last executing test programs: 2m1.080356362s ago: executing program 1 (id=1542): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x80000000}, 0x10) 2m0.887687455s ago: executing program 1 (id=1543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440), 0x0) 2m0.781092166s ago: executing program 1 (id=1544): chdir(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x900}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) writev(r3, 0x0, 0x0) shutdown(r3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) clock_gettime(0x0, &(0x7f0000000380)) 1m56.86578325s ago: executing program 1 (id=1550): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x17, 0xa, 0x1907, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) 1m56.531432164s ago: executing program 1 (id=1554): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xf31, 0x7fff, 0x6, 0x400, r3, 0x5, '\x00', 0x0, r4, 0x2, 0x1, 0x0, 0xc}, 0x50) fsmount(r2, 0x0, 0x80) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1m53.95354847s ago: executing program 1 (id=1561): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) chdir(0x0) unshare(0x4000000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) 1m38.774350671s ago: executing program 32 (id=1561): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) chdir(0x0) unshare(0x4000000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) 13.827473619s ago: executing program 2 (id=1780): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20100600000006"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x3, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xe3, 0x5, 0x4}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x4, 0x50, 0x7f, 0x10, 0xe}, 0x26, &(0x7f0000000200)=ANY=[@ANYBLOB="050f26000303100b0a1003020000070508003f870656"], 0x3, [{0x45, &(0x7f0000000240)=@string={0x45, 0x3, "94224a367d51e57b5be849352170ccb87424478955baf130eff7e573c77c67275099b74163c3c828d8a7654d48338a90f2deea5d342ea35555cebe5ae6bb0e6c9389fd"}}, {0x67, &(0x7f0000000380)=@string={0x67, 0x3, "d3b95fd148642788a46b1ceb831e7b57e1f2c923c372de8ce20d65dfb9d3e94dd34b1b389d632ac25055391d38422bb877a5dc037a5a7be868d18715ebb6c5e4a6e8a157ec67b09f415dff2e2d703421898f033468ec38be4529b4567ce89e1cda000b5196"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x102b}}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800fca829bab7f1e9009aebd00000fcffffff000000000000000095000000000000002af3f04b9e9428a77152249f1f51e158a4ebbe84f590bdfc2bcc6f563eb69b4cf35b0aa488d9ad2c320eff54f6231a8f3e6e051547c5f70e26df9de8c3e67bb4ab61f4c6f623f593fe14448fda9ceb74ce6e6c0950f491dbe4ed549068f53282857705101fd322652ade3ff830956548ec796378e4c0db8daeb36417264f735f1fb911e400728494b5fc346f1eb88e40bda3922163ffe002df05c773279441f5336d4998c4f9d12892bca4e414488d39e0dfb6c713fff0e58af0e98535068b32539bd1397efa"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) syz_open_dev$cec(&(0x7f00000021c0), 0xffffffffffffffff, 0xd2ec0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0xa, 0x44, 0x3e8a) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18c0}}, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0xdc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc8, 0x1, [@m_ife={0xc4, 0x1, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) syz_usb_control_io(r0, 0x0, 0x0) 13.304906035s ago: executing program 3 (id=1782): socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x9, 0x92, &(0x7f0000000240)=""/146, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2030, 0x40800}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}]}, 0x50}}, 0x20004400) socket$kcm(0x23, 0x2, 0x0) 11.312920163s ago: executing program 3 (id=1786): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180019000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)="bb", 0x1}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) 9.624778637s ago: executing program 4 (id=1788): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff7fffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 9.225937802s ago: executing program 4 (id=1790): getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_WEIGHT={0x8, 0xf, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 9.106503173s ago: executing program 2 (id=1791): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)) 9.105675184s ago: executing program 0 (id=1793): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, 0x1}, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 8.175434667s ago: executing program 2 (id=1794): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xa, [@restrict={0xc, 0x0, 0x0, 0xb, 0x3}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @union={0xd, 0x6, 0x0, 0x5, 0x1, 0x1, [{0xf, 0x5, 0x10001}, {0xc, 0x0, 0x3}, {0xe, 0x2, 0x9}, {0x2, 0x0, 0x40}, {0x9, 0x0, 0xe81}, {0x0, 0x3, 0x5}]}, @enum64={0x6, 0x0, 0x0, 0x13, 0x1, 0xe}, @const={0x3, 0x0, 0x0, 0xa, 0x5}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x71, 0x5f, 0x5f, 0x61, 0x30, 0x5f, 0x30]}}, &(0x7f00000006c0)=""/220, 0xb2, 0xdc, 0x0, 0xffff, 0x10000, @value=r2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.065913618s ago: executing program 4 (id=1795): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) io_uring_setup(0x6c27, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getrlimit(0xa, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000280)) sendmmsg(0xffffffffffffffff, &(0x7f00000059c0), 0x0, 0x4821) 7.312292278s ago: executing program 3 (id=1797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800000001000000fc00000900000000060015000200000014951aa34d0016801000640800000080060001000001000000000000000000"], 0x38}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) time(0xfffffffffffffffc) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, 0x0, 0xc8) writev(r5, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 7.283744749s ago: executing program 0 (id=1798): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) mount(0x0, 0x0, 0x0, 0x8, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x102) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x7fffffff) syz_emit_vhci(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x800000, &(0x7f0000000400)) fdatasync(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r2, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 7.102690961s ago: executing program 5 (id=1799): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) connect$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r0) 6.113165565s ago: executing program 3 (id=1800): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff7fffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 6.104327515s ago: executing program 2 (id=1801): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1, {0x0, r4}}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1}, 0x4) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r13, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r13, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 5.000161951s ago: executing program 3 (id=1802): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80805, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.997638811s ago: executing program 4 (id=1803): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) r0 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0, 0xffff, 0x2, r0}) 4.819593713s ago: executing program 4 (id=1804): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket(0x1a, 0x800, 0x100) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000580)={r3, 0x2, 0xae, "c16fbfd2637703957535329efd6f0400024196e51228c898273a88a4d9f5bf9abc253876535bb1259878bbb792c217a3d835aa0051a983eb714cc237a066baea0fcd8f13a1a7c25ca7b40bdc2e5a417b2ffdf1e305811006bfd142964c340d1fd1bf11fc382c2181b88035d32a6ad486ec6171d87ff55a749af28d14b2d7799f07fa2d641e73f193e31c52ac8a58b8077a5d4d22f98ce69229d0e74fbe3ef64bdfcf93fce9638120ac32d7c194b32b7f450c97892ea2"}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000000308010100"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) syz_io_uring_setup(0x2411, &(0x7f00000003c0)={0x0, 0x19de, 0x400, 0x0, 0x212}, 0x0, 0x0) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x99, 0xfffffffffffffffe, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x101000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024) 4.783084313s ago: executing program 0 (id=1805): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[], 0x118) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)) 4.720984604s ago: executing program 5 (id=1806): getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_WEIGHT={0x8, 0xf, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.709889358s ago: executing program 3 (id=1807): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1, {0x0, r4}}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x93cea4bee562f1e5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xc, 0xa9, &(0x7f00000002c0)=""/169, 0x41100, 0x4c, '\x00', r5, @fallback=0x1d, r1, 0x8, &(0x7f0000000480)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x9, 0xf}, 0x10, r6, r1, 0x7, &(0x7f00000003c0)=[r1, r1], &(0x7f0000000400)=[{0x3, 0x2, 0x10, 0x6}, {0x4, 0x3, 0xd, 0x8}, {0x4, 0x1, 0xb, 0xa}, {0x4, 0x1, 0x3, 0x1}, {0x0, 0x4, 0xa, 0xc}, {0x5, 0x3, 0x9, 0xc}, {0x5, 0x1, 0xd, 0x7}], 0x10, 0x5}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r14, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r14, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 3.708772018s ago: executing program 4 (id=1808): r0 = socket(0x10, 0x80003, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x24, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @map_idx={0x18, 0xf, 0x5, 0x0, 0x20808}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x6, "0de7353d"}]}}, 0x0}, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3}) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x43, 0x24, 0x21, 0x8, 0x13d8, 0x1, 0x3062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2f, 0x97, 0x9d}}]}}]}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x110, r0, 0xf8a7c000) r6 = socket$rds(0x15, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x264, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) bind$rds(r6, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x80031, 0xffffffffffffffff, 0x80000000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='devlink_hwerr\x00', r7, 0x0, 0xfffffffdfffffffd}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 3.701699229s ago: executing program 2 (id=1809): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0x8, 0x4c, 0x0, 0x0, 0x2, 0x9, 0xc, 0xfd, 0x12, 0x0, 0x10, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x3, '\x00', 0x4, 0x8000000000002}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x12, 0x40, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r5, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 3.136128366s ago: executing program 0 (id=1810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800000001000000fc00000900000000060015000200000014951aa34d0016801000640800000080060001000001000000000000000000"], 0x38}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) time(0xfffffffffffffffc) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, 0x0, 0xc8) writev(r5, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 3.016278798s ago: executing program 5 (id=1811): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0x15}, {&(0x7f0000001d80)=""/66, 0x42}, {&(0x7f0000001e00)=""/158, 0x9e}], 0x3}, 0x2}], 0x1, 0x0, 0x0) 1.313698362s ago: executing program 2 (id=1812): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) unshare(0x2c020400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) signalfd4(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.206726233s ago: executing program 0 (id=1813): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff7fffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 1.114462704s ago: executing program 5 (id=1814): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)) r1 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r1, 0xffff, 0x2, r1}) 1.042380036s ago: executing program 5 (id=1815): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) mount(0x0, 0x0, 0x0, 0x8, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x102) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x7fffffff) syz_emit_vhci(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x800000, &(0x7f0000000400)) fdatasync(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r2, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 992.738716ms ago: executing program 0 (id=1816): openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x80101, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) recvmmsg$unix(r1, &(0x7f0000003100), 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001580)=""/52, 0x34}], 0x1}, 0x3ff0}], 0x1, 0x2001, 0x0) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f00000000c0)=0x8000, 0x4) recvmmsg(r1, &(0x7f0000005640)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001640), 0x0, &(0x7f0000001680)=""/155, 0x9b}, 0x8}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001d00)=""/237, 0xed}, {0x0}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000002000)=""/234, 0xea}, {0x0}, {&(0x7f00000021c0)=""/192, 0xc0}], 0x6, &(0x7f00000033c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000022c0)=@nfc, 0x80, &(0x7f0000002640)=[{&(0x7f00000023c0)=""/45, 0x2d}, {&(0x7f0000002400)=""/139, 0x8b}, {&(0x7f00000024c0)=""/146, 0x92}, {&(0x7f0000002580)=""/158, 0x9e}], 0x4, &(0x7f0000002680)=""/146, 0x92}, 0x2}, {{&(0x7f0000002f80)=@generic, 0x80, &(0x7f0000003080)}, 0xfe5}, {{&(0x7f00000032c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003340)=[{&(0x7f00000043c0)=""/222, 0xde}, {&(0x7f00000044c0)=""/218, 0xda}, {&(0x7f00000045c0)=""/4096, 0x1000}, {0x0}], 0x4}, 0x4}], 0x5, 0x120, 0x0) r2 = request_key(&(0x7f00000030c0)='dns_resolver\x00', 0x0, &(0x7f00000057c0)='\'[}*:]\t-\x00', 0xfffffffffffffffb) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f0000007840)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x3, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000005800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, r2, 0x0, r3) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xff00, 0x0, 'syz0\x00', 0xfffffffd}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) 0s ago: executing program 5 (id=1817): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) fsopen(&(0x7f0000000080)='jffs2\x00', 0x1) kernel console output (not intermixed with test programs): 66.665361][ T4281] device veth1_vlan entered promiscuous mode [ 66.684018][ T4268] device veth0_vlan entered promiscuous mode [ 66.696339][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.707784][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.718124][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.728788][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.737536][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.770478][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.780938][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.792032][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.803109][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.813698][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.834476][ T4268] device veth1_vlan entered promiscuous mode [ 66.851984][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.862016][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.870786][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.899771][ T4266] device veth0_vlan entered promiscuous mode [ 66.920912][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.932158][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.943668][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.955049][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.965102][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.981469][ T4281] device veth0_macvtap entered promiscuous mode [ 66.993942][ T4281] device veth1_macvtap entered promiscuous mode [ 67.011047][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.019396][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.030805][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.042696][ T4266] device veth1_vlan entered promiscuous mode [ 67.070540][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.084439][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.093934][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.103542][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.134425][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.144393][ T4265] device veth0_vlan entered promiscuous mode [ 67.154036][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.167495][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.178085][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.203529][ T4265] device veth1_vlan entered promiscuous mode [ 67.215376][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.229176][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.240274][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.250433][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.263402][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.289896][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.300575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.309922][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.320041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.331059][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.342136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.369398][ T4268] device veth0_macvtap entered promiscuous mode [ 67.389698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.398496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.410337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.443546][ T4266] device veth0_macvtap entered promiscuous mode [ 67.452098][ T4268] device veth1_macvtap entered promiscuous mode [ 67.478286][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.492469][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.511786][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.522669][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 67.545727][ T4269] device veth0_vlan entered promiscuous mode [ 67.555392][ T4266] device veth1_macvtap entered promiscuous mode [ 67.564114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.574903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.584499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.594609][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.606880][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 67.606914][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 67.609862][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 67.615106][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.640496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.652968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.663669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.675224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.689232][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 67.691320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.706442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.716557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.726516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.739036][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.753335][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.768052][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.780119][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.789267][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.800874][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.812283][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.836688][ T4265] device veth0_macvtap entered promiscuous mode [ 67.848215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.861081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.873723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.889542][ T4269] device veth1_vlan entered promiscuous mode [ 67.904739][ T4265] device veth1_macvtap entered promiscuous mode [ 67.917697][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.934575][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.947997][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.966336][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.981377][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.995037][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.007866][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.018824][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.031307][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.045916][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.068369][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.078583][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.088649][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.099049][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.109220][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.121161][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.132012][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.150045][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.164093][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.177209][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.191845][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.220929][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.231657][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.268881][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.283964][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.295357][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.307359][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.321532][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.334170][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.347226][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.363894][ T4269] device veth0_macvtap entered promiscuous mode [ 68.372439][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.380649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.390050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.401179][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.410747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.442524][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.462632][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.473223][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.485385][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.497062][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.512591][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.527622][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.538271][ T4269] device veth1_macvtap entered promiscuous mode [ 68.548030][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.560123][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.570171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.581508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.625386][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.633063][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.648492][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.649697][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.667697][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.677845][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.700429][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.711101][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.722446][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.739259][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.751975][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.765082][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.778472][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.791676][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.804373][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.815927][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.830416][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.849075][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.859965][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.868839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.881297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.931513][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.943283][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.954789][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.969013][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.979998][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.991573][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.002632][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.014280][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.028624][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.071389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.084447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.103879][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.113769][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.125904][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.135538][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.149164][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.157937][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.196198][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.198812][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.260224][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.269085][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.310186][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.342063][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.371171][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.380037][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.380087][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.425624][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.600496][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 69.603803][ T4389] Zero length message leads to an empty skb [ 69.690922][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 69.690942][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 69.691194][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 69.760388][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 69.781635][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.815899][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.995585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.007014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 70.007141][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.040063][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.167223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 70.370726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2ca!!! [ 70.386679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.396310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 70.400616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.429733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.429776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.449718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.579799][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.601296][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.243145][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.253031][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.308267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.363858][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.373609][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.655728][ T4432] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.782608][ T4465] syz.2.18 sent an empty control message without MSG_MORE. [ 74.846153][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.944331][ T4467] process 'syz.0.20' launched './file2' with NULL argv: empty string added [ 75.059979][ T7] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 76.470246][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.487823][ T125] cfg80211: failed to load regulatory.db [ 76.618271][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 76.690166][ T7] ums-cypress 5-1:1.0: USB Mass Storage device detected [ 78.028634][ T41] usb 5-1: USB disconnect, device number 2 [ 79.910891][ T4499] syz.4.27 (4499): drop_caches: 2 [ 79.916430][ T4499] syz.4.27 (4499): drop_caches: 2 [ 79.923524][ T4490] overlayfs: failed to resolve './file0': -2 [ 80.093959][ T4492] 9pnet: Could not find request transport: 0xffffffffffffffff [ 80.957021][ T4509] Bluetooth: MGMT ver 1.22 [ 86.168618][ T4585] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 87.487206][ T4595] sd 0:0:1:0: PR command failed: 1026 [ 87.493264][ T4595] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 87.500661][ T4595] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 88.826419][ T4609] 9pnet_fd: Insufficient options for proto=fd [ 93.161494][ T4642] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 93.309027][ T4629] syz.2.62 (4629): drop_caches: 2 [ 98.188953][ T4685] syz.4.81 (4685): drop_caches: 2 [ 98.359692][ T4711] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 102.619960][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.840238][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 102.861120][ T14] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 102.970686][ T14] usb 2-1: config 0 has no interface number 0 [ 103.057959][ T14] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 103.187000][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.381031][ T14] usb 2-1: config 0 descriptor?? [ 103.457919][ T4756] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 103.746579][ T4775] 9pnet_fd: Insufficient options for proto=fd [ 103.762112][ T14] usb 2-1: string descriptor 0 read error: -71 [ 103.778375][ T14] go7007: probe of 2-1:0.159 failed with error -12 [ 104.441780][ T14] usb 2-1: USB disconnect, device number 2 [ 105.033063][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 105.759656][ T4278] Bluetooth: hci4: command 0x0405 tx timeout [ 108.169465][ T4820] 9pnet_fd: Insufficient options for proto=fd [ 110.677781][ T4836] ubi31: attaching mtd0 [ 110.684108][ T4836] ubi31: scanning is finished [ 110.688840][ T4836] ubi31: empty MTD device detected [ 110.800697][ T4836] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 110.809338][ T4836] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 110.817189][ T4836] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 110.824474][ T4836] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 110.833243][ T4836] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 110.842092][ T4836] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 110.850777][ T4836] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4146808932 [ 110.861214][ T4836] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 110.891264][ T4841] ubi31: background thread "ubi_bgt31d" started, PID 4841 [ 114.319758][ T125] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.547364][ T125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.586908][ T125] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.619540][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.648695][ T125] usb 1-1: config 0 descriptor?? [ 114.676581][ T125] pwc: Askey VC010 type 2 USB webcam detected. [ 114.877980][ T125] pwc: send_video_command error -71 [ 114.894990][ T125] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 114.897681][ T4887] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 114.923451][ T125] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 114.955695][ T125] usb 1-1: USB disconnect, device number 2 [ 116.299709][ T125] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.619301][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.869635][ T4318] usb 2-1: Using ep0 maxpacket: 8 [ 118.677724][ T4318] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 118.687512][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.733229][ T4318] pvrusb2: Hardware description: Terratec Grabster AV400 [ 118.740809][ T4318] pvrusb2: ********** [ 118.744989][ T4318] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 118.765075][ T4318] pvrusb2: Important functionality might not be entirely working. [ 119.134824][ T4318] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 119.188468][ T4318] pvrusb2: ********** [ 119.236191][ T2305] pvrusb2: Invalid write control endpoint [ 119.536781][ T125] usb 2-1: USB disconnect, device number 3 [ 119.546856][ T2305] pvrusb2: Invalid write control endpoint [ 119.560986][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 119.605809][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 119.632298][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 119.678526][ T2305] pvrusb2: Device being rendered inoperable [ 119.701736][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 119.714698][ T4907] syz.0.141 (4907): drop_caches: 2 [ 119.719391][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 119.732615][ T2305] pvrusb2: Attached sub-driver cx25840 [ 119.738498][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 119.748865][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 120.766810][ T4947] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 121.547225][ T4948] syz.4.152 (4948): drop_caches: 2 [ 121.659826][ T4948] syz.4.152 (4948): drop_caches: 2 [ 121.682399][ T4277] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.689692][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 122.014306][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'. [ 122.025203][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'. [ 122.034558][ T4956] netlink: 'syz.0.154': attribute type 6 has an invalid length. [ 125.467255][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.484433][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.513391][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.539874][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.550688][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.562907][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.201014][ T4987] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 126.220008][ T4987] netlink: 'syz.2.163': attribute type 2 has an invalid length. [ 126.379041][ T4995] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 126.502035][ T4997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'. [ 126.511410][ T4997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'. [ 126.521001][ T4997] netlink: 'syz.3.166': attribute type 6 has an invalid length. [ 128.782878][ T5021] 9pnet_fd: Insufficient options for proto=fd [ 131.116922][ T5056] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 131.164383][ T5058] input: syz0 as /devices/virtual/input/input5 [ 132.079664][ T4277] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.626602][ T5072] sd 0:0:1:0: PR command failed: 1026 [ 132.632416][ T5072] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 132.639338][ T5072] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 132.802006][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.808729][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.941245][ T5089] tmpfs: Unknown parameter 'quota' [ 134.757537][ T5094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 134.818599][ T5094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 134.895823][ T5094] netlink: 'syz.0.192': attribute type 6 has an invalid length. [ 136.575042][ T5110] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 137.208642][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 141.425038][ T26] audit: type=1800 audit(1751682869.384:2): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.211" name="/newroot/40/file0" dev="tmpfs" ino=223 res=0 errno=0 [ 141.624024][ T5168] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 142.319629][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 142.319836][ T4277] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.661241][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 143.351845][ T5178] netlink: 60 bytes leftover after parsing attributes in process `syz.3.216'. [ 144.944210][ T5196] syz.4.222 uses obsolete (PF_INET,SOCK_PACKET) [ 145.470904][ T5208] 9pnet_fd: Insufficient options for proto=fd [ 145.743666][ T5211] team0: Device sit1 is of different type [ 145.998745][ T5198] device bond1 entered promiscuous mode [ 146.010504][ T5198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.013103][ T5217] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 147.074443][ T4256] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.195026][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 147.346960][ T4256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.762361][ T4256] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 147.774342][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.808246][ T4256] usb 2-1: config 0 descriptor?? [ 147.834779][ T4256] pwc: Askey VC010 type 2 USB webcam detected. [ 148.095015][ T4256] pwc: send_video_command error -71 [ 148.104636][ T4256] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 148.123516][ T4256] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 148.764884][ T4256] usb 2-1: USB disconnect, device number 4 [ 149.269632][ T4256] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.463061][ T4256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.587013][ T4256] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.602874][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.700304][ T4256] usb 2-1: config 0 descriptor?? [ 149.940422][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.942798][ T4256] pwc: Askey VC010 type 2 USB webcam detected. [ 150.002036][ T4256] pwc: send_video_command error -71 [ 150.007334][ T4256] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 150.030182][ T4256] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 150.039573][ T4256] usb 2-1: USB disconnect, device number 5 [ 150.167606][ T7] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 150.182429][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.229620][ T7] usb 3-1: config 0 descriptor?? [ 152.227583][ T5272] syz.1.240 (5272): drop_caches: 2 [ 152.263207][ T5272] syz.1.240 (5272): drop_caches: 2 [ 154.386003][ T7] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 154.420041][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 154.467677][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 155.412370][ T7] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 155.463214][ T7] [drm] Initialized udl on minor 2 [ 155.527217][ T7] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 155.551020][ T7] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 155.623735][ T7] usb 3-1: USB disconnect, device number 2 [ 156.629547][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.280970][ T5314] syz.4.254 (5314): drop_caches: 2 [ 157.294155][ T5314] syz.4.254 (5314): drop_caches: 2 [ 158.239156][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.963921][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.023973][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.096093][ T7] usb 3-1: config 0 descriptor?? [ 159.130169][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 159.148079][ T7] usb 3-1: can't set config #0, error -32 [ 159.166105][ T7] usb 3-1: USB disconnect, device number 3 [ 161.492293][ T5341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 161.502262][ T5341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 162.513754][ T5349] 9pnet_virtio: no channels available for device 127.0.0.1 [ 162.814755][ T5347] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.265' sets config #0 [ 162.848737][ T5347] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.265' sets config #1 [ 163.905859][ T5356] syz.4.268 (5356): drop_caches: 2 [ 164.005608][ T5356] syz.4.268 (5356): drop_caches: 2 [ 165.727415][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.212284][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.238132][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.252667][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.275450][ T7] usb 3-1: config 0 descriptor?? [ 166.346056][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 166.454397][ T5387] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.277' sets config #0 [ 166.584388][ T7] pwc: send_video_command error -71 [ 166.607488][ T7] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 166.618588][ T5387] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.277' sets config #1 [ 167.318902][ T7] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 167.348608][ T7] usb 3-1: USB disconnect, device number 4 [ 167.819623][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.032800][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.069610][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 168.191069][ T5404] syz.0.281 (5404): drop_caches: 2 [ 168.198323][ T5404] syz.0.281 (5404): drop_caches: 2 [ 169.405799][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.517375][ T7] usb 3-1: config 0 descriptor?? [ 169.604077][ T7] usb 3-1: can't set config #0, error -71 [ 169.620262][ T7] usb 3-1: USB disconnect, device number 5 [ 169.949538][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 170.265839][ T5419] netlink: 156 bytes leftover after parsing attributes in process `syz.3.284'. [ 172.849915][ T5429] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.290' sets config #0 [ 172.860126][ T5434] ubi: mtd0 is already attached to ubi31 [ 172.902752][ T5429] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.290' sets config #1 [ 174.452736][ T5452] syz.1.296 (5452): drop_caches: 2 [ 174.472719][ T5452] syz.1.296 (5452): drop_caches: 2 [ 175.841353][ T5458] overlayfs: failed to resolve './file0': -2 [ 175.919777][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 176.500600][ T5462] 9pnet: Could not find request transport: 0xffffffffffffffff [ 176.749934][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'. [ 176.761193][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'. [ 177.114028][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 177.441300][ T5483] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.309' sets config #0 [ 177.472502][ T5483] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.309' sets config #1 [ 178.769489][ T5495] syz.4.310 (5495): drop_caches: 2 [ 178.776295][ T5495] syz.4.310 (5495): drop_caches: 2 [ 180.624692][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 181.647439][ T5517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.318'. [ 181.656674][ T5517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.318'. [ 182.327624][ T5525] overlayfs: failed to resolve './file0': -2 [ 182.406101][ T5510] ubi: mtd0 is already attached to ubi31 [ 182.724271][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 182.750926][ T5521] 9pnet: Could not find request transport: 0xffffffffffffffff [ 183.220089][ T5537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.322'. [ 183.229983][ T5537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.322'. [ 183.239985][ T5537] netlink: 'syz.4.322': attribute type 6 has an invalid length. [ 186.079524][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 186.090178][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 186.096289][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 186.099618][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 186.102500][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 192.792947][ T5597] capability: warning: `syz.4.339' uses deprecated v2 capabilities in a way that may be insecure [ 192.891420][ T5603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'. [ 193.120751][ T5593] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 193.343599][ T5593] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.352962][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.362158][ T5593] usb 4-1: Product: syz [ 193.366584][ T5593] usb 4-1: Manufacturer: syz [ 193.373617][ T5593] usb 4-1: SerialNumber: syz [ 193.395368][ T5593] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.724234][ T5593] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 194.100679][ T5608] sctp: failed to load transform for md5: -2 [ 194.247635][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.287067][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.321707][ T5628] ubi: mtd0 is already attached to ubi31 [ 194.554313][ T4323] usb 4-1: USB disconnect, device number 2 [ 195.039528][ T5593] usb 4-1: Service connection timeout for: 256 [ 195.045769][ T5593] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 195.152284][ T5593] ath9k_htc: Failed to initialize the device [ 195.306879][ T4323] usb 4-1: ath9k_htc: USB layer deinitialized [ 197.169631][ T5656] mmap: syz.0.354 (5656) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.173776][ T5671] 9pnet_virtio: no channels available for device 127.0.0.1 [ 201.336320][ T5696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 203.903449][ T5728] ubi: mtd0 is already attached to ubi31 [ 205.039535][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 205.039562][ T4270] Bluetooth: hci5: command 0x1003 tx timeout [ 205.162764][ T5737] 9pnet_virtio: no channels available for device 127.0.0.1 [ 207.575323][ T5763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.382'. [ 207.584522][ T5763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.382'. [ 209.020902][ T5778] ubi: mtd0 is already attached to ubi31 [ 211.623705][ T5789] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 213.239267][ T5803] fuse: Unknown parameter 'group_id00000000000000000000' [ 214.523195][ T5819] 9pnet_virtio: no channels available for device 127.0.0.1 [ 219.067856][ T5854] fuse: Unknown parameter 'group_id00000000000000000000' [ 220.282077][ T5874] 9pnet_virtio: no channels available for device 127.0.0.1 [ 224.318710][ T5906] fuse: Bad value for 'user_id' [ 226.897057][ T5932] 9pnet_virtio: no channels available for device 127.0.0.1 [ 228.707378][ T5951] fuse: Bad value for 'user_id' [ 234.343080][ T6009] fuse: Bad value for 'user_id' [ 235.447589][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.452'. [ 236.730416][ T6039] ubi: mtd0 is already attached to ubi31 [ 240.967098][ T6061] team0: Device sit1 is of different type [ 242.350094][ T6068] fuse: Bad value for 'fd' [ 244.318906][ T6091] ubi: mtd0 is already attached to ubi31 [ 245.768757][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.777274][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.784812][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.534625][ T6123] netlink: 72 bytes leftover after parsing attributes in process `syz.3.477'. [ 248.592924][ T6127] fuse: Bad value for 'fd' [ 252.572151][ T6158] ubi: mtd0 is already attached to ubi31 [ 254.332960][ T6168] fuse: Bad value for 'fd' [ 254.360525][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.367931][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.377986][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.385594][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.393101][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.400582][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.685998][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693583][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.817016][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 257.065509][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 259.067570][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 259.264061][ T6211] fuse: Bad value for 'fd' [ 260.149570][ T6220] ubi: mtd0 is already attached to ubi31 [ 263.113155][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.121572][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.128973][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.146750][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 264.155770][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'. [ 264.175503][ T4317] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 264.560816][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 264.567385][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 264.919716][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 264.926629][ T4317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.993729][ T4317] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.030615][ T4317] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.057312][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.067631][ T4317] usb 4-1: Product: syz [ 265.072048][ T4317] usb 4-1: Manufacturer: syz [ 265.076743][ T4317] usb 4-1: SerialNumber: syz [ 265.340599][ T4317] usb 4-1: 0:2 : does not exist [ 265.345628][ T6259] fuse: Bad value for 'fd' [ 265.372602][ T4317] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 265.570360][ T4317] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 265.635940][ T4317] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 265.658957][ T4317] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 265.798808][ T4317] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 265.811491][ T4317] usb 4-1: USB disconnect, device number 3 [ 265.894841][ T6264] ubi: mtd0 is already attached to ubi31 [ 265.980556][ T6257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.514'. [ 266.129875][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'. [ 266.139017][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'. [ 266.358266][ T6256] udevd[6256]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.639950][ T4333] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 268.841371][ T4333] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.890777][ T4333] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.905584][ T4333] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.573886][ T4333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.591955][ T6287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.609884][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 269.939313][ T4333] usb 3-1: USB disconnect, device number 6 [ 270.638278][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 270.648278][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 271.444640][ T6317] udevd[6317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.030339][ T6351] ubi: mtd0 is already attached to ubi31 [ 275.859836][ T6361] 9pnet_fd: Insufficient options for proto=fd [ 281.109629][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 281.380357][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 281.415536][ T22] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 281.536470][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.659178][ T22] pvrusb2: Hardware description: Terratec Grabster AV400 [ 281.669890][ T22] pvrusb2: ********** [ 281.673964][ T22] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 281.688414][ T22] pvrusb2: Important functionality might not be entirely working. [ 281.719293][ T22] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 282.641130][ T22] pvrusb2: ********** [ 282.659629][ T2305] pvrusb2: Invalid write control endpoint [ 282.930697][ T4333] usb 4-1: USB disconnect, device number 4 [ 283.020368][ T6421] 9pnet_fd: Insufficient options for proto=fd [ 283.361065][ T2305] pvrusb2: Invalid write control endpoint [ 283.368699][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 283.386919][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 283.405574][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 283.426874][ T2305] pvrusb2: Device being rendered inoperable [ 283.437857][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 283.454170][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 283.487459][ T2305] pvrusb2: Attached sub-driver cx25840 [ 283.506803][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 283.517766][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 283.640772][ T4323] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 283.884808][ T6426] overlayfs: conflicting lowerdir path [ 284.109516][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 284.119313][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.179253][ T4323] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 284.207593][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.241297][ T4323] usb 5-1: config 0 descriptor?? [ 284.320638][ T6424] 9pnet: Could not find request transport: 0xffffffffffffffff [ 284.579660][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 284.919677][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 285.331955][ T4323] arvo 0003:1E7D:30D4.0001: item fetching failed at offset 0/5 [ 285.348141][ T5838] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 285.357387][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.380080][ T4323] arvo 0003:1E7D:30D4.0001: parse failed [ 285.389677][ T4323] arvo: probe of 0003:1E7D:30D4.0001 failed with error -22 [ 285.424943][ T5838] usb 4-1: Product: syz [ 285.429174][ T5838] usb 4-1: Manufacturer: syz [ 285.505342][ T5838] usb 4-1: SerialNumber: syz [ 285.603945][ T4381] usb 5-1: USB disconnect, device number 3 [ 285.636326][ T5838] usb 4-1: config 0 descriptor?? [ 287.010470][ T5838] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 287.459543][ T4381] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 288.038831][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.047460][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.055057][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.103519][ T4381] usb 3-1: Using ep0 maxpacket: 8 [ 288.105511][ T4381] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.106957][ T4381] usb 3-1: config 1 interface 0 has no altsetting 0 [ 288.110895][ T4381] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.40 [ 288.110920][ T4381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.110939][ T4381] usb 3-1: Product: syz [ 288.110952][ T4381] usb 3-1: Manufacturer: syz [ 288.110965][ T4381] usb 3-1: SerialNumber: syz [ 288.709161][ T4381] usbhid 3-1:1.0: can't add hid device: -22 [ 288.733245][ T4381] usbhid: probe of 3-1:1.0 failed with error -22 [ 288.767198][ T4381] usb 3-1: USB disconnect, device number 7 [ 288.908324][ T5838] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 289.267969][ T6463] 9pnet_virtio: no channels available for device 127.0.0.1 [ 289.807930][ T5838] usb 4-1: USB disconnect, device number 5 [ 290.067671][ T6473] 9pnet_fd: Insufficient options for proto=fd [ 291.054184][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.573'. [ 291.063928][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.573'. [ 291.074405][ T6478] netlink: 'syz.3.573': attribute type 6 has an invalid length. [ 291.597448][ T6488] netlink: 156 bytes leftover after parsing attributes in process `syz.1.575'. [ 295.803892][ T6521] 9pnet_fd: Insufficient options for proto=fd [ 295.879642][ T4256] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 296.069539][ T4256] usb 2-1: Using ep0 maxpacket: 8 [ 296.078130][ T4256] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 296.088626][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.097358][ T4256] usb 2-1: Product: syz [ 296.101794][ T4256] usb 2-1: Manufacturer: syz [ 296.106544][ T4256] usb 2-1: SerialNumber: syz [ 296.113998][ T4256] usb 2-1: config 0 descriptor?? [ 296.375350][ T4256] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 296.855561][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.585'. [ 296.864780][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.585'. [ 297.237491][ T6528] netlink: 44 bytes leftover after parsing attributes in process `syz.4.586'. [ 298.480239][ T6547] overlayfs: conflicting lowerdir path [ 298.492202][ T4256] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 298.536167][ T4256] usb 2-1: USB disconnect, device number 6 [ 298.875978][ T6545] 9pnet: Could not find request transport: 0xffffffffffffffff [ 300.475959][ T6573] 9pnet_fd: Insufficient options for proto=fd [ 303.849567][ T4317] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 304.281509][ T6609] netlink: 44 bytes leftover after parsing attributes in process `syz.0.606'. [ 304.929524][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 305.140428][ T4317] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 305.187679][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.196149][ T4317] usb 5-1: Product: syz [ 305.202854][ T4317] usb 5-1: Manufacturer: syz [ 305.207544][ T4317] usb 5-1: SerialNumber: syz [ 306.045922][ T4317] usb 5-1: config 0 descriptor?? [ 306.279371][ T4317] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 308.048057][ T6652] netlink: 148 bytes leftover after parsing attributes in process `syz.3.618'. [ 308.814543][ T4317] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 309.712152][ T4317] usb 5-1: USB disconnect, device number 4 [ 312.267991][ T6694] syz.3.629 (6694): drop_caches: 2 [ 312.276144][ T6694] syz.3.629 (6694): drop_caches: 2 [ 314.290116][ T4381] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 315.259652][ T4381] usb 1-1: Using ep0 maxpacket: 8 [ 315.280353][ T4381] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.290832][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.299195][ T4381] usb 1-1: Product: syz [ 315.305218][ T4381] usb 1-1: Manufacturer: syz [ 315.310502][ T4381] usb 1-1: SerialNumber: syz [ 315.436256][ T4381] usb 1-1: config 0 descriptor?? [ 316.513079][ T4381] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 316.781251][ T6731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.642'. [ 317.126175][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.136249][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.366492][ T4381] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 319.410760][ T4256] usb 1-1: USB disconnect, device number 4 [ 322.037867][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.656'. [ 322.047171][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.656'. [ 322.058196][ T6784] netlink: 'syz.0.656': attribute type 6 has an invalid length. [ 324.229658][ T4340] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 324.315276][ T6808] netlink: 156 bytes leftover after parsing attributes in process `syz.1.664'. [ 325.209556][ T4340] usb 3-1: Using ep0 maxpacket: 8 [ 325.219506][ T4340] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 325.289506][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.308308][ T4340] usb 3-1: Product: syz [ 325.321749][ T4340] usb 3-1: Manufacturer: syz [ 325.326410][ T4340] usb 3-1: SerialNumber: syz [ 325.334313][ T4340] usb 3-1: config 0 descriptor?? [ 325.546048][ T4340] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 327.339520][ T4340] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 327.452104][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'. [ 327.466834][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'. [ 327.476980][ T6840] netlink: 'syz.0.669': attribute type 6 has an invalid length. [ 327.787593][ T4340] usb 3-1: USB disconnect, device number 8 [ 328.476900][ T6859] netlink: 156 bytes leftover after parsing attributes in process `syz.0.678'. [ 329.559330][ T6869] netlink: 44 bytes leftover after parsing attributes in process `syz.0.681'. [ 329.724965][ T6873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.682'. [ 331.639829][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 331.648750][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 331.657728][ T6892] netlink: 'syz.0.688': attribute type 6 has an invalid length. [ 332.372474][ T6903] netlink: 156 bytes leftover after parsing attributes in process `syz.1.691'. [ 333.626401][ T6914] 9pnet_fd: Insufficient options for proto=fd [ 335.860525][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.701'. [ 335.880969][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.701'. [ 335.947380][ T6943] netlink: 'syz.3.701': attribute type 6 has an invalid length. [ 336.362213][ T6953] team0: Device sit1 is of different type [ 337.550603][ T6962] 9pnet_virtio: no channels available for device 127.0.0.1 [ 340.876919][ T4341] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 341.489614][ T4341] usb 5-1: Using ep0 maxpacket: 8 [ 342.278422][ T4341] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 342.288310][ T4341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.305309][ T4341] pvrusb2: Hardware description: Terratec Grabster AV400 [ 342.312689][ T4341] pvrusb2: ********** [ 342.316687][ T4341] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 342.327578][ T4341] pvrusb2: Important functionality might not be entirely working. [ 342.337228][ T4341] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 342.349713][ T4341] pvrusb2: ********** [ 342.507410][ T2305] pvrusb2: Invalid write control endpoint [ 342.513504][ T4341] usb 5-1: USB disconnect, device number 5 [ 343.316591][ T2305] pvrusb2: Invalid write control endpoint [ 343.326198][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 343.754750][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 343.858184][ T7018] 9pnet_virtio: no channels available for device 127.0.0.1 [ 344.266502][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 344.277428][ T2305] pvrusb2: Device being rendered inoperable [ 344.283489][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 344.292345][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 344.306231][ T2305] pvrusb2: Attached sub-driver cx25840 [ 344.316705][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 344.342454][ T7021] netlink: 44 bytes leftover after parsing attributes in process `syz.0.719'. [ 344.384539][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 344.597438][ T7025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.722'. [ 344.832908][ T7033] fuse: Unknown parameter 'user_id00000000000000000000' [ 346.125993][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'. [ 346.126149][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'. [ 346.126182][ T7047] netlink: 'syz.2.727': attribute type 6 has an invalid length. [ 347.439792][ T4340] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 347.649812][ T4340] usb 5-1: Using ep0 maxpacket: 8 [ 347.666005][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.723606][ T4340] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 347.769701][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.821753][ T4340] usb 5-1: config 0 descriptor?? [ 347.889528][ T4344] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 348.089629][ T4344] usb 2-1: Using ep0 maxpacket: 8 [ 348.098565][ T4344] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 348.118029][ T4344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.150896][ T4344] pvrusb2: Hardware description: Terratec Grabster AV400 [ 348.176693][ T4344] pvrusb2: ********** [ 348.186690][ T4344] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 348.212086][ T4344] pvrusb2: Important functionality might not be entirely working. [ 348.275355][ T4344] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 348.319598][ T4344] pvrusb2: ********** [ 348.332579][ T4340] usbhid 5-1:0.0: can't add hid device: -71 [ 348.338601][ T4340] usbhid: probe of 5-1:0.0 failed with error -71 [ 348.348101][ T4340] usb 5-1: USB disconnect, device number 6 [ 348.368852][ T2305] pvrusb2: Invalid write control endpoint [ 348.390464][ T4344] usb 2-1: USB disconnect, device number 7 [ 349.671621][ T7071] 9pnet_virtio: no channels available for device 127.0.0.1 [ 349.759322][ T2305] pvrusb2: Invalid write control endpoint [ 349.788697][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 349.903602][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 350.039199][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 350.103997][ T2305] pvrusb2: Device being rendered inoperable [ 350.110370][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 350.117939][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 350.126606][ T2305] pvrusb2: Attached sub-driver cx25840 [ 350.132204][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 350.142582][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 351.196045][ T7086] [U]  [ 351.974687][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.743'. [ 352.010051][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.743'. [ 352.024316][ T7097] netlink: 'syz.1.743': attribute type 6 has an invalid length. [ 352.542011][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 353.177420][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 353.200567][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.244839][ T22] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 353.269502][ T4340] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 353.285096][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.373815][ T22] usb 4-1: config 0 descriptor?? [ 353.460235][ T4340] usb 3-1: Using ep0 maxpacket: 8 [ 353.467017][ T4340] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 353.491578][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.524123][ T4340] pvrusb2: Hardware description: Terratec Grabster AV400 [ 353.537036][ T4340] pvrusb2: ********** [ 353.546565][ T4340] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 353.607711][ T4340] pvrusb2: Important functionality might not be entirely working. [ 353.638569][ T4340] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 353.655880][ T4340] pvrusb2: ********** [ 353.726616][ T2305] pvrusb2: Invalid write control endpoint [ 353.728506][ T4340] usb 3-1: USB disconnect, device number 9 [ 353.970567][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 353.979341][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 354.019779][ T22] usb 4-1: USB disconnect, device number 6 [ 354.027797][ T2305] pvrusb2: Invalid write control endpoint [ 354.046403][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 354.079741][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 354.087557][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 354.098206][ T2305] pvrusb2: Device being rendered inoperable [ 354.104647][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 354.114220][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 354.128929][ T2305] pvrusb2: Attached sub-driver cx25840 [ 354.141324][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 354.154634][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 358.474178][ T4317] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 359.489632][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 359.590740][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 359.882601][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.892456][ T4317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.903146][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 359.929627][ T4317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 359.951553][ T4317] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 359.960971][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.972685][ T4317] usb 1-1: config 0 descriptor?? [ 359.978576][ T7147] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.199549][ T4340] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 361.028974][ T4381] usb 1-1: USB disconnect, device number 5 [ 361.030822][ T4270] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 361.183436][ T4340] usb 3-1: Using ep0 maxpacket: 8 [ 361.199160][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.223042][ T4340] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 361.244042][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.276401][ T4340] usb 3-1: config 0 descriptor?? [ 362.573691][ T4340] usbhid 3-1:0.0: can't add hid device: -71 [ 362.639726][ T4340] usbhid: probe of 3-1:0.0 failed with error -71 [ 362.741354][ T4340] usb 3-1: USB disconnect, device number 10 [ 364.917472][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 364.919653][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 365.010057][ T7237] team0: Device sit1 is of different type [ 365.131508][ T7239] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.783' sets config #0 [ 365.170841][ T7239] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.783' sets config #1 [ 366.353245][ T7248] hub 6-0:1.0: USB hub found [ 366.358616][ T7248] hub 6-0:1.0: 1 port detected [ 378.561485][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.589660][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.484446][ T7480] 9pnet_fd: Insufficient options for proto=fd [ 386.555224][ T7481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.854'. [ 387.708924][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 387.919613][ T22] usb 5-1: device descriptor read/64, error -71 [ 388.429588][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 388.949578][ T22] usb 5-1: device descriptor read/64, error -71 [ 389.309748][ T22] usb usb5-port1: attempt power cycle [ 389.749493][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 390.250068][ T22] usb 5-1: device descriptor read/8, error -71 [ 390.637897][ T7509] 9pnet_virtio: no channels available for device 127.0.0.1 [ 391.499237][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.865'. [ 391.508299][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.865'. [ 391.549720][ T7522] 9pnet_fd: Insufficient options for proto=fd [ 396.918414][ T7570] 9pnet_fd: Insufficient options for proto=fd [ 398.217157][ T7587] 9pnet_virtio: no channels available for device 127.0.0.1 [ 398.311785][ T7591] ubi: mtd0 is already attached to ubi31 [ 403.031207][ T7625] 9pnet_fd: Insufficient options for proto=fd [ 405.684105][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.693425][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.749224][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.758511][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.768457][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.793024][ T7661] 9pnet_fd: Insufficient options for proto=fd [ 405.865677][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.681193][ T7698] syz.0.911 (7698): drop_caches: 2 [ 409.725784][ T7698] syz.0.911 (7698): drop_caches: 2 [ 412.530058][ T7720] 9pnet_fd: Insufficient options for proto=fd [ 412.578314][ T7716] 9pnet: Could not find request transport: 0xffffffffffffffff [ 412.616144][ T7716] overlayfs: conflicting lowerdir path [ 412.797207][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 412.806171][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 414.345409][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.468582][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.477366][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.332990][ T7751] netlink: 44 bytes leftover after parsing attributes in process `syz.4.928'. [ 417.230265][ T7765] 9pnet_fd: Insufficient options for proto=fd [ 419.518727][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 419.599656][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 422.415072][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.424138][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.450541][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.459229][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.468974][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.478410][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.087371][ T7840] netlink: 44 bytes leftover after parsing attributes in process `syz.0.949'. [ 425.680031][ T7857] netlink: 156 bytes leftover after parsing attributes in process `syz.3.954'. [ 427.024353][ T7870] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 429.026598][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.960'. [ 434.107136][ T7942] netlink: 44 bytes leftover after parsing attributes in process `syz.2.974'. [ 434.940679][ T7948] 9pnet_fd: Insufficient options for proto=fd [ 440.023888][ T8022] 9pnet_fd: Insufficient options for proto=fd [ 440.331865][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.345784][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.242309][ T8023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.995'. [ 441.281191][ T8020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.993'. [ 442.796000][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 442.805440][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 444.302069][ T8066] overlayfs: conflicting lowerdir path [ 444.551701][ T8062] 9pnet: Could not find request transport: 0xffffffffffffffff [ 446.061399][ T8086] 9pnet_fd: Insufficient options for proto=fd [ 448.811612][ T8111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1014'. [ 448.820702][ T8111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1014'. [ 448.910664][ T8113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1015'. [ 450.098416][ T8132] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1021' sets config #0 [ 450.253449][ T8132] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1021' sets config #1 [ 451.258083][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 451.340101][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.340225][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 453.822068][ T8163] 9pnet_fd: Insufficient options for proto=fd [ 453.865366][ T8166] team0: Device sit1 is of different type [ 454.429623][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 454.449375][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 454.538553][ T8186] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1036' sets config #0 [ 454.551381][ T8186] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1036' sets config #1 [ 457.974308][ T8218] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1047' sets config #0 [ 457.999282][ T8218] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1047' sets config #1 [ 460.146142][ T8242] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 461.665945][ T8255] 9pnet_fd: Insufficient options for proto=fd [ 462.028574][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1061'. [ 462.289967][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1061'. [ 464.443461][ T8285] 9pnet: Could not find request transport: 0xffffffffffffffff [ 464.448448][ T8288] overlayfs: conflicting lowerdir path [ 465.310882][ T8298] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 467.778358][ T8328] 9pnet_virtio: no channels available for device 127.0.0.1 [ 469.158457][ T8337] 9pnet_fd: Insufficient options for proto=fd [ 470.352945][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1083'. [ 470.449686][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1083'. [ 470.822372][ T8355] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 473.325148][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 474.955893][ T8392] 9pnet_virtio: no channels available for device 127.0.0.1 [ 476.880730][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 476.880837][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 476.968592][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1097'. [ 476.977885][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1097'. [ 478.085906][ T8412] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 478.274905][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 478.282167][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 478.386443][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.662894][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 481.540165][ T8441] 9pnet_virtio: no channels available for device 127.0.0.1 [ 482.193459][ T8423] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1104'. [ 486.243595][ T8479] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 486.494124][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 488.024565][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 488.239602][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 488.246882][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 489.629145][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 489.637705][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 489.978847][ T8507] 9pnet_virtio: no channels available for device 127.0.0.1 [ 490.416890][ T8509] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1124'. [ 492.612285][ T8543] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 493.196378][ T8549] overlayfs: conflicting lowerdir path [ 493.265340][ T8546] 9pnet: Could not find request transport: 0xffffffffffffffff [ 493.742031][ T8559] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1136' sets config #0 [ 494.358570][ T8559] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1136' sets config #1 [ 494.665330][ T8567] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1137'. [ 495.930733][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 495.949630][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 498.885102][ T8598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1143'. [ 498.894932][ T8598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1143'. [ 499.117400][ T8614] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 500.825247][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 500.846125][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.869685][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.454435][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.462738][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.850818][ T8650] overlayfs: conflicting lowerdir path [ 503.747700][ T8648] 9pnet: Could not find request transport: 0xffffffffffffffff [ 503.991298][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1161'. [ 504.000888][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1161'. [ 504.366807][ T8668] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 506.772726][ T8695] 9pnet_virtio: no channels available for device 127.0.0.1 [ 508.955566][ T8712] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1173'. [ 509.197707][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 509.223470][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.242541][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.720523][ T8719] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 511.309577][ T4381] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 511.909632][ T4381] usb 3-1: Using ep0 maxpacket: 8 [ 511.916678][ T4381] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.934662][ T4381] usb 3-1: config 0 has no interfaces? [ 511.942317][ T4381] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.630087][ T4381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.691716][ T4381] usb 3-1: config 0 descriptor?? [ 512.841459][ T8751] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1186'. [ 513.621821][ T8760] overlayfs: conflicting lowerdir path [ 513.871201][ T8756] 9pnet: Could not find request transport: 0xffffffffffffffff [ 514.666709][ T4381] usb 3-1: USB disconnect, device number 11 [ 514.815516][ T8774] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 515.819383][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.852583][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.933796][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.022057][ T8781] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1194' sets config #0 [ 516.289556][ T8781] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1194' sets config #1 [ 519.188170][ T8806] syz.0.1200 (8806): drop_caches: 2 [ 519.911345][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1199'. [ 519.929494][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1199'. [ 520.113413][ T8806] syz.0.1200 (8806): drop_caches: 2 [ 520.506918][ T8821] overlayfs: conflicting lowerdir path [ 520.859172][ T8819] 9pnet: Could not find request transport: 0xffffffffffffffff [ 521.479555][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 521.771653][ T8838] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 521.920448][ T5593] kworker/dying (5593) used greatest stack depth: 18688 bytes left [ 521.940197][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 522.077995][ T14] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 522.112620][ T14] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 522.144718][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 522.169586][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.178271][ T4340] usb 1-1: USB disconnect, device number 6 [ 525.284230][ T8867] syz.1.1214 (8867): drop_caches: 2 [ 525.298018][ T8867] syz.1.1214 (8867): drop_caches: 2 [ 526.391570][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1216'. [ 526.404916][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1216'. [ 528.152365][ T8896] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1222' sets config #0 [ 528.217967][ T8898] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 528.300193][ T8896] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1222' sets config #1 [ 530.010419][ T8905] fuse: Bad value for 'user_id' [ 531.634088][ T4340] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 531.777856][ T8923] syz.2.1229 (8923): drop_caches: 2 [ 531.788197][ T8923] syz.2.1229 (8923): drop_caches: 2 [ 531.849499][ T4340] usb 4-1: Using ep0 maxpacket: 8 [ 531.856358][ T4340] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 531.877582][ T4340] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 531.887224][ T4340] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 531.916838][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.840420][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 532.849731][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 534.863703][ T8944] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1235' sets config #0 [ 534.886818][ T8944] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1235' sets config #1 [ 534.957548][ T4256] usb 4-1: USB disconnect, device number 7 [ 536.376579][ T8959] fuse: Bad value for 'user_id' [ 539.806865][ T8984] 9pnet_fd: Insufficient options for proto=fd [ 540.304591][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1245'. [ 540.313847][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1245'. [ 540.970802][ T8994] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1250' sets config #0 [ 542.743754][ T8994] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1250' sets config #1 [ 546.920403][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 546.929699][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 548.161143][ T9039] 9pnet_virtio: no channels available for device 127.0.0.1 [ 548.605642][ T9050] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1263'. [ 549.790502][ T9057] team0: Device sit2 is of different type [ 551.495656][ T9066] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1268' sets config #0 [ 551.602816][ T9066] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1268' sets config #1 [ 556.080605][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 556.219712][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 556.795311][ T9105] syz.0.1274 (9105): drop_caches: 2 [ 556.885981][ T9105] syz.0.1274 (9105): drop_caches: 2 [ 557.666646][ T9117] team0: Device sit2 is of different type [ 557.771335][ T9121] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1281' sets config #0 [ 557.908546][ T9121] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1281' sets config #1 [ 558.584539][ T4341] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 558.909697][ T4341] usb 5-1: Using ep0 maxpacket: 8 [ 559.301451][ T4341] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 559.310678][ T4341] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 559.320629][ T4341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.412905][ T9143] syz.3.1289 (9143): drop_caches: 2 [ 561.533997][ T9143] syz.3.1289 (9143): drop_caches: 2 [ 561.975113][ T9173] 9pnet_fd: Insufficient options for proto=fd [ 562.052557][ T9175] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1294'. [ 562.648089][ T9174] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1295' sets config #1 [ 562.771021][ T9086] usb 5-1: USB disconnect, device number 11 [ 562.890514][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.299541][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.078487][ T9195] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 564.448769][ T9200] overlayfs: conflicting lowerdir path [ 565.387858][ T9198] 9pnet: Could not find request transport: 0xffffffffffffffff [ 565.569632][ T9206] syz.4.1303 (9206): drop_caches: 2 [ 565.577336][ T9206] syz.4.1303 (9206): drop_caches: 2 [ 566.965700][ T9229] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1309' sets config #0 [ 567.041513][ T9227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1308'. [ 567.050712][ T9227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1308'. [ 567.410507][ T9229] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1309' sets config #1 [ 568.110813][ T9238] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1313'. [ 568.147247][ T9243] overlayfs: conflicting lowerdir path [ 568.187106][ T9240] 9pnet: Could not find request transport: 0xffffffffffffffff [ 569.338099][ T9249] syz.3.1316 (9249): drop_caches: 2 [ 569.345185][ T9249] syz.3.1316 (9249): drop_caches: 2 [ 570.747742][ T9280] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1324' sets config #0 [ 570.790233][ T9280] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1324' sets config #1 [ 572.361397][ T9293] 9pnet_fd: Insufficient options for proto=fd [ 572.705293][ T9299] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1330'. [ 573.610903][ T9303] syz.4.1331 (9303): drop_caches: 2 [ 573.617109][ T9303] syz.4.1331 (9303): drop_caches: 2 [ 575.484175][ T9326] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1339' sets config #0 [ 575.562312][ T9326] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1339' sets config #1 [ 576.479365][ T9344] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1342'. [ 579.988638][ T9376] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1350'. [ 580.333341][ T9389] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1352' sets config #0 [ 581.365876][ T9389] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1352' sets config #1 [ 581.464150][ T9398] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1355'. [ 583.485096][ T9411] 9pnet: Could not find request transport: 0xffffffffffffffff [ 583.494261][ T9411] overlayfs: conflicting lowerdir path [ 584.500298][ T9427] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1362'. [ 585.394856][ T9441] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1365'. [ 586.780405][ T9451] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1367'. [ 588.325456][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 588.659607][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 588.666746][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.082248][ T14] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 589.148464][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.281179][ T14] usb 1-1: config 0 descriptor?? [ 589.761048][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 589.768796][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 589.774990][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 589.798003][ T14] usb 1-1: USB disconnect, device number 7 [ 589.954998][ T9482] netlink: 'syz.4.1375': attribute type 10 has an invalid length. [ 590.015798][ T9482] bridge0: port 3(team0) entered blocking state [ 590.062979][ T9482] bridge0: port 3(team0) entered disabled state [ 590.074465][ T9482] device team0 entered promiscuous mode [ 590.083034][ T9482] device team_slave_0 entered promiscuous mode [ 590.093511][ T9482] device team_slave_1 entered promiscuous mode [ 590.103663][ T9482] bridge0: port 3(team0) entered blocking state [ 590.110385][ T9482] bridge0: port 3(team0) entered forwarding state [ 590.512686][ T9488] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1377'. [ 590.609914][ T9494] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1378'. [ 592.045606][ T9501] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1380'. [ 594.889566][ T4340] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 595.309502][ T4340] usb 5-1: Using ep0 maxpacket: 8 [ 595.316890][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.395672][ T9539] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1391' sets config #0 [ 595.407873][ T4340] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 595.425630][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.434977][ T9539] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1391' sets config #1 [ 595.452838][ T4340] usb 5-1: config 0 descriptor?? [ 595.612605][ T9545] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1393'. [ 596.081510][ T4340] usbhid 5-1:0.0: can't add hid device: -71 [ 596.122736][ T4340] usbhid: probe of 5-1:0.0 failed with error -71 [ 596.185932][ T4340] usb 5-1: USB disconnect, device number 12 [ 599.191636][ T9562] 9pnet_virtio: no channels available for device 127.0.0.1 [ 600.044745][ T9570] xt_hashlimit: size too large, truncated to 1048576 [ 602.518632][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 603.538031][ T9596] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1408'. [ 606.141897][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 607.390501][ T9629] 9pnet_fd: Insufficient options for proto=fd [ 607.465473][ T9631] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1420' sets config #0 [ 607.517529][ T9631] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1420' sets config #1 [ 610.080882][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 610.080933][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 610.451965][ T9654] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1425'. [ 611.395733][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'. [ 611.469598][ T4344] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 612.310641][ T4344] usb 1-1: Using ep0 maxpacket: 8 [ 613.668526][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.714089][ T4344] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 613.725320][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.769587][ T4344] usb 1-1: config 0 descriptor?? [ 614.116629][ T9678] fuse: Unknown parameter '0xffffffffffffffff' [ 614.605846][ T4344] usbhid 1-1:0.0: can't add hid device: -71 [ 614.617191][ T4344] usbhid: probe of 1-1:0.0 failed with error -71 [ 614.660195][ T4344] usb 1-1: USB disconnect, device number 8 [ 614.939640][ T4340] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 615.154040][ T4340] usb 5-1: Using ep0 maxpacket: 16 [ 615.604804][ T4340] usb 5-1: config 0 has no interfaces? [ 615.625178][ T4340] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 615.636942][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.652321][ T4340] usb 5-1: config 0 descriptor?? [ 615.799881][ T41] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 615.851545][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 616.139745][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 616.272633][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.299610][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.299723][ T41] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.300141][ T41] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 616.300278][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.337930][ T41] usb 2-1: config 0 descriptor?? [ 616.860131][ T9086] usb 5-1: USB disconnect, device number 13 [ 616.910772][ T41] hid-u2fzero 0003:10C4:8ACF.0002: item fetching failed at offset 2/5 [ 616.968279][ T41] hid-u2fzero: probe of 0003:10C4:8ACF.0002 failed with error -22 [ 617.126983][ T4323] usb 2-1: USB disconnect, device number 8 [ 617.349485][ T4340] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 617.541141][ T4340] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 617.554890][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.578801][ T9721] 9pnet_fd: Insufficient options for proto=fd [ 617.600522][ T4340] usb 4-1: config 0 descriptor?? [ 617.618193][ T4340] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 617.751762][ T9723] overlayfs: conflicting lowerdir path [ 618.012503][ T4340] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 618.065932][ T9727] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1447' sets config #0 [ 618.125923][ T9727] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1447' sets config #1 [ 618.179620][ T9086] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 618.399614][ T9086] usb 2-1: Using ep0 maxpacket: 8 [ 618.436526][ T4340] gspca_cpia1: usb_control_msg 02, error -71 [ 618.437995][ T9086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.530439][ T9086] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 618.616397][ T9086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.633068][ T9086] usb 2-1: config 0 descriptor?? [ 618.638203][ T4340] gspca_cpia1: usb_control_msg 05, error -71 [ 618.668520][ T4340] cpia1 4-1:0.0: unexpected systemstate: 00 [ 618.687191][ T4340] usb 4-1: USB disconnect, device number 8 [ 619.484448][ T9086] usbhid 2-1:0.0: can't add hid device: -71 [ 619.677283][ T9086] usbhid: probe of 2-1:0.0 failed with error -71 [ 619.731180][ T9086] usb 2-1: USB disconnect, device number 9 [ 620.724635][ T9756] netlink: 'syz.2.1457': attribute type 2 has an invalid length. [ 620.774520][ T9756] netlink: 'syz.2.1457': attribute type 1 has an invalid length. [ 621.880661][ T9765] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1459' sets config #0 [ 622.113247][ T9768] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1459' sets config #1 [ 624.099610][ T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 624.393051][ T9788] 9pnet_fd: Insufficient options for proto=fd [ 624.410285][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.419980][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 624.520869][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.720271][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.791173][ T14] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 624.804455][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.838060][ T14] usb 3-1: config 0 descriptor?? [ 625.751043][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 625.757099][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 625.793176][ T14] usb 3-1: USB disconnect, device number 12 [ 626.236872][ T9807] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1473' sets config #0 [ 626.267545][ T9802] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1470'. [ 626.296606][ T9807] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1473' sets config #1 [ 626.939528][ T9086] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 627.232985][ T9086] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.257474][ T9086] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.280574][ T9086] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 627.372999][ T9086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.390367][ T9086] usb 5-1: Product: syz [ 627.394660][ T9086] usb 5-1: Manufacturer: syz [ 627.408872][ T9086] usb 5-1: SerialNumber: syz [ 627.691550][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.759837][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.779588][ T4340] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 627.799168][ T9086] usb 5-1: skipping empty audio interface (v1) [ 627.948569][ T9086] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 628.619553][ T4340] usb 2-1: Using ep0 maxpacket: 8 [ 628.626633][ T4340] usb 2-1: unable to get BOS descriptor or descriptor too short [ 628.628057][ T9086] usb 5-1: USB disconnect, device number 14 [ 628.652946][ T6256] udevd[6256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.678990][ T4340] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 628.772251][ T4340] usb 2-1: config 0 has no interface number 0 [ 628.801565][ T4340] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 628.901078][ T4340] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 628.911261][ T4340] usb 2-1: config 0 interface 88 has no altsetting 0 [ 628.920733][ T4340] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 628.940960][ T4340] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 629.674272][ T4340] usb 2-1: Product: syz [ 629.678613][ T4340] usb 2-1: Manufacturer: 㪑ꁰ⪁푰틗ِ癶᫿㏤ꥧ鷳ᠺꖩ쎄㏝棇뭑䭈晒֐贻∑෯帎㲸棃立쫍䦙쀴潚〕砽曡쓸뛇㽜嘥ᖵ餏ꁨ [ 629.695659][ T4340] usb 2-1: SerialNumber: syz [ 629.722028][ T4340] usb 2-1: config 0 descriptor?? [ 629.967661][ T4340] input: 㪑ꁰ⪁푰틗ِ癶᫿㏤ꥧ鷳ᠺꖩ쎄㏝棇뭑䭈晒֐贻∑෯帎㲸棃立쫍䦙쀴潚〕砽曡쓸뛇㽜 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input6 [ 630.123751][ T4340] usb 2-1: USB disconnect, device number 10 [ 630.329564][ T9086] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 630.620979][ T9086] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 630.729902][ T4381] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 631.262306][ T9086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.365557][ T9086] usb 3-1: config 0 descriptor?? [ 631.455820][ T4381] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 631.492214][ T9851] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1486' sets config #0 [ 631.495248][ T4381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.528501][ T9851] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1486' sets config #1 [ 631.667952][ T4381] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 631.677123][ T4381] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 631.685504][ T4381] usb 4-1: Manufacturer: syz [ 631.699115][ T4381] usb 4-1: config 0 descriptor?? [ 631.779937][ T9857] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1487'. [ 631.999557][ T4381] rc_core: IR keymap rc-hauppauge not found [ 632.005646][ T4381] Registered IR keymap rc-empty [ 632.060680][ T4381] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 632.074304][ T9858] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 632.074304][ T9858] The task syz.2.1483 (9858) triggered the difference, watch for misbehavior. [ 632.218091][ T4381] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 632.336601][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.458080][ T9872] overlayfs: conflicting lowerdir path [ 632.485051][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.549468][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.596092][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.733556][ T9875] 9pnet: Could not find request transport: 0 [ 633.772429][ T9086] pegasus: probe of 3-1:0.0 failed with error -110 [ 634.698202][ T4340] usb 3-1: USB disconnect, device number 13 [ 635.171035][ T4381] usb 4-1: USB disconnect, device number 9 [ 635.924877][ T9900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1496'. [ 635.941323][ T9903] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1499' sets config #1 [ 637.147543][ T9920] overlayfs: conflicting lowerdir path [ 637.501877][ T9919] 9pnet: Could not find request transport: 0 [ 637.530289][ T9913] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1501'. [ 640.327192][ T9949] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1510'. [ 642.779028][ T9973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1516'. [ 642.904883][ T4317] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 643.105047][ T4317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.336812][ T4317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.551041][ T4317] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.561456][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.571525][ T4317] usb 2-1: Product: syz [ 643.575845][ T4317] usb 2-1: Manufacturer: syz [ 643.580890][ T4317] usb 2-1: SerialNumber: syz [ 643.792378][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.589892][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.636492][ T4317] usb 2-1: skipping empty audio interface (v1) [ 645.550583][ T4317] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 645.559802][ T4317] usb 2-1: USB disconnect, device number 11 [ 645.657079][ T9992] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1519'. [ 646.164603][ T6256] udevd[6256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.139960][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 648.148728][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.156166][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.406770][T10057] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1540'. [ 651.506563][T10061] "syz.1.1543" (10061) uses obsolete ecb(arc4) skcipher [ 658.438566][T10118] netlink: 'syz.3.1559': attribute type 10 has an invalid length. [ 658.447988][T10118] bridge0: port 3(team0) entered blocking state [ 658.479662][T10118] bridge0: port 3(team0) entered disabled state [ 658.498268][T10118] device team0 entered promiscuous mode [ 659.303626][T10118] device team_slave_0 entered promiscuous mode [ 659.328375][T10118] device team_slave_1 entered promiscuous mode [ 659.339974][T10118] bridge0: port 3(team0) entered blocking state [ 659.347336][T10118] bridge0: port 3(team0) entered forwarding state [ 659.464887][T10108] syz.0.1556 (10108) used greatest stack depth: 18176 bytes left [ 663.183634][T10165] Failed to get privilege flags for destination (handle=0x2:0x4) [ 663.211229][ T4278] Bluetooth: hci2: command 0x201b tx timeout [ 663.234215][T10165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1573'. [ 667.175294][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1585'. [ 667.184981][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 668.849337][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1589'. [ 668.858697][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1589'. [ 669.284102][T10214] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1586'. [ 669.563980][T10226] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1591' sets config #0 [ 669.634475][T10226] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1591' sets config #1 [ 673.962587][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1602'. [ 673.972285][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1602'. [ 674.725053][T10279] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1606' sets config #0 [ 674.773250][T10279] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1606' sets config #1 [ 676.875922][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 676.889545][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 676.897951][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 676.907611][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 676.918444][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 676.926038][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 677.268810][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.555809][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.180926][T10325] 9pnet_fd: Insufficient options for proto=fd [ 678.658744][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.781792][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.964033][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 680.127934][T10295] chnl_net:caif_netlink_parms(): no params data found [ 681.040723][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 682.711680][T10295] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.762634][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.129565][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 683.645833][T10295] device bridge_slave_0 entered promiscuous mode [ 683.827862][T10374] fuse: Bad value for 'fd' [ 684.941442][T10295] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.986002][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.028650][T10295] device bridge_slave_1 entered promiscuous mode [ 685.199534][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 685.243127][T10385] 9pnet_fd: Insufficient options for proto=fd [ 685.572075][T10295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.722718][T10295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.800201][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.806697][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.829762][T10341] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 687.617188][T10341] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 687.706664][T10341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.052532][T10341] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 688.076522][T10341] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 688.089508][T10341] usb 4-1: Manufacturer: syz [ 688.125689][T10341] usb 4-1: config 0 descriptor?? [ 688.644349][T10295] team0: Port device team_slave_0 added [ 688.671193][T10295] team0: Port device team_slave_1 added [ 688.819593][T10341] rc_core: IR keymap rc-hauppauge not found [ 688.826865][T10341] Registered IR keymap rc-empty [ 688.869388][T10341] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 688.912697][T10341] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 689.965966][T10430] fuse: Bad value for 'fd' [ 689.975811][T10295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.221813][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.248755][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.518017][T10295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.658956][T10295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.666828][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.695357][T10295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.582439][ T4340] usb 4-1: USB disconnect, device number 10 [ 693.339345][T10434] 9pnet_fd: Insufficient options for proto=fd [ 694.183593][ T46] device hsr_slave_0 left promiscuous mode [ 694.200211][ T46] device hsr_slave_1 left promiscuous mode [ 694.321699][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.337979][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.351277][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.916947][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.680554][ T46] device bridge_slave_1 left promiscuous mode [ 695.710815][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.749627][ T46] device bridge_slave_0 left promiscuous mode [ 695.766814][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.828334][ T46] device veth1_macvtap left promiscuous mode [ 695.836492][ T46] device veth0_macvtap left promiscuous mode [ 695.849574][ T46] device veth1_vlan left promiscuous mode [ 695.865916][ T46] device veth0_vlan left promiscuous mode [ 697.078717][T10475] fuse: Bad value for 'fd' [ 698.940558][T10492] ubi: mtd0 is already attached to ubi31 [ 699.634591][ T46] team0 (unregistering): Port device team_slave_1 removed [ 699.708552][ T46] team0 (unregistering): Port device team_slave_0 removed [ 699.754979][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.834789][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.539043][ T46] bond0 (unregistering): Released all slaves [ 701.622771][T10295] device hsr_slave_0 entered promiscuous mode [ 701.638461][T10295] device hsr_slave_1 entered promiscuous mode [ 701.726733][T10295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.734522][T10295] Cannot create hsr debugfs directory [ 701.740326][T10461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1644'. [ 702.653972][T10461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1644'. [ 703.772620][T10512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1653'. [ 704.906679][T10295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 704.962668][T10534] 9pnet_virtio: no channels available for device 127.0.0.1 [ 705.013736][T10295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 705.033818][T10295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 705.064229][T10295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 706.301078][T10295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.316570][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 706.346698][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 706.576265][T10295] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.258303][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1664'. [ 707.363666][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1664'. [ 707.384947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 707.427770][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.370927][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.378102][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.469843][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.478871][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.487856][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.495074][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.505047][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.514543][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 708.615033][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 709.350082][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 709.361892][T10594] fuse: Unknown parameter '0x0000000000000003' [ 709.371705][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 709.384552][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 710.264772][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 710.320497][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 710.332237][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 710.340858][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 710.358023][T10295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 710.412891][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 710.450450][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 710.530243][T10606] overlayfs: conflicting lowerdir path [ 711.516501][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1675'. [ 711.525860][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1675'. [ 714.391747][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 714.406435][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 714.530348][T10295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.736253][T10678] tmpfs: Unknown parameter 'usrquota' [ 717.824400][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 717.860280][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 717.969700][ T9086] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 718.003683][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 718.067979][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.157672][T10295] device veth0_vlan entered promiscuous mode [ 718.163922][ T9086] usb 5-1: Using ep0 maxpacket: 32 [ 718.171102][ T9086] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 718.180103][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.187688][ T9086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.221154][ T9086] usb 5-1: config 0 descriptor?? [ 718.224320][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 718.229196][ T9086] gspca_main: sunplus-2.14.0 probing 041e:400b [ 718.254421][T10295] device veth1_vlan entered promiscuous mode [ 718.348112][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 718.462876][ T9086] gspca_sunplus: reg_w_riv err -71 [ 718.468842][ T9086] sunplus: probe of 5-1:0.0 failed with error -71 [ 718.487061][ T9086] usb 5-1: USB disconnect, device number 15 [ 718.559984][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 718.620420][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 718.666121][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 718.737258][T10295] device veth0_macvtap entered promiscuous mode [ 718.830074][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 718.864325][T10295] device veth1_macvtap entered promiscuous mode [ 719.631472][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.714559][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.733519][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.754656][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.776336][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.801605][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.813729][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.824375][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.866060][T10295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.918260][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 719.962785][T10711] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 719.999903][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 720.058277][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.077374][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.097751][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.108455][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.118413][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.129941][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.140531][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.151081][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.162919][T10295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.173659][T10713] team0: Device sit2 is of different type [ 720.193641][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 720.215773][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 720.223126][T10722] fuse: Unknown parameter '0x0000000000000003' [ 720.258869][T10295] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.295500][T10295] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.852392][T10295] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.031069][T10295] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.250556][ T4507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.275286][ T4507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.340470][ T4727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.357269][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 721.374053][ T4727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.286911][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 723.043084][T10758] syz.3.1704 (10758): drop_caches: 2 [ 723.081375][T10758] syz.3.1704 (10758): drop_caches: 2 [ 724.440292][T10772] fuse: Unknown parameter '0x0000000000000003' [ 726.458778][T10791] ubi: mtd0 is already attached to ubi31 [ 728.202665][T10815] syz.5.1717 (10815): drop_caches: 2 [ 728.221548][T10815] syz.5.1717 (10815): drop_caches: 2 [ 731.353156][T10839] fuse: Unknown parameter '0x0000000000000003' [ 733.151159][T10869] syz.2.1729 (10869): drop_caches: 2 [ 733.169887][T10869] syz.2.1729 (10869): drop_caches: 2 [ 734.980598][T10889] ubi: mtd0 is already attached to ubi31 [ 736.869707][T10875] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1731'. [ 739.140026][T10922] fuse: Unknown parameter 'fd0x0000000000000003' [ 740.570317][T10931] syz.4.1743 (10931): drop_caches: 2 [ 740.577216][T10931] syz.4.1743 (10931): drop_caches: 2 [ 742.923999][T10941] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1748'. [ 744.467520][T10341] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 744.584218][T10949] 9pnet_virtio: no channels available for device 127.0.0.1 [ 744.688373][T10965] ubi: mtd0 is already attached to ubi31 [ 745.334599][T10341] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 745.370383][T10341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.480669][T10341] usb 3-1: config 0 descriptor?? [ 746.516117][T10974] fuse: Unknown parameter 'fd0x0000000000000003' [ 747.211916][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.218347][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.044986][T10988] syz.5.1756 (10988): drop_caches: 2 [ 748.100020][T10988] syz.5.1756 (10988): drop_caches: 2 [ 748.779349][T10341] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 748.857285][T10341] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 748.993299][T10341] asix: probe of 3-1:0.0 failed with error -71 [ 749.178699][T10341] usb 3-1: USB disconnect, device number 14 [ 750.127412][T11013] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1761'. [ 751.627429][T11031] ubi: mtd0 is already attached to ubi31 [ 753.557706][T11038] fuse: Unknown parameter 'fd0x0000000000000003' [ 754.670000][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1768'. [ 754.679323][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1768'. [ 755.814504][T11056] syz.2.1771 (11056): drop_caches: 2 [ 755.864623][T11056] syz.2.1771 (11056): drop_caches: 2 [ 758.839754][T11035] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 759.091595][T11035] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 759.108360][T11035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.126852][T11035] usb 3-1: config 0 descriptor?? [ 759.334923][T11110] syz.4.1784 (11110): drop_caches: 2 [ 759.356829][T11110] syz.4.1784 (11110): drop_caches: 2 [ 760.803835][T11111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.030509][T11111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.545702][T11112] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1783'. [ 761.869564][T10341] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 762.691254][T10341] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 762.699309][T10341] usb 4-1: config 0 has no interface number 0 [ 762.885490][T10341] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 762.939536][T10341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.961557][T10341] usb 4-1: Product: syz [ 762.972197][T10341] usb 4-1: Manufacturer: syz [ 762.981192][T10341] usb 4-1: SerialNumber: syz [ 762.994310][T10341] usb 4-1: config 0 descriptor?? [ 763.118948][T11035] [drm] vendor descriptor length:b9 data:06 00 00 00 00 00 00 00 00 00 00 [ 763.136756][T11035] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 763.157633][T11035] [drm:udl_init] *ERROR* Selecting channel failed [ 763.216633][T10341] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 763.228506][T11035] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 763.275017][T10341] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 763.291867][T11035] [drm] Initialized udl on minor 2 [ 763.334369][T11035] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 763.365563][T10341] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 763.376979][T11035] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 763.405013][T10341] usb 4-1: media controller created [ 763.439165][T11035] usb 3-1: USB disconnect, device number 15 [ 763.682683][T10341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.105629][T10341] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 764.202204][T10341] usb 4-1: USB disconnect, device number 11 [ 764.463432][T11160] netlink: 'syz.5.1796': attribute type 10 has an invalid length. [ 764.499295][T11160] bridge0: port 3(team0) entered blocking state [ 764.539278][T11160] bridge0: port 3(team0) entered disabled state [ 764.974531][T11160] device team0 entered promiscuous mode [ 764.989674][T11160] device team_slave_0 entered promiscuous mode [ 765.016998][T11160] device team_slave_1 entered promiscuous mode [ 765.024195][T11160] bridge0: port 3(team0) entered blocking state [ 765.030626][T11160] bridge0: port 3(team0) entered forwarding state [ 765.226694][T11171] syz.3.1797 (11171): drop_caches: 2 [ 765.257403][T11171] syz.3.1797 (11171): drop_caches: 2 [ 767.260696][T11186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1801'. [ 767.456963][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 767.516333][T11194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 767.635232][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 767.744023][T11201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 769.508200][T11222] syz.0.1810 (11222): drop_caches: 2 [ 769.530786][T11222] syz.0.1810 (11222): drop_caches: 2 [ 769.599860][ T5838] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 771.259522][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 771.266797][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.291358][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.339752][ T5838] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 771.379306][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.423152][ T5838] usb 5-1: config 0 descriptor?? [ 772.106798][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1812'. [ 772.119957][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1812'. [ 772.305131][ T5838] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x6 [ 772.342578][ T5838] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 772.370568][ T5838] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 772.382578][ T5838] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 772.394312][ T5838] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 772.402741][ T5838] CPU: 1 PID: 5838 Comm: kworker/1:11 Not tainted 6.1.142-syzkaller #0 [ 772.410964][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 772.421010][ T5838] Workqueue: usb_hub_wq hub_event [ 772.426078][ T5838] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 772.431713][ T5838] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 6e 62 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 c6 62 2d fa 48 8d 84 24 80 00 00 00 [ 772.451318][ T5838] RSP: 0018:ffffc9001b9ee7c0 EFLAGS: 00010202 [ 772.457373][ T5838] RAX: 0000000000000015 RBX: ffff88802751d030 RCX: dffffc0000000000 [ 772.465333][ T5838] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888057efb869 [ 772.473291][ T5838] RBP: ffffc9001b9ee970 R08: 0000000000000001 R09: ffff888057efb82e [ 772.481251][ T5838] R10: ffffed100afdf70d R11: 1ffff1100afdf705 R12: 1ffff11004ea3a06 [ 772.489213][ T5838] R13: dffffc0000000000 R14: 1ffff11004ea3a05 R15: 00000000000000a8 [ 772.497172][ T5838] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 772.506088][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.512678][ T5838] CR2: 00007f810c3b7bac CR3: 00000000546e5000 CR4: 00000000003506e0 [ 772.520641][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 772.528612][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 772.536570][ T5838] Call Trace: [ 772.539843][ T5838] [ 772.542764][ T5838] ? rcu_is_watching+0x11/0xa0 [ 772.547527][ T5838] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 772.553067][ T5838] ? mutex_lock_nested+0x10/0x10 [ 772.557998][ T5838] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 772.563532][ T5838] add_early_randomness+0x7a/0x150 [ 772.568634][ T5838] hwrng_register+0x398/0x440 [ 772.573323][ T5838] devm_hwrng_register+0x43/0xb0 [ 772.578282][ T5838] u2fzero_probe+0x355/0x470 [ 772.582907][ T5838] ? twinhan_input_mapping+0x2210/0x2210 [ 772.588673][ T5838] hid_device_probe+0x25c/0x350 [ 772.593628][ T5838] ? hid_uevent+0x340/0x340 [ 772.598197][ T5838] really_probe+0x2aa/0xc70 [ 772.602743][ T5838] ? pm_runtime_barrier+0x147/0x1c0 [ 772.608015][ T5838] __driver_probe_device+0x18c/0x330 [ 772.613343][ T5838] driver_probe_device+0x4f/0x420 [ 772.618419][ T5838] __device_attach_driver+0x2c6/0x510 [ 772.623834][ T5838] ? coredump_store+0x90/0x90 [ 772.628559][ T5838] bus_for_each_drv+0x175/0x200 [ 772.633475][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 772.638406][ T5838] ? subsys_find_device_by_id+0x350/0x350 [ 772.644213][ T5838] __device_attach+0x29b/0x460 [ 772.649016][ T5838] ? device_attach+0x20/0x20 [ 772.653643][ T5838] ? __kmem_cache_free+0xb6/0x1f0 [ 772.658710][ T5838] ? kobject_uevent_env+0x35f/0x8a0 [ 772.664009][ T5838] bus_probe_device+0xbc/0x1e0 [ 772.668853][ T5838] ? device_add+0x97c/0xfb0 [ 772.673921][ T5838] device_add+0xa00/0xfb0 [ 772.678300][ T5838] hid_add_device+0x389/0x530 [ 772.683043][ T5838] usbhid_probe+0xc09/0xfe0 [ 772.687604][ T5838] usb_probe_interface+0x5a0/0xaf0 [ 772.692793][ T5838] ? usb_register_driver+0x3d0/0x3d0 [ 772.698119][ T5838] really_probe+0x2aa/0xc70 [ 772.702699][ T5838] ? pm_runtime_barrier+0x147/0x1c0 [ 772.707957][ T5838] __driver_probe_device+0x18c/0x330 [ 772.713265][ T5838] driver_probe_device+0x4f/0x420 [ 772.718343][ T5838] __device_attach_driver+0x2c6/0x510 [ 772.723767][ T5838] ? coredump_store+0x90/0x90 [ 772.728469][ T5838] bus_for_each_drv+0x175/0x200 [ 772.733335][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 772.738198][ T5838] ? subsys_find_device_by_id+0x350/0x350 [ 772.743931][ T5838] __device_attach+0x29b/0x460 [ 772.748695][ T5838] ? device_attach+0x20/0x20 [ 772.753287][ T5838] ? kobject_uevent_env+0x35f/0x8a0 [ 772.758486][ T5838] bus_probe_device+0xbc/0x1e0 [ 772.763251][ T5838] ? device_add+0x97c/0xfb0 [ 772.767764][ T5838] device_add+0xa00/0xfb0 [ 772.772101][ T5838] usb_set_configuration+0x1991/0x1fd0 [ 772.777567][ T5838] usb_generic_driver_probe+0x89/0x150 [ 772.783027][ T5838] usb_probe_device+0x139/0x270 [ 772.787962][ T5838] ? usb_register_device_driver+0x230/0x230 [ 772.793855][ T5838] really_probe+0x2aa/0xc70 [ 772.798351][ T5838] ? pm_runtime_barrier+0x147/0x1c0 [ 772.803556][ T5838] __driver_probe_device+0x18c/0x330 [ 772.808832][ T5838] driver_probe_device+0x4f/0x420 [ 772.813848][ T5838] __device_attach_driver+0x2c6/0x510 [ 772.819206][ T5838] ? coredump_store+0x90/0x90 [ 772.823866][ T5838] bus_for_each_drv+0x175/0x200 [ 772.828799][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 772.833653][ T5838] ? subsys_find_device_by_id+0x350/0x350 [ 772.839365][ T5838] __device_attach+0x29b/0x460 [ 772.844117][ T5838] ? device_attach+0x20/0x20 [ 772.848723][ T5838] ? __kmem_cache_free+0xb6/0x1f0 [ 772.853744][ T5838] ? kobject_uevent_env+0x35f/0x8a0 [ 772.858973][ T5838] bus_probe_device+0xbc/0x1e0 [ 772.863749][ T5838] ? device_add+0x97c/0xfb0 [ 772.868267][ T5838] device_add+0xa00/0xfb0 [ 772.872594][ T5838] usb_new_device+0xd4d/0x1620 [ 772.877357][ T5838] ? lock_chain_count+0x20/0x20 [ 772.882199][ T5838] ? usb_disconnect+0x8a0/0x8a0 [ 772.887044][ T5838] ? _raw_spin_unlock_irq+0x1f/0x40 [ 772.892246][ T5838] ? lockdep_hardirqs_on+0x94/0x140 [ 772.897446][ T5838] hub_event+0x2b02/0x5210 [ 772.901872][ T5838] ? led_work+0x6e0/0x6e0 [ 772.906195][ T5838] ? read_lock_is_recursive+0x10/0x10 [ 772.911564][ T5838] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 772.917447][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 772.922287][ T5838] ? _raw_spin_unlock_irq+0x1f/0x40 [ 772.927927][ T5838] ? process_one_work+0x7a1/0x1160 [ 772.933036][ T5838] process_one_work+0x898/0x1160 [ 772.937968][ T5838] ? worker_detach_from_pool+0x240/0x240 [ 772.943593][ T5838] ? _raw_spin_lock_irq+0xab/0xe0 [ 772.948609][ T5838] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 772.953970][ T5838] ? kthread_data+0x4b/0xc0 [ 772.958465][ T5838] worker_thread+0xaa2/0x1250 [ 772.963134][ T5838] ? __kthread_parkme+0x162/0x1c0 [ 772.968151][ T5838] kthread+0x29d/0x330 [ 772.972216][ T5838] ? worker_clr_flags+0x1a0/0x1a0 [ 772.977224][ T5838] ? kthread_blkcg+0xd0/0xd0 [ 772.981804][ T5838] ret_from_fork+0x1f/0x30 [ 772.986222][ T5838] [ 772.989232][ T5838] Modules linked in: [ 772.997814][ T5838] ---[ end trace 0000000000000000 ]--- [ 773.008039][ T5838] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 773.024480][ T5838] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 6e 62 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 c6 62 2d fa 48 8d 84 24 80 00 00 00 [ 773.065025][T11245] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 773.079807][ T5838] RSP: 0018:ffffc9001b9ee7c0 EFLAGS: 00010202 [ 773.085925][ T5838] RAX: 0000000000000015 RBX: ffff88802751d030 RCX: dffffc0000000000 [ 773.094717][ T5838] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888057efb869 [ 773.102983][ T5838] RBP: ffffc9001b9ee970 R08: 0000000000000001 R09: ffff888057efb82e [ 773.111222][ T5838] R10: ffffed100afdf70d R11: 1ffff1100afdf705 R12: 1ffff11004ea3a06 [ 773.119313][ T5838] R13: dffffc0000000000 R14: 1ffff11004ea3a05 R15: 00000000000000a8 [ 773.128023][ T5838] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 773.137335][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.144194][ T5838] CR2: 00007f851945a4e8 CR3: 000000007f8eb000 CR4: 00000000003506e0 [ 773.152388][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 773.160600][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 773.168632][ T5838] Kernel panic - not syncing: Fatal exception [ 773.174939][ T5838] Kernel Offset: disabled [ 773.179252][ T5838] Rebooting in 86400 seconds..