 has no interface number 0 [ 1419.947261][ T5977] usb 4-1: config 253 interface 71 has no altsetting 0 [ 1419.947304][ T5977] usb 4-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=42.cd [ 1419.947334][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.053871][T19468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1420.275277][T19651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.302945][T19468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1420.383551][ T5977] usb 4-1: string descriptor 0 read error: -71 [ 1420.384772][ T5977] cdc_acm 4-1:253.71: Zero length descriptor references [ 1420.384803][ T5977] cdc_acm 4-1:253.71: probe with driver cdc_acm failed with error -22 [ 1420.435348][ T5977] usb 4-1: USB disconnect, device number 111 [ 1420.527833][T19786] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4180'. [ 1420.737257][T19468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1421.045682][T19651] team0: Port device team_slave_0 added [ 1421.129348][T19651] team0: Port device team_slave_1 added [ 1422.011885][T19651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.011901][T19651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.011923][T19651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.082167][T19810] netlink: 'syz.9.4184': attribute type 6 has an invalid length. [ 1422.126029][T19651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.126048][T19651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.126081][T19651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.721070][T19820] usb usb8: usbfs: process 19820 (syz.8.4185) did not claim interface 0 before use [ 1423.771141][T19651] hsr_slave_0: entered promiscuous mode [ 1423.772764][T19651] hsr_slave_1: entered promiscuous mode [ 1423.783214][T19651] debugfs: 'hsr0' already exists in 'hsr' [ 1423.783251][T19651] Cannot create hsr debugfs directory [ 1424.241981][ T3012] bridge_slave_1: left allmulticast mode [ 1424.242006][ T3012] bridge_slave_1: left promiscuous mode [ 1424.242196][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.351403][ T3012] bridge_slave_0: left allmulticast mode [ 1424.351428][ T3012] bridge_slave_0: left promiscuous mode [ 1424.351647][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.865641][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.975343][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.031990][ T3012] bond0 (unregistering): Released all slaves [ 1428.088995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.480151][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.480229][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.558865][ T3012] hsr_slave_0: left promiscuous mode [ 1428.700539][ T3012] hsr_slave_1: left promiscuous mode [ 1428.701615][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.729948][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.871660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.921555][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4193'. [ 1430.015716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.143606][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.224739][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.556227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.683805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.764544][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 1430.853209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.928025][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.009581][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 1431.141755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.245593][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.300060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.411931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.502819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.672364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.778984][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.343053][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.415568][T13107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1432.433603][T13107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1432.437133][T13107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1432.453874][T13107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1432.473264][T13107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1432.575199][T19862] netlink: 'syz.9.4195': attribute type 6 has an invalid length. [ 1432.867113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1433.024442][T19871] usb usb8: usbfs: process 19871 (syz.8.4196) did not claim interface 0 before use [ 1433.157369][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.559730][T13107] Bluetooth: hci5: command tx timeout [ 1434.681646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.165065][T19894] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4200'. [ 1435.445315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.778931][T11055] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1435.928700][T11055] usb 4-1: Using ep0 maxpacket: 16 [ 1435.931222][T11055] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.931284][T11055] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1435.931316][T11055] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1435.931340][T11055] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1435.931366][T11055] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1435.933075][T11055] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1435.933105][T11055] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1435.933128][T11055] usb 4-1: Manufacturer: syz [ 1435.954182][T11055] usb 4-1: config 0 descriptor?? [ 1436.358762][T11055] rc_core: IR keymap rc-hauppauge not found [ 1436.358785][T11055] Registered IR keymap rc-empty [ 1436.358954][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.378792][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.400472][T11055] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1436.424253][T11055] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input51 [ 1436.464882][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.479107][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.498903][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.522039][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.542480][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.558757][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.568826][ T5873] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1436.578971][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.599380][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.651427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1436.657750][T13107] Bluetooth: hci5: command tx timeout [ 1436.667694][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.697033][T11055] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1436.748178][ T5873] usb 10-1: Using ep0 maxpacket: 16 [ 1436.753871][ T5873] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1436.753906][ T5873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.753931][ T5873] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1436.757326][T11055] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1436.757355][T11055] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1436.764645][ T5873] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1436.764682][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.764706][ T5873] usb 10-1: Product: syz [ 1436.764724][ T5873] usb 10-1: Manufacturer: syz [ 1436.764742][ T5873] usb 10-1: SerialNumber: syz [ 1436.845147][T11055] usb 4-1: USB disconnect, device number 112 [ 1437.200968][T19865] chnl_net:caif_netlink_parms(): no params data found [ 1437.452895][ T5873] usb 10-1: 0:2 : does not exist [ 1437.462473][ T5873] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 1437.548359][ T5873] usb 10-1: USB disconnect, device number 48 [ 1437.552608][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4207'. [ 1437.636733][T19736] udevd[19736]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1437.956303][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.082745][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.526156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.710763][T13107] Bluetooth: hci5: command tx timeout [ 1439.528495][T19865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.529266][T19865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.529553][T19865] bridge_slave_0: entered allmulticast mode [ 1439.552822][T19865] bridge_slave_0: entered promiscuous mode [ 1439.567088][T19651] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1439.674332][T19865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.674560][T19865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.674834][T19865] bridge_slave_1: entered allmulticast mode [ 1439.677796][T19865] bridge_slave_1: entered promiscuous mode [ 1439.784155][T19651] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1439.948964][T11055] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1440.069969][T19651] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1440.225849][T11055] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 1440.225880][T11055] usb 10-1: config 1 has no interface number 0 [ 1440.225937][T11055] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1440.225965][T11055] usb 10-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1440.235579][T11055] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1440.235615][T11055] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.235637][T11055] usb 10-1: Product: syz [ 1440.235654][T11055] usb 10-1: Manufacturer: syz [ 1440.235670][T11055] usb 10-1: SerialNumber: syz [ 1440.281346][T19990] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1440.281724][T19990] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1440.302118][T11055] usb 10-1: Expected 3 endpoints, found: 2 [ 1440.637980][T19651] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1440.749346][T19865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.808716][T13107] Bluetooth: hci5: command tx timeout [ 1440.888365][T19865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.538012][T19865] team0: Port device team_slave_0 added [ 1441.543000][T19865] team0: Port device team_slave_1 added [ 1441.711684][ T3012] bridge_slave_1: left allmulticast mode [ 1441.711718][ T3012] bridge_slave_1: left promiscuous mode [ 1441.711967][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.814979][ T3012] bridge_slave_0: left allmulticast mode [ 1441.815004][ T3012] bridge_slave_0: left promiscuous mode [ 1441.815266][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.810332][T20015] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4215'. [ 1443.376090][T11055] usb 10-1: USB disconnect, device number 49 [ 1443.719651][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1443.808735][T11055] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1443.852515][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1443.922275][ T3012] bond0 (unregistering): Released all slaves [ 1443.958752][T11055] usb 10-1: Using ep0 maxpacket: 16 [ 1443.960779][T11055] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1443.960806][T11055] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.960828][T11055] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1443.963300][T11055] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1443.963331][T11055] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.963353][T11055] usb 10-1: Product: syz [ 1443.963369][T11055] usb 10-1: Manufacturer: syz [ 1443.963385][T11055] usb 10-1: SerialNumber: syz [ 1444.383419][T19865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.383438][T19865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.383482][T19865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.452593][T19865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.452613][T19865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.452643][T19865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1444.830684][T11055] usb 10-1: 0:2 : does not exist [ 1444.845545][T11055] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 1444.901170][ T3012] hsr_slave_0: left promiscuous mode [ 1444.917958][T11055] usb 10-1: USB disconnect, device number 50 [ 1444.939330][ T3012] hsr_slave_1: left promiscuous mode [ 1444.945206][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.979992][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1444.990777][T19736] udevd[19736]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.660663][T20052] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4222'. [ 1445.760673][ C0] vkms_vblank_simulate: vblank timer overrun [ 1445.980207][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.152989][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 1446.237323][T20057] usb usb8: usbfs: process 20057 (syz.9.4224) did not claim interface 0 before use [ 1446.593509][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 1446.767875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.900617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.964206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.154633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.220215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.472932][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.140055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.632500][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1448.652906][T19865] hsr_slave_0: entered promiscuous mode [ 1448.654054][T19865] hsr_slave_1: entered promiscuous mode [ 1448.654912][T19865] debugfs: 'hsr0' already exists in 'hsr' [ 1448.654931][T19865] Cannot create hsr debugfs directory [ 1448.683804][T20074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1448.723972][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.809504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.907811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.107869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.244564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.705365][T19651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.223639][T19651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.723819][ T1830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.726191][ T1830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.783549][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.783704][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1453.295201][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4238'. [ 1453.296481][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4238'. [ 1454.842506][T19865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1454.888191][T19651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.918797][T19865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1454.963883][T19865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1455.051325][T19865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1455.710102][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4247'. [ 1455.749011][T20160] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4247'. [ 1455.995282][T19651] veth0_vlan: entered promiscuous mode [ 1456.103025][T19651] veth1_vlan: entered promiscuous mode [ 1456.296459][T19865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.372613][T19651] veth0_macvtap: entered promiscuous mode [ 1456.496337][T19651] veth1_macvtap: entered promiscuous mode [ 1457.432551][T20187] usb usb8: usbfs: process 20187 (syz.3.4251) did not claim interface 0 before use [ 1457.720527][T19865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.882968][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.883128][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.965056][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.969030][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.032225][T19651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.133563][T19651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.351584][ T1116] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.357944][ T1116] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.417983][ T1116] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.464390][ T1116] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.207761][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.207786][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.510994][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.511017][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.043488][T19865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.365848][T19865] veth0_vlan: entered promiscuous mode [ 1460.464267][T20242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1460.464309][T20242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1460.475924][T19865] veth1_vlan: entered promiscuous mode [ 1460.638641][T20242] gretap0: entered promiscuous mode [ 1460.779729][T20242] gretap0: left promiscuous mode [ 1461.348251][T19865] veth0_macvtap: entered promiscuous mode [ 1461.364848][T19865] veth1_macvtap: entered promiscuous mode [ 1461.544438][T16291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1461.549912][T16291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1461.568148][T19865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1461.578176][T16291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1461.584495][T16291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1461.587593][T16291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1461.623675][T19865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.703983][T15751] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.707375][T15751] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.730900][T15751] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.761871][T15751] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.669620][T13107] Bluetooth: hci0: command tx timeout [ 1463.797873][T20284] usb usb8: usbfs: process 20284 (syz.8.4270) did not claim interface 0 before use [ 1464.479675][ T3012] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.691132][T12087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.691158][T12087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.712681][ T3012] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.752697][T13107] Bluetooth: hci0: command tx timeout [ 1466.410194][T15751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.410218][T15751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.828722][T13107] Bluetooth: hci0: command tx timeout [ 1469.038741][T15956] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1469.189131][T15956] usb 10-1: Using ep0 maxpacket: 8 [ 1469.192196][T15956] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1469.192264][T15956] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1469.192289][T15956] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1469.192316][T15956] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1469.192342][T15956] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1469.192388][T15956] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1469.192413][T15956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.323567][ T3012] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.531004][T15956] usb 10-1: GET_CAPABILITIES returned 0 [ 1469.531122][T15956] usbtmc 10-1:16.0: can't read capabilities [ 1469.746647][T20149] usb 10-1: USB disconnect, device number 51 [ 1469.908700][T13107] Bluetooth: hci0: command tx timeout [ 1470.087068][ T3012] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.060129][T20249] chnl_net:caif_netlink_parms(): no params data found [ 1471.415979][T20343] "syz.3.4282" (20343) uses obsolete ecb(arc4) skcipher [ 1471.848002][ T3012] bridge_slave_1: left allmulticast mode [ 1471.848030][ T3012] bridge_slave_1: left promiscuous mode [ 1471.848280][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.969412][ T3012] bridge_slave_0: left allmulticast mode [ 1471.969444][ T3012] bridge_slave_0: left promiscuous mode [ 1471.969729][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.946167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.152102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.361962][T20379] usb usb8: usbfs: process 20379 (syz.8.4286) did not claim interface 0 before use [ 1474.839660][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.549647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.853404][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.233665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.112820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.244004][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.306610][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.426823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.595110][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.670803][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.693023][ T3012] bond0 (unregistering): Released all slaves [ 1478.792967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.841260][ C1] vkms_vblank_simulate: vblank timer overrun [ 1479.689172][T20416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4293'. [ 1479.923208][T20249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.923309][T20249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.923513][T20249] bridge_slave_0: entered allmulticast mode [ 1479.925511][T20249] bridge_slave_0: entered promiscuous mode [ 1479.974089][T20249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.974183][T20249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.974395][T20249] bridge_slave_1: entered allmulticast mode [ 1480.031925][T20249] bridge_slave_1: entered promiscuous mode [ 1480.766877][ T5968] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1480.800355][T20427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4293'. [ 1480.949307][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 1480.958945][ T5968] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1480.962230][ T5968] usb 4-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1480.962266][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.962293][ T5968] usb 4-1: Product: syz [ 1480.962310][ T5968] usb 4-1: Manufacturer: syz [ 1480.962329][ T5968] usb 4-1: SerialNumber: syz [ 1480.972304][ T5968] usb 4-1: config 0 descriptor?? [ 1481.622068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1482.014131][T20249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.099732][T20249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.238424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1482.918931][ T3012] hsr_slave_0: left promiscuous mode [ 1482.942915][ T3012] hsr_slave_1: left promiscuous mode [ 1482.943779][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.943800][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.119973][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1483.120004][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.422690][T15956] usb 4-1: USB disconnect, device number 113 [ 1483.472355][ T3012] veth1_macvtap: left promiscuous mode [ 1483.472470][ T3012] veth0_macvtap: left promiscuous mode [ 1483.472737][ T3012] veth1_vlan: left promiscuous mode [ 1483.472932][ T3012] veth0_vlan: left promiscuous mode [ 1485.548703][T15956] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1485.747276][T15956] usb 10-1: Using ep0 maxpacket: 8 [ 1485.750466][T15956] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1485.750530][T15956] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1485.750563][T15956] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1485.750591][T15956] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1485.750618][T15956] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1485.750678][T15956] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1485.750705][T15956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.191575][T15956] usb 10-1: GET_CAPABILITIES returned 0 [ 1486.191611][T15956] usbtmc 10-1:16.0: can't read capabilities [ 1486.472667][T15956] usb 10-1: USB disconnect, device number 52 [ 1487.468665][T15956] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1487.669353][T15956] usb 10-1: Using ep0 maxpacket: 32 [ 1487.676239][T15956] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1487.676281][T15956] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1487.686769][T15956] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1487.686807][T15956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.686833][T15956] usb 10-1: Product: syz [ 1487.686851][T15956] usb 10-1: Manufacturer: syz [ 1487.686870][T15956] usb 10-1: SerialNumber: syz [ 1487.695994][T15956] usb 10-1: config 0 descriptor?? [ 1489.318721][T15956] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1489.480780][T15956] usb 4-1: Using ep0 maxpacket: 16 [ 1489.483677][T15956] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1489.483699][T15956] usb 4-1: config 0 has no interface number 0 [ 1489.486005][T15956] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1489.486028][T15956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.486043][T15956] usb 4-1: Product: syz [ 1489.486054][T15956] usb 4-1: Manufacturer: syz [ 1489.486065][T15956] usb 4-1: SerialNumber: syz [ 1489.551343][T15956] usb 4-1: config 0 descriptor?? [ 1489.668532][T15956] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1489.920129][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.920294][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.269384][T20149] usb 10-1: USB disconnect, device number 53 [ 1490.534482][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4314'. [ 1491.836461][T15956] gspca_spca1528: reg_r err -71 [ 1491.836565][T15956] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1491.867455][T15956] usb 4-1: USB disconnect, device number 114 [ 1492.199536][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 1492.531521][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 1496.602051][T20249] team0: Port device team_slave_0 added [ 1496.682535][T20249] team0: Port device team_slave_1 added [ 1497.536377][T20558] netlink: 280 bytes leftover after parsing attributes in process `syz.8.4322'. [ 1497.584405][T20249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.584420][T20249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.584554][T20249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.767810][T20249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.768584][T20249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.768620][T20249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.631796][T20575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4327'. [ 1498.688258][T20249] hsr_slave_0: entered promiscuous mode [ 1498.763880][T20249] hsr_slave_1: entered promiscuous mode [ 1498.824541][T20249] debugfs: 'hsr0' already exists in 'hsr' [ 1498.824574][T20249] Cannot create hsr debugfs directory [ 1498.968684][T15956] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1499.252486][T15956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.252516][T15956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.254066][T15956] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1499.254095][T15956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1499.254117][T15956] usb 2-1: SerialNumber: syz [ 1499.586339][T15956] usb 2-1: 0:2 : does not exist [ 1499.586450][T15956] usb 2-1: unit 255 not found! [ 1499.638648][T15956] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1499.774504][T15956] usb 2-1: USB disconnect, device number 2 [ 1503.115624][T20249] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1503.212424][T20633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4338'. [ 1503.212464][T20633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4338'. [ 1503.260861][T20633] gretap0: entered promiscuous mode [ 1503.353217][T20633] gretap0: left promiscuous mode [ 1503.571459][T20249] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1503.656021][T20249] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1503.739014][T20249] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1504.181997][T20653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1504.315891][T20249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.397147][T20249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.425268][T11715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.426812][T11715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.474643][T11715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.474858][T11715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1504.478799][ T5977] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1504.646885][ T5977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.646915][ T5977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1504.648457][ T5977] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1504.648486][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1504.648692][ T5977] usb 2-1: SerialNumber: syz [ 1504.935158][ T5977] usb 2-1: 0:2 : does not exist [ 1504.935260][ T5977] usb 2-1: unit 255 not found! [ 1504.957512][ T5977] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1505.133219][ T5977] usb 2-1: USB disconnect, device number 3 [ 1505.383087][T19736] udevd[19736]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.021531][T20208] hid-generic 0000:0003:0001.0023: unknown main item tag 0x0 [ 1506.021560][T20208] hid-generic 0000:0003:0001.0023: unknown main item tag 0x0 [ 1506.061756][T20208] hid-generic 0000:0003:0001.0023: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1506.372180][T20249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.798337][T20708] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4349'. [ 1508.214052][T20706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.214666][T20706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.020338][T20717] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1509.020367][T20717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1509.022305][T20717] vhci_hcd vhci_hcd.0: Device attached [ 1509.060366][T20717] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 1509.060397][T20717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1509.060591][T20717] vhci_hcd vhci_hcd.0: Device attached [ 1509.077495][T20717] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 1509.077526][T20717] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1509.077712][T20717] vhci_hcd vhci_hcd.0: Device attached [ 1509.087759][T20717] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 1509.087788][T20717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1509.087964][T20717] vhci_hcd vhci_hcd.0: Device attached [ 1509.098230][T20717] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 1509.098258][T20717] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1509.098314][T20717] vhci_hcd vhci_hcd.0: Device attached [ 1509.103059][T20717] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(18) [ 1509.103088][T20717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1509.103240][T20717] vhci_hcd vhci_hcd.0: Device attached [ 1509.176731][T20706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.216475][T20706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.378718][T20208] vhci_hcd: vhci_device speed not set [ 1509.399308][T20724] vhci_hcd: connection closed [ 1509.401025][T20726] vhci_hcd: connection closed [ 1509.402105][T20728] vhci_hcd: connection closed [ 1509.404142][T11715] vhci_hcd: stop threads [ 1509.404165][T11715] vhci_hcd: release socket [ 1509.404233][T11715] vhci_hcd: disconnect device [ 1509.404345][T20722] vhci_hcd: connection closed [ 1509.404681][T11715] vhci_hcd: stop threads [ 1509.404693][T11715] vhci_hcd: release socket [ 1509.404764][T11715] vhci_hcd: disconnect device [ 1509.404911][T11715] vhci_hcd: stop threads [ 1509.404921][T11715] vhci_hcd: release socket [ 1509.404985][T11715] vhci_hcd: disconnect device [ 1509.405136][T11715] vhci_hcd: stop threads [ 1509.405146][T11715] vhci_hcd: release socket [ 1509.405340][T11715] vhci_hcd: disconnect device [ 1509.406514][T20720] vhci_hcd: connection closed [ 1509.406705][T11715] vhci_hcd: stop threads [ 1509.406717][T11715] vhci_hcd: release socket [ 1509.406925][T11715] vhci_hcd: disconnect device [ 1509.407152][T20718] vhci_hcd: connection closed [ 1509.407353][T11715] vhci_hcd: stop threads [ 1509.407364][T11715] vhci_hcd: release socket [ 1509.407824][T11715] vhci_hcd: disconnect device [ 1509.438688][T20208] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1509.439497][T20208] usb 35-1: enqueue for inactive port 0 [ 1509.518899][T20208] vhci_hcd: vhci_device speed not set [ 1510.036807][T20731] program syz.8.4352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1511.081938][T20739] loop9: detected capacity change from 0 to 7 [ 1511.098944][ T3012] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.099186][T20739] Dev loop9: unable to read RDB block 7 [ 1511.099219][T20739] loop9: AHDI p1 p2 [ 1511.099252][T20739] loop9: partition table partially beyond EOD, truncated [ 1511.099494][T20739] loop9: p1 start 1853095936 is beyond EOD, truncated [ 1511.107374][ T3012] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.108293][ T3012] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.127799][ T3012] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.647019][T20249] veth0_vlan: entered promiscuous mode [ 1511.674577][T20249] veth1_vlan: entered promiscuous mode [ 1511.877762][T20249] veth0_macvtap: entered promiscuous mode [ 1511.908738][ T44] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1511.943743][T20249] veth1_macvtap: entered promiscuous mode [ 1512.020863][T20249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.060757][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1512.065944][ T44] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1512.065972][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.065993][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1512.314191][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1512.314225][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.314247][ T44] usb 4-1: Product: syz [ 1512.314263][ T44] usb 4-1: Manufacturer: syz [ 1512.314280][ T44] usb 4-1: SerialNumber: syz [ 1512.660049][T20249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.060502][ T3525] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.063115][ T3525] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.063213][ T3525] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.063243][ T3525] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.009749][ T44] usb 4-1: 0:2 : does not exist [ 1514.036283][ T44] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1514.344974][ T44] usb 4-1: USB disconnect, device number 115 [ 1514.400140][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.400165][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.676302][T19736] udevd[19736]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1514.738724][T12087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.738749][T12087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.781788][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4364'. [ 1516.327123][T20816] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1516.327153][T20816] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1516.344949][T20816] vhci_hcd vhci_hcd.0: Device attached [ 1516.359148][T20793] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 1516.359178][T20793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1516.359343][T20793] vhci_hcd vhci_hcd.0: Device attached [ 1516.365409][T20793] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 1516.365440][T20793] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1516.365768][T20793] vhci_hcd vhci_hcd.0: Device attached [ 1516.386770][T20793] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 1516.386799][T20793] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1516.386981][T20793] vhci_hcd vhci_hcd.0: Device attached [ 1516.393077][T20793] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 1516.393106][T20793] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1516.393447][T20793] vhci_hcd vhci_hcd.0: Device attached [ 1516.415584][T20793] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(18) [ 1516.415615][T20793] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1516.416216][T20793] vhci_hcd vhci_hcd.0: Device attached [ 1516.530065][ T44] vhci_hcd: vhci_device speed not set [ 1516.588775][ T44] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 1518.556867][T20827] vhci_hcd: connection closed [ 1518.557229][T20825] vhci_hcd: connection closed [ 1518.557509][T20823] vhci_hcd: connection closed [ 1518.572196][T20821] vhci_hcd: connection closed [ 1518.584580][T20819] vhci_hcd: connection closed [ 1518.585060][T20817] vhci_hcd: connection reset by peer [ 1518.585532][ T68] vhci_hcd: stop threads [ 1518.585550][ T68] vhci_hcd: release socket [ 1518.585628][ T68] vhci_hcd: disconnect device [ 1518.586044][ T68] vhci_hcd: stop threads [ 1518.586053][ T68] vhci_hcd: release socket [ 1518.586205][ T68] vhci_hcd: disconnect device [ 1518.586819][ T68] vhci_hcd: stop threads [ 1518.586829][ T68] vhci_hcd: release socket [ 1518.647150][ T68] vhci_hcd: disconnect device [ 1518.647594][ T68] vhci_hcd: stop threads [ 1518.647610][ T68] vhci_hcd: release socket [ 1518.647677][ T68] vhci_hcd: disconnect device [ 1518.648336][ T68] vhci_hcd: stop threads [ 1518.648346][ T68] vhci_hcd: release socket [ 1518.678687][ T68] vhci_hcd: disconnect device [ 1518.680060][ T68] vhci_hcd: stop threads [ 1518.680079][ T68] vhci_hcd: release socket [ 1518.680159][ T68] vhci_hcd: disconnect device [ 1518.959441][T20853] program syz.8.4370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1518.970247][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1519.022007][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1520.688629][ T5887] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1520.867130][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 1520.881597][ T5887] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1520.881629][ T5887] usb 4-1: config 0 has no interface number 0 [ 1520.881683][ T5887] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1520.881710][ T5887] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1520.881733][ T5887] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1520.881760][ T5887] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1520.945186][ T5887] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1520.945227][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.945249][ T5887] usb 4-1: Product: syz [ 1520.945265][ T5887] usb 4-1: Manufacturer: syz [ 1520.945281][ T5887] usb 4-1: SerialNumber: syz [ 1521.004573][ T5887] usb 4-1: config 0 descriptor?? [ 1521.005505][T20875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1521.042681][ T5887] dm9601 4-1:0.41: probe with driver dm9601 failed with error -22 [ 1521.063684][ T5887] sr9700 4-1:0.41: probe with driver sr9700 failed with error -22 [ 1521.250125][T20875] loop2: detected capacity change from 0 to 7 [ 1521.275613][T20875] Dev loop2: unable to read RDB block 7 [ 1521.275675][T20875] loop2: unable to read partition table [ 1521.275943][T20875] loop2: partition table beyond EOD, truncated [ 1521.275965][T20875] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1521.323503][T20149] usb 4-1: USB disconnect, device number 116 [ 1521.758756][ T44] vhci_hcd: vhci_device speed not set [ 1521.914369][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4379'. [ 1523.609449][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4385'. [ 1523.618890][T20911] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4385'. [ 1526.646067][T20955] program syz.1.4396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1526.858696][ T5873] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1526.867382][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4397'. [ 1526.907520][T20961] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4397'. [ 1527.012288][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.012310][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1527.013591][ T5873] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1527.013613][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1527.013628][ T5873] usb 4-1: SerialNumber: syz [ 1527.118743][T20149] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1527.331624][ T5873] usb 4-1: 0:2 : does not exist [ 1527.331702][ T5873] usb 4-1: unit 255 not found! [ 1527.358072][T20149] usb 2-1: Using ep0 maxpacket: 16 [ 1527.365352][T20149] usb 2-1: config 0 has no interfaces? [ 1527.365398][T20149] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1527.365427][T20149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.417339][T20149] usb 2-1: config 0 descriptor?? [ 1527.579484][ T5873] usb 4-1: USB disconnect, device number 117 [ 1527.705534][T19736] udevd[19736]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1528.104121][T20975] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1528.831208][T20986] usb usb8: usbfs: process 20986 (syz.3.4405) did not claim interface 0 before use [ 1530.069936][ C0] vkms_vblank_simulate: vblank timer overrun [ 1533.259040][T20149] usb 2-1: USB disconnect, device number 4 [ 1533.809027][T21027] : renamed from bridge_slave_0 (while UP) [ 1535.939075][T20149] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1536.089522][T20149] usb 7-1: Using ep0 maxpacket: 16 [ 1536.091746][T20149] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1536.091765][T20149] usb 7-1: config 0 has no interface number 0 [ 1536.093780][T20149] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1536.093800][T20149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.093815][T20149] usb 7-1: Product: syz [ 1536.093826][T20149] usb 7-1: Manufacturer: syz [ 1536.093837][T20149] usb 7-1: SerialNumber: syz [ 1536.097999][T20149] usb 7-1: config 0 descriptor?? [ 1536.164599][T20149] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1537.998730][T20149] gspca_spca1528: reg_r err -71 [ 1537.998815][T20149] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1538.042649][T20149] usb 7-1: USB disconnect, device number 84 [ 1539.288414][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4429'. [ 1539.448624][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.608831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.021322][T21115] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4435'. [ 1544.184681][T21172] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4450'. [ 1544.518750][T20149] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1544.671420][T20149] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.671450][T20149] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1544.673260][T20149] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1544.673292][T20149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1544.673315][T20149] usb 7-1: SerialNumber: syz [ 1545.022596][T20149] usb 7-1: 0:2 : does not exist [ 1545.022712][T20149] usb 7-1: unit 255 not found! [ 1545.122076][T20149] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1545.409585][T20149] usb 7-1: USB disconnect, device number 85 [ 1545.788052][T21022] udevd[21022]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1546.560405][T21210] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1547.320506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1547.398652][ T5968] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1547.558456][ T5968] usb 10-1: Using ep0 maxpacket: 32 [ 1547.577486][ T5968] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.577516][ T5968] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1547.577556][ T5968] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1547.577580][ T5968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.625915][ T5968] usb 10-1: config 0 descriptor?? [ 1549.748731][T15956] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1549.877521][T21273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4481'. [ 1549.896245][T21273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4481'. [ 1549.898763][T15956] usb 4-1: Using ep0 maxpacket: 8 [ 1549.902769][T15956] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 1549.902803][T15956] usb 4-1: config 0 has no interface number 0 [ 1549.906393][T15956] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1549.906422][T15956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.906444][T15956] usb 4-1: Product: syz [ 1549.906459][T15956] usb 4-1: Manufacturer: syz [ 1549.906476][T15956] usb 4-1: SerialNumber: syz [ 1549.941018][T15956] usb 4-1: config 0 descriptor?? [ 1549.969436][T15956] as10x_usb: device has been detected [ 1549.974071][T15956] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1550.113433][T15956] usb 4-1: DVB: registering adapter 6 frontend 0 (PCTV Systems picoStick (74e))... [ 1550.176141][T20149] usb 10-1: USB disconnect, device number 54 [ 1550.189726][T15956] as10x_usb: error during firmware upload part1 [ 1550.202159][T15956] Registered device PCTV Systems picoStick (74e) [ 1550.261378][T15956] usb 4-1: USB disconnect, device number 118 [ 1550.401371][T15956] Unregistered device PCTV Systems picoStick (74e) [ 1550.404045][T15956] as10x_usb: device has been disconnected [ 1550.569257][T21286] loop9: detected capacity change from 0 to 7 [ 1550.583544][T21286] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1550.583595][T21286] loop9: partition table partially beyond EOD, truncated [ 1550.583914][T21286] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1551.007569][T21022] udevd[21022]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1551.361216][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.361281][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.898653][T20665] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1552.048638][T20665] usb 7-1: Using ep0 maxpacket: 8 [ 1552.058282][T20665] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1552.092141][ T5887] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1552.115155][T20665] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1552.248722][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 1552.260374][ T5887] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1552.260527][ T5887] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1552.260559][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1552.260663][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1552.260694][ T5887] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1552.260752][ T5887] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1552.260842][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.283169][T20665] usb 7-1: string descriptor 0 read error: -22 [ 1552.283308][T20665] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1552.283339][T20665] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1552.518249][T20665] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1552.622095][T20665] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1552.622553][T20665] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1552.622609][T20665] usb 7-1: media controller created [ 1552.623204][ T5887] usb 4-1: GET_CAPABILITIES returned 0 [ 1552.623236][ T5887] usbtmc 4-1:16.0: can't read capabilities [ 1552.853387][T20665] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1552.924600][ T5887] usb 4-1: USB disconnect, device number 119 [ 1553.035573][T20665] zl10353_read_register: readreg error (reg=127, ret==0) [ 1553.278876][T20665] usb 7-1: USB disconnect, device number 86 [ 1553.861812][T21359] loop9: detected capacity change from 0 to 7 [ 1553.874421][T21359] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1553.874463][T21359] loop9: partition table partially beyond EOD, truncated [ 1553.874779][T21359] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1554.100989][T21022] udevd[21022]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1558.548691][T13107] Bluetooth: hci5: command 0x0406 tx timeout [ 1562.254752][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4556'. [ 1565.393257][T21331] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1565.571758][T21331] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1565.571830][T21331] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1565.571869][T21331] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1565.571886][T21331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.710629][T21331] usb 7-1: config 0 descriptor?? [ 1565.874766][T21331] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1566.568694][T20208] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1566.732957][T20208] usb 10-1: config 0 has no interfaces? [ 1566.746080][T20208] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1566.746102][T20208] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.746118][T20208] usb 10-1: Product: syz [ 1566.746129][T20208] usb 10-1: Manufacturer: syz [ 1566.746139][T20208] usb 10-1: SerialNumber: syz [ 1566.814008][T20208] usb 10-1: config 0 descriptor?? [ 1567.485533][T21331] usb 10-1: USB disconnect, device number 55 [ 1568.408933][ T5887] usb 7-1: USB disconnect, device number 87 [ 1569.068667][ T5887] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1569.435885][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.435906][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1569.437216][ T5887] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1569.437236][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1569.437251][ T5887] usb 4-1: SerialNumber: syz [ 1569.748925][ T5887] usb 4-1: 0:2 : does not exist [ 1569.749023][ T5887] usb 4-1: unit 255 not found! [ 1569.795442][ T5887] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1570.003206][ T5887] usb 4-1: USB disconnect, device number 120 [ 1570.296227][T21563] udevd[21563]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1571.038681][T20208] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1571.198747][T20208] usb 4-1: config 0 has no interfaces? [ 1571.198788][T20208] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1571.198813][T20208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.234539][T20208] usb 4-1: config 0 descriptor?? [ 1571.461254][T21621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.461848][T21621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.464710][T20208] usb 4-1: USB disconnect, device number 121 [ 1571.650754][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4592'. [ 1573.499662][T13107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1573.506990][T13107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1573.526717][T13107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1573.533495][T13107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1573.547077][T13107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1575.588646][T13107] Bluetooth: hci2: command tx timeout [ 1576.829954][ T1830] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.997800][T16291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1577.022923][T16291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1577.024793][T16291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1577.026552][T16291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1577.027335][T16291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1577.200936][T21331] hid-generic 0000:0003:0001.0024: unknown main item tag 0x0 [ 1577.200963][T21331] hid-generic 0000:0003:0001.0024: unknown main item tag 0x0 [ 1577.213487][T21331] hid-generic 0000:0003:0001.0024: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1577.679043][T16291] Bluetooth: hci2: command tx timeout [ 1578.338833][T20149] usb 7-1: new low-speed USB device number 88 using dummy_hcd [ 1578.558648][T20149] usb 7-1: Invalid ep0 maxpacket: 64 [ 1578.656290][ T1830] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.708702][T20149] usb 7-1: new low-speed USB device number 89 using dummy_hcd [ 1578.858642][T20149] usb 7-1: Invalid ep0 maxpacket: 64 [ 1578.859904][T20149] usb usb7-port1: attempt power cycle [ 1579.186956][T21690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4604'. [ 1579.199051][T16291] Bluetooth: hci3: command tx timeout [ 1579.228772][T20149] usb 7-1: new low-speed USB device number 90 using dummy_hcd [ 1579.252022][T20149] usb 7-1: Invalid ep0 maxpacket: 64 [ 1579.273002][ T1830] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.378716][T20149] usb 7-1: new low-speed USB device number 91 using dummy_hcd [ 1579.399567][T20149] usb 7-1: Invalid ep0 maxpacket: 64 [ 1579.407015][T20149] usb usb7-port1: unable to enumerate USB device [ 1579.694294][ T1830] team0: Port device netdevsim0 removed [ 1579.698328][ T1830] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.748879][T16291] Bluetooth: hci2: command tx timeout [ 1579.768694][T20209] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1579.926772][T20209] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1579.926806][T20209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.961103][T20209] usb 4-1: config 0 descriptor?? [ 1580.197663][T20209] usb 4-1: Cannot read MAC address [ 1580.197962][T20209] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1580.476477][T21649] chnl_net:caif_netlink_parms(): no params data found [ 1580.741498][T21678] chnl_net:caif_netlink_parms(): no params data found [ 1580.748016][ T1830] bridge_slave_1: left allmulticast mode [ 1580.748047][ T1830] bridge_slave_1: left promiscuous mode [ 1580.748317][ T1830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.841011][ T1830] : left allmulticast mode [ 1580.841043][ T1830] : left promiscuous mode [ 1580.841250][ T1830] bridge0: port 1() entered disabled state [ 1581.268886][T16291] Bluetooth: hci3: command tx timeout [ 1581.828719][T16291] Bluetooth: hci2: command tx timeout [ 1582.101307][ T5887] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1582.331895][ T5887] usb 10-1: config 0 has no interfaces? [ 1582.331939][ T5887] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1582.331965][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.360829][ T5887] usb 10-1: config 0 descriptor?? [ 1582.649105][T20149] usb 4-1: USB disconnect, device number 122 [ 1583.044183][ T5887] hid-generic 0000:0003:0001.0025: unknown main item tag 0x0 [ 1583.044223][ T5887] hid-generic 0000:0003:0001.0025: unknown main item tag 0x0 [ 1583.059901][ T5887] hid-generic 0000:0003:0001.0025: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1583.368651][T16291] Bluetooth: hci3: command tx timeout [ 1584.149185][T16291] Bluetooth: hci0: command 0x0406 tx timeout [ 1585.444960][T13107] Bluetooth: hci3: command tx timeout [ 1585.539324][ T1830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.619302][ T1830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.641689][ T1830] bond0 (unregistering): Released all slaves [ 1585.808411][T15956] usb 10-1: USB disconnect, device number 56 [ 1586.438677][T15956] usb 10-1: new low-speed USB device number 57 using dummy_hcd [ 1586.598650][T15956] usb 10-1: Invalid ep0 maxpacket: 64 [ 1586.738577][T15956] usb 10-1: new low-speed USB device number 58 using dummy_hcd [ 1586.906733][T21649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.907976][T21649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.908214][T21649] bridge_slave_0: entered allmulticast mode [ 1586.918632][T15956] usb 10-1: Invalid ep0 maxpacket: 64 [ 1586.919346][T15956] usb usb10-port1: attempt power cycle [ 1586.990896][T21649] bridge_slave_0: entered promiscuous mode [ 1587.318692][T15956] usb 10-1: new low-speed USB device number 59 using dummy_hcd [ 1587.339645][T15956] usb 10-1: Invalid ep0 maxpacket: 64 [ 1587.368723][T21649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.368901][T21649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.369275][T21649] bridge_slave_1: entered allmulticast mode [ 1587.381162][T21649] bridge_slave_1: entered promiscuous mode [ 1587.478646][T15956] usb 10-1: new low-speed USB device number 60 using dummy_hcd [ 1587.499585][T15956] usb 10-1: Invalid ep0 maxpacket: 64 [ 1587.500043][T15956] usb usb10-port1: unable to enumerate USB device [ 1587.688248][T21758] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4620'. [ 1587.688291][T21758] netlink: 'syz.6.4620': attribute type 6 has an invalid length. [ 1588.108705][T20209] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1588.299052][T20209] usb 7-1: Using ep0 maxpacket: 8 [ 1588.303044][T20209] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1588.303109][T20209] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1588.303131][T20209] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1588.303150][T20209] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1588.303167][T20209] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1588.303200][T20209] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1588.303217][T20209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.441282][T21678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.443559][T21678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.443853][T21678] bridge_slave_0: entered allmulticast mode [ 1588.472892][T21678] bridge_slave_0: entered promiscuous mode [ 1588.524761][T21649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.526424][T20209] usb 7-1: GET_CAPABILITIES returned 0 [ 1588.526474][T20209] usbtmc 7-1:16.0: can't read capabilities [ 1588.562323][T21678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.562465][T21678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.562714][T21678] bridge_slave_1: entered allmulticast mode [ 1588.565112][T21678] bridge_slave_1: entered promiscuous mode [ 1588.602064][T21649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.737130][T20209] usb 7-1: USB disconnect, device number 92 [ 1589.398820][T20208] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1589.430285][ T1830] hsr_slave_0: left promiscuous mode [ 1589.449219][ T1830] hsr_slave_1: left promiscuous mode [ 1589.450059][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1589.450081][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.497996][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1589.498020][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1589.556584][T20208] usb 10-1: Using ep0 maxpacket: 32 [ 1589.568922][T20208] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1589.568943][T20208] usb 10-1: config 0 has no interface number 0 [ 1589.603274][T20208] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 1589.603303][T20208] usb 10-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 1589.603319][T20208] usb 10-1: Product: syz [ 1589.603329][T20208] usb 10-1: Manufacturer: syz [ 1589.603340][T20208] usb 10-1: SerialNumber: syz [ 1589.625518][T20208] usb 10-1: config 0 descriptor?? [ 1589.637047][T20208] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1589.637100][T20208] usb 10-1: selecting invalid altsetting 1 [ 1589.637122][T20208] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1589.782537][T21773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4626'. [ 1589.801833][T20208] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1589.802433][T20208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1589.802495][T20208] usb 10-1: media controller created [ 1589.960631][ T1830] veth1_macvtap: left promiscuous mode [ 1589.960746][ T1830] veth0_macvtap: left promiscuous mode [ 1589.961023][ T1830] veth1_vlan: left promiscuous mode [ 1589.961213][ T1830] veth0_vlan: left promiscuous mode [ 1589.994265][T20208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1590.007801][T21776] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4627'. [ 1590.230665][T20208] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1590.230726][T20208] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1590.284082][T20208] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1591.358977][T20208] usb 10-1: USB disconnect, device number 61 [ 1591.541555][T21782] ------------[ cut here ]------------ [ 1591.541577][T21782] WARNING: CPU: 1 PID: 21782 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 1591.541619][T21782] Modules linked in: [ 1591.541653][T21782] CPU: 1 UID: 0 PID: 21782 Comm: syz.9.4629 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1591.541673][T21782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1591.541688][T21782] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1591.541713][T21782] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 72 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 3e 04 09 0f 1f 40 00 90 90 [ 1591.541730][T21782] RSP: 0018:ffffc900062bfac0 EFLAGS: 00010287 [ 1591.541744][T21782] RAX: 2ed120cdce1ff300 RBX: ffff88804cedf300 RCX: 0000000000000000 [ 1591.541758][T21782] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1591.541770][T21782] RBP: ffffc900062bfc28 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 1591.541782][T21782] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff11005b27c4d [ 1591.541795][T21782] R13: 0000000000000000 R14: ffff88804cedf308 R15: ffff888024c19e00 [ 1591.541807][T21782] FS: 00007f9861a246c0(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 1591.541822][T21782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1591.541834][T21782] CR2: 00002000007dc000 CR3: 000000003d5bc000 CR4: 00000000003526f0 [ 1591.541849][T21782] Call Trace: [ 1591.541862][T21782] [ 1591.541872][T21782] do_exit+0x105/0x2300 [ 1591.541900][T21782] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1591.541931][T21782] ? __lock_acquire+0xab9/0xd20 [ 1591.541991][T21782] ? __pfx_do_exit+0x10/0x10 [ 1591.542015][T21782] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1591.542037][T21782] ? rt_spin_lock+0x1c1/0x3e0 [ 1591.544151][T21782] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1591.544196][T21782] do_group_exit+0x21c/0x2d0 [ 1591.544218][T21782] ? rt_spin_unlock+0x161/0x200 [ 1591.544247][T21782] get_signal+0x125d/0x1310 [ 1591.544296][T21782] arch_do_signal_or_restart+0xa0/0x790 [ 1591.544327][T21782] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1591.544355][T21782] ? __se_sys_pselect6+0x291/0x300 [ 1591.544407][T21782] ? exit_to_user_mode_loop+0x40/0x130 [ 1591.544438][T21782] exit_to_user_mode_loop+0x72/0x130 [ 1591.544466][T21782] do_syscall_64+0x2bd/0xfa0 [ 1591.544496][T21782] ? lockdep_hardirqs_on+0x9c/0x150 [ 1591.544529][T21782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.544550][T21782] ? clear_bhb_loop+0x60/0xb0 [ 1591.544577][T21782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.544598][T21782] RIP: 0033:0x7f98637ff749 [ 1591.544627][T21782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.544646][T21782] RSP: 002b:00007f9861a24038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1591.544670][T21782] RAX: fffffffffffffdfe RBX: 00007f9863a56180 RCX: 00007f98637ff749 [ 1591.544686][T21782] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 1591.544701][T21782] RBP: 00007f9863883f91 R08: 0000000000000000 R09: 0000000000000000 [ 1591.544715][T21782] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1591.544729][T21782] R13: 00007f9863a56218 R14: 00007f9863a56180 R15: 00007ffe0cd1bed8 [ 1591.544764][T21782] [ 1591.544780][T21782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1591.544799][T21782] CPU: 1 UID: 0 PID: 21782 Comm: syz.9.4629 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1591.544824][T21782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1591.544837][T21782] Call Trace: [ 1591.544847][T21782] [ 1591.544856][T21782] dump_stack_lvl+0x99/0x250 [ 1591.544891][T21782] ? __asan_memcpy+0x40/0x70 [ 1591.544917][T21782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1591.544950][T21782] ? __pfx__printk+0x10/0x10 [ 1591.544992][T21782] vpanic+0x237/0x6d0 [ 1591.545013][T21782] ? __pfx_vpanic+0x10/0x10 [ 1591.545047][T21782] panic+0xb9/0xc0 [ 1591.545068][T21782] ? __pfx_panic+0x10/0x10 [ 1591.545105][T21782] __warn+0x31b/0x4b0 [ 1591.545125][T21782] ? kcov_task_exit+0x13c/0x150 [ 1591.545159][T21782] ? kcov_task_exit+0x13c/0x150 [ 1591.545189][T21782] report_bug+0x2be/0x4f0 [ 1591.545220][T21782] ? kcov_task_exit+0x13c/0x150 [ 1591.545251][T21782] ? kcov_task_exit+0x13c/0x150 [ 1591.545279][T21782] ? kcov_task_exit+0x13e/0x150 [ 1591.545307][T21782] handle_bug+0x84/0x160 [ 1591.545331][T21782] exc_invalid_op+0x1a/0x50 [ 1591.545352][T21782] asm_exc_invalid_op+0x1a/0x20 [ 1591.545373][T21782] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1591.545408][T21782] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 72 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 3e 04 09 0f 1f 40 00 90 90 [ 1591.545428][T21782] RSP: 0018:ffffc900062bfac0 EFLAGS: 00010287 [ 1591.545448][T21782] RAX: 2ed120cdce1ff300 RBX: ffff88804cedf300 RCX: 0000000000000000 [ 1591.545465][T21782] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1591.545480][T21782] RBP: ffffc900062bfc28 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 1591.545496][T21782] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff11005b27c4d [ 1591.545512][T21782] R13: 0000000000000000 R14: ffff88804cedf308 R15: ffff888024c19e00 [ 1591.545535][T21782] ? rt_spin_lock+0x1c1/0x3e0 [ 1591.545573][T21782] do_exit+0x105/0x2300 [ 1591.545606][T21782] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1591.545641][T21782] ? __lock_acquire+0xab9/0xd20 [ 1591.545679][T21782] ? __pfx_do_exit+0x10/0x10 [ 1591.545709][T21782] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1591.545736][T21782] ? rt_spin_lock+0x1c1/0x3e0 [ 1591.545767][T21782] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1591.545802][T21782] do_group_exit+0x21c/0x2d0 [ 1591.545823][T21782] ? rt_spin_unlock+0x161/0x200 [ 1591.545852][T21782] get_signal+0x125d/0x1310 [ 1591.545903][T21782] arch_do_signal_or_restart+0xa0/0x790 [ 1591.545932][T21782] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1591.545957][T21782] ? __se_sys_pselect6+0x291/0x300 [ 1591.546001][T21782] ? exit_to_user_mode_loop+0x40/0x130 [ 1591.546036][T21782] exit_to_user_mode_loop+0x72/0x130 [ 1591.546066][T21782] do_syscall_64+0x2bd/0xfa0 [ 1591.546098][T21782] ? lockdep_hardirqs_on+0x9c/0x150 [ 1591.546130][T21782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.546152][T21782] ? clear_bhb_loop+0x60/0xb0 [ 1591.546180][T21782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.546201][T21782] RIP: 0033:0x7f98637ff749 [ 1591.546221][T21782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.546241][T21782] RSP: 002b:00007f9861a24038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1591.546264][T21782] RAX: fffffffffffffdfe RBX: 00007f9863a56180 RCX: 00007f98637ff749 [ 1591.546281][T21782] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 1591.546295][T21782] RBP: 00007f9863883f91 R08: 0000000000000000 R09: 0000000000000000 [ 1591.546308][T21782] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1591.546322][T21782] R13: 00007f9863a56218 R14: 00007f9863a56180 R15: 00007ffe0cd1bed8 [ 1591.546356][T21782] [ 1591.546738][T21782] Kernel Offset: disabled