last executing test programs: 24.605682839s ago: executing program 2 (id=5130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff) 21.837853597s ago: executing program 3 (id=5132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 21.254532822s ago: executing program 0 (id=5133): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 21.19644434s ago: executing program 4 (id=5134): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 19.232304249s ago: executing program 2 (id=5135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 19.179388068s ago: executing program 1 (id=5136): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 18.377770552s ago: executing program 3 (id=5137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 17.931095477s ago: executing program 4 (id=5138): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8000, 0x5, 0xf}, &(0x7f0000002000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x28, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) io_uring_enter(r4, 0x48e9, 0x0, 0x6, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = socket(0x2b, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(0x0, 0x5, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x1, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x5, 0x25, 0x9, 0x1}]}) 16.356939124s ago: executing program 0 (id=5139): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 15.23561342s ago: executing program 3 (id=5140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 14.934434444s ago: executing program 1 (id=5141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 14.914206939s ago: executing program 2 (id=5142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 13.419914198s ago: executing program 0 (id=5143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 12.829088727s ago: executing program 4 (id=5144): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 12.107823869s ago: executing program 3 (id=5145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r3) 8.929664692s ago: executing program 2 (id=5146): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 8.903987953s ago: executing program 0 (id=5147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 8.902997677s ago: executing program 1 (id=5148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x1ff, 0x81d}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 8.881608395s ago: executing program 3 (id=5149): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 8.793732276s ago: executing program 4 (id=5150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r4) 8.560468248s ago: executing program 1 (id=5151): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 5.603040863s ago: executing program 0 (id=5152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 5.367746907s ago: executing program 2 (id=5153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 4.448886491s ago: executing program 3 (id=5154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 4.400830593s ago: executing program 4 (id=5155): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 4.360893627s ago: executing program 1 (id=5156): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8000, 0x5, 0xf}, &(0x7f0000002000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x28, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) io_uring_enter(r4, 0x48e9, 0x0, 0x6, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = socket(0x2b, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(0x0, 0x5, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x1, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x5, 0x25, 0x9, 0x1}]}) 2.15351805s ago: executing program 0 (id=5157): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1.772754416s ago: executing program 2 (id=5158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 827.412322ms ago: executing program 4 (id=5159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x4000, 0x8}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) faccessat(0xffffffffffffffff, &(0x7f0000000d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r5) 0s ago: executing program 1 (id=5160): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r0) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ci3: Opcode 0x0c1a failed: -4 [ 2380.213808][T30217] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2380.477182][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2380.516794][ T5932] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2380.530218][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2380.577989][ T5932] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2380.618052][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2380.844445][ T5932] usb 1-1: Product: syz [ 2380.850160][ T5932] usb 1-1: Manufacturer: syz [ 2380.942641][ T5932] usb 1-1: SerialNumber: syz [ 2381.033785][ T5932] usb 1-1: config 0 descriptor?? [ 2381.098931][ T5932] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2381.143515][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2381.411672][T30228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4938'. [ 2382.019928][T14939] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2382.049736][T30178] Bluetooth: hci5: command 0x0c1a tx timeout [ 2382.261690][T14939] usb 4-1: Using ep0 maxpacket: 8 [ 2382.313090][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2382.319492][T12569] Bluetooth: hci3: command 0x0c1a tx timeout [ 2382.330489][T12569] Bluetooth: hci0: command 0x0c1a tx timeout [ 2382.336930][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 2382.345366][T14939] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2382.353695][T14939] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2382.481916][T14939] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2382.522207][T14939] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2382.545891][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4936'. [ 2382.557945][T14939] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2382.583482][T14939] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2382.647748][T14939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2382.701299][ T5932] usb 1-1: USB disconnect, device number 78 [ 2383.489939][T24755] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2383.719431][T14939] usb 4-1: usb_control_msg returned -32 [ 2383.729367][T14939] usbtmc 4-1:16.0: can't read capabilities [ 2383.748976][T30257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4942'. [ 2384.057115][T24755] usb 2-1: Using ep0 maxpacket: 8 [ 2384.068522][T24755] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2384.077925][T24755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.085920][T24755] usb 2-1: Product: syz [ 2384.092244][T24755] usb 2-1: Manufacturer: syz [ 2384.152726][T24755] usb 2-1: SerialNumber: syz [ 2384.185347][T24755] usb 2-1: config 0 descriptor?? [ 2384.255261][T24755] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2384.367281][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2384.416823][T14939] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2384.543143][T30260] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4938'. [ 2384.557848][T30231] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 2384.618134][T14939] usb 3-1: Using ep0 maxpacket: 8 [ 2384.642651][T14939] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2384.730181][T14939] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2384.776047][T14939] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2385.087320][T24755] gspca_sonixj: reg_w1 err -110 [ 2385.092359][T24755] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 2385.354850][T14939] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2385.388096][T14939] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2385.425410][T14939] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2385.436187][T14939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2385.701962][T14939] usb 3-1: usb_control_msg returned -32 [ 2385.709160][T14939] usbtmc 3-1:16.0: can't read capabilities [ 2385.745399][T24755] usb 4-1: USB disconnect, device number 92 [ 2386.206984][T30258] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2386.208110][T30178] Bluetooth: hci5: command 0x0c1a tx timeout [ 2386.395645][T30258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2386.402166][T30258] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2386.408595][T30258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2386.427372][T30258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2386.464930][T30268] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4942'. [ 2386.614461][T14939] usb 2-1: USB disconnect, device number 103 [ 2387.140637][ T980] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2387.347194][T30277] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2387.362667][T30277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2387.371837][T30277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2387.424949][T30277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2387.434402][T30277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2387.456771][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 2387.576786][ T980] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2387.654499][T24755] usb 3-1: USB disconnect, device number 97 [ 2387.700109][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2387.710584][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2387.732995][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2387.743509][ T980] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2387.757197][ T980] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2387.767114][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.001446][ T980] usb 1-1: usb_control_msg returned -32 [ 2388.007486][ T980] usbtmc 1-1:16.0: can't read capabilities [ 2388.320852][T24755] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2388.631637][T24755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2388.642058][T24755] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2388.655641][T24755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2388.669305][T24755] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2388.679603][T24755] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2388.696074][T24755] usb 3-1: Product: syz [ 2388.702065][T24755] usb 3-1: Manufacturer: syz [ 2388.707472][T24755] usb 3-1: SerialNumber: syz [ 2388.729612][T24755] usb 3-1: config 0 descriptor?? [ 2388.892153][T24755] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2389.132006][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2389.424071][T30241] Bluetooth: hci0: command 0x0c1a tx timeout [ 2389.430462][T30178] Bluetooth: hci2: command 0x0c1a tx timeout [ 2389.436544][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2389.493656][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2389.499752][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2389.535637][T30300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4948'. [ 2389.577219][T14939] usb 3-1: USB disconnect, device number 98 [ 2390.175570][T18936] usb 1-1: USB disconnect, device number 79 [ 2390.957808][T30312] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2390.964085][T30312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2390.970397][T30312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2390.976507][T30312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2390.983424][T30312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2391.927939][T24755] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2391.986798][ T2151] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2392.090263][T24755] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2392.101081][T24755] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2392.116461][T24755] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2392.129701][T24755] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2392.140364][ T2151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2392.219474][ T2151] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2392.233818][T24755] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2392.246800][T24755] usb 5-1: Product: syz [ 2392.251147][ T2151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2392.270067][T24755] usb 5-1: Manufacturer: syz [ 2392.278763][T24755] usb 5-1: SerialNumber: syz [ 2392.285525][ T2151] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2392.453690][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2392.483235][T24755] usb 5-1: config 0 descriptor?? [ 2392.640538][ T2151] usb 2-1: Product: syz [ 2392.655471][ T2151] usb 2-1: Manufacturer: syz [ 2392.685491][ T2151] usb 2-1: SerialNumber: syz [ 2392.781689][ T2151] usb 2-1: config 0 descriptor?? [ 2392.813883][T24755] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2392.845264][ T2151] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2393.016006][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2393.025257][T30240] Bluetooth: hci1: command 0x0406 tx timeout [ 2393.031440][T30240] Bluetooth: hci3: command 0x0c1a tx timeout [ 2393.032195][T30178] Bluetooth: hci0: command 0x0c1a tx timeout [ 2393.037611][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2393.184429][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2393.217956][T29859] udevd[29859]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2393.501964][ T2151] usb 2-1: USB disconnect, device number 104 [ 2393.530726][T30336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4954'. [ 2393.576794][T14939] usb 5-1: USB disconnect, device number 79 [ 2394.330505][T30346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4959'. [ 2394.979095][T14939] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2395.086766][T30240] Bluetooth: hci1: command 0x0406 tx timeout [ 2395.297856][T14939] usb 4-1: Using ep0 maxpacket: 8 [ 2395.617527][T14939] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2395.711206][T14939] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2395.851825][T14939] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2396.005356][T14939] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2396.343108][T14939] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2396.385079][T14939] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2396.404609][T14939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.994430][T14939] usb 4-1: usb_control_msg returned -32 [ 2397.001240][T14939] usbtmc 4-1:16.0: can't read capabilities [ 2397.166711][T30351] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2397.166775][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2397.172860][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2397.757265][T30351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2397.763657][T30351] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2397.766054][T30348] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4959'. [ 2397.779794][T30351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2397.786193][T30351] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2397.789144][T30347] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 2398.176911][T24755] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2398.689726][T24755] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2398.699969][T24755] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2398.713579][T24755] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2398.726280][T24755] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2398.735936][T24755] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2399.107218][ T2151] usb 4-1: USB disconnect, device number 93 [ 2399.146716][T24755] usb 2-1: Product: syz [ 2399.161197][T24755] usb 2-1: Manufacturer: syz [ 2399.181693][T24755] usb 2-1: SerialNumber: syz [ 2399.197398][T24755] usb 2-1: config 0 descriptor?? [ 2399.246951][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2399.268410][T24755] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2399.299165][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2399.675310][ T2151] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2399.839652][T12569] Bluetooth: hci0: command 0x0c1a tx timeout [ 2399.840854][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2399.846017][T12569] Bluetooth: hci3: command 0x0c1a tx timeout [ 2399.964407][T14939] usb 2-1: USB disconnect, device number 105 [ 2400.003512][T29526] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2400.097612][ T2151] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2400.108524][ T2151] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2400.259442][T29526] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2400.269935][T29526] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2400.283318][ T2151] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2400.300712][T29526] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2400.318965][T29526] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2400.328354][T29526] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2400.336599][T29526] usb 5-1: Product: syz [ 2400.342550][T29526] usb 5-1: Manufacturer: syz [ 2400.348418][T29526] usb 5-1: SerialNumber: syz [ 2400.360039][ T2151] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2400.371196][T29526] usb 5-1: config 0 descriptor?? [ 2400.378039][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2400.399660][T29526] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2400.429670][ T2151] usb 3-1: Product: syz [ 2400.471476][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2400.509532][ T2151] usb 3-1: Manufacturer: syz [ 2400.525129][ T2151] usb 3-1: SerialNumber: syz [ 2400.543148][ T2151] usb 3-1: config 0 descriptor?? [ 2400.628648][ T2151] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2400.975826][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2401.125728][T14939] usb 5-1: USB disconnect, device number 80 [ 2401.734157][T14939] usb 3-1: USB disconnect, device number 99 [ 2401.897115][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2401.921381][T30391] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2401.968852][T12569] Bluetooth: hci5: command 0x0c1a tx timeout [ 2402.233890][T30391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2402.243741][T30391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2402.264238][T30391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2402.273239][T30391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2402.898278][T24755] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2403.502331][T24755] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2403.513001][T24755] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2403.597861][T24755] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2403.631159][T24755] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2403.643865][T24755] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2403.655097][T24755] usb 2-1: Product: syz [ 2403.660152][T24755] usb 2-1: Manufacturer: syz [ 2403.664860][T24755] usb 2-1: SerialNumber: syz [ 2403.676558][T24755] usb 2-1: config 0 descriptor?? [ 2403.698468][T24755] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2403.792870][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2404.046806][T12569] Bluetooth: hci2: command 0x0c1a tx timeout [ 2404.286835][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2404.293056][T12569] Bluetooth: hci3: command 0x0c1a tx timeout [ 2404.300069][T30240] Bluetooth: hci0: command 0x0c1a tx timeout [ 2404.417625][T30428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4969'. [ 2404.431175][T24755] usb 2-1: USB disconnect, device number 106 [ 2405.326835][T30415] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2405.408765][T12569] Bluetooth: hci5: command 0x0c1a tx timeout [ 2406.068187][T30415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2406.074343][T30415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2406.080835][T30415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2406.087269][T30415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2406.209678][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.216184][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.368873][T29526] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2406.518303][T14939] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2406.573294][T29526] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2406.583466][T29526] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2406.596572][T29526] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2406.616010][T29526] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2406.640683][T29526] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2406.649023][T29526] usb 5-1: Product: syz [ 2406.656790][T29526] usb 5-1: Manufacturer: syz [ 2406.663082][T29526] usb 5-1: SerialNumber: syz [ 2406.675599][T29526] usb 5-1: config 0 descriptor?? [ 2406.762311][T30434] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2406.769835][T30434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2406.776533][T30434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2406.786377][T30434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2406.805296][T30434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2406.819844][T14939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2406.898328][T14939] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2406.926448][T14939] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2406.936538][T14939] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2406.950675][T14939] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2406.961071][T29526] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2406.970535][T14939] usb 1-1: Product: syz [ 2406.982481][T14939] usb 1-1: Manufacturer: syz [ 2406.988022][T14939] usb 1-1: SerialNumber: syz [ 2407.005197][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2407.026587][T14939] usb 1-1: config 0 descriptor?? [ 2407.081587][T29526] usb 5-1: USB disconnect, device number 81 [ 2407.260716][T14939] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2407.521690][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2408.046323][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4975'. [ 2408.114478][T14939] usb 1-1: USB disconnect, device number 80 [ 2408.167216][T15850] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2408.378796][T15850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.393996][T15850] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2408.432390][T15850] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2408.459674][T15850] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2408.491346][T15850] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2408.520284][T15850] usb 5-1: Product: syz [ 2408.533775][T15850] usb 5-1: Manufacturer: syz [ 2408.562498][T15850] usb 5-1: SerialNumber: syz [ 2408.595492][T15850] usb 5-1: config 0 descriptor?? [ 2408.686927][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2408.866224][T30240] Bluetooth: hci1: command 0x0406 tx timeout [ 2408.872326][T12569] Bluetooth: hci3: command 0x0c1a tx timeout [ 2408.872385][T30178] Bluetooth: hci0: command 0x0c1a tx timeout [ 2408.878398][T12569] Bluetooth: hci2: command 0x0c1a tx timeout [ 2408.990735][T15850] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2409.058515][T29832] udevd[29832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2409.324489][T30457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4978'. [ 2409.418827][T15850] usb 5-1: USB disconnect, device number 82 [ 2410.934023][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 2412.686996][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 2412.695480][T30463] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2413.006806][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 2413.234843][T30463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2413.241185][T30463] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2413.247899][T30463] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2413.254238][T30463] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2414.476941][T14939] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2414.746752][T14939] usb 1-1: Using ep0 maxpacket: 8 [ 2414.781855][T30178] Bluetooth: hci2: command 0x0c1a tx timeout [ 2414.820169][T14939] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2414.828427][T14939] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2414.857135][T14939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2414.876801][T14939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2414.887447][T14939] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2414.908623][T14939] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2414.919329][T14939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.320654][T30178] Bluetooth: hci0: command 0x0c1a tx timeout [ 2415.351066][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2415.361254][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 2415.446890][T14939] usb 1-1: usb_control_msg returned -32 [ 2415.453164][T14939] usbtmc 1-1:16.0: can't read capabilities [ 2415.672498][T29526] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2415.846916][T18936] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2415.858276][T29526] usb 5-1: Using ep0 maxpacket: 8 [ 2415.866179][T29526] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2415.874773][T29526] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2415.884999][T29526] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2415.918899][T29526] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2415.973485][T30522] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 2416.020786][T29526] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2416.043618][T29526] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2416.076719][ T980] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2416.089001][T29526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.102844][T18936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2416.142897][T18936] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2416.286207][T18936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2416.297305][T18936] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2416.306780][T18936] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2416.315112][T18936] usb 3-1: Product: syz [ 2416.320047][T18936] usb 3-1: Manufacturer: syz [ 2416.324692][T18936] usb 3-1: SerialNumber: syz [ 2416.344759][T18936] usb 3-1: config 0 descriptor?? [ 2416.359647][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2416.399090][ T980] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2416.413244][T29526] usb 5-1: usb_control_msg returned -32 [ 2416.437985][T29526] usbtmc 5-1:16.0: can't read capabilities [ 2416.466603][T18936] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2416.656668][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2416.728649][ T980] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2416.728715][T30487] udevd[30487]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2416.974578][T30530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4989'. [ 2417.032600][T15850] usb 3-1: USB disconnect, device number 100 [ 2417.072623][ T980] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2417.082967][ T980] usb 4-1: Product: syz [ 2417.088860][ T980] usb 4-1: Manufacturer: syz [ 2417.114096][ T980] usb 4-1: SerialNumber: syz [ 2417.137932][ T980] usb 4-1: config 0 descriptor?? [ 2417.243612][ T980] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2417.300406][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2417.997550][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4990'. [ 2418.015136][T18936] usb 4-1: USB disconnect, device number 94 [ 2419.086772][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2419.406794][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 2419.413140][T30529] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2419.861011][T30529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2419.868021][T30529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2419.874202][T30529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2419.880829][T30529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2420.266734][T18936] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2420.670883][T18936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2420.685313][T18936] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2420.698637][T18936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2420.710614][T18936] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2420.730549][T18936] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2420.751404][T18936] usb 3-1: Product: syz [ 2420.756731][T18936] usb 3-1: Manufacturer: syz [ 2420.761652][T18936] usb 3-1: SerialNumber: syz [ 2420.776201][T18936] usb 3-1: config 0 descriptor?? [ 2420.860933][T18936] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2420.964668][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2421.242948][T30560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4993'. [ 2421.292882][T29526] usb 3-1: USB disconnect, device number 101 [ 2421.346721][T24755] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2421.496732][T30241] Bluetooth: hci2: command 0x0c1a tx timeout [ 2421.753781][T24755] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2421.764298][T24755] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2421.816071][T24755] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2421.832303][T24755] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2421.841925][T24755] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2421.850395][T24755] usb 2-1: Product: syz [ 2421.854827][T24755] usb 2-1: Manufacturer: syz [ 2421.859903][T24755] usb 2-1: SerialNumber: syz [ 2421.870183][T24755] usb 2-1: config 0 descriptor?? [ 2421.896841][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2421.896908][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2421.896946][T30178] Bluetooth: hci0: command 0x0c1a tx timeout [ 2421.917204][T24755] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2422.156473][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2422.207146][T30514] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 2422.219431][T24755] usb 1-1: USB disconnect, device number 81 [ 2422.331578][T15850] usb 5-1: USB disconnect, device number 83 [ 2422.553947][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4997'. [ 2422.734816][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4996'. [ 2422.768304][T24755] usb 2-1: USB disconnect, device number 107 [ 2423.731849][T30561] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2423.739699][T30178] Bluetooth: hci5: command 0x0c1a tx timeout [ 2423.857746][T30561] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2423.864375][T30561] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2423.870636][T30561] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2423.876953][T30561] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2424.756428][T24755] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2424.919035][T24755] usb 1-1: Using ep0 maxpacket: 8 [ 2425.641936][T24755] usb 1-1: unable to read config index 0 descriptor/all [ 2425.659258][T24755] usb 1-1: can't read configurations, error -71 [ 2425.851360][T30178] Bluetooth: hci2: command 0x0c1a tx timeout [ 2425.906791][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2425.913246][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2425.914770][T30240] Bluetooth: hci0: command 0x0c1a tx timeout [ 2425.985678][T30590] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2426.112126][T30590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2426.119206][T30590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2426.669676][T30590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2426.681775][T30590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2426.937348][T15850] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2426.996804][T24755] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2427.066769][ T980] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2427.088427][T15850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2427.098938][T15850] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2427.407112][T15850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2427.419072][T15850] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2427.428557][T24755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2427.439043][T15850] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2427.447684][T24755] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2427.460821][T15850] usb 3-1: Product: syz [ 2427.466240][T15850] usb 3-1: Manufacturer: syz [ 2427.471265][T15850] usb 3-1: SerialNumber: syz [ 2427.475882][T24755] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2427.485325][T15850] usb 3-1: config 0 descriptor?? [ 2427.493147][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2427.498287][T24755] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2427.632707][T24755] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2427.636205][ T980] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2427.655990][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2427.665531][T15850] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2427.667654][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2427.674912][T24755] usb 1-1: Product: syz [ 2427.688166][ T980] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2427.697037][ T980] usb 2-1: Product: syz [ 2427.701391][ T980] usb 2-1: Manufacturer: syz [ 2427.706767][T24755] usb 1-1: Manufacturer: syz [ 2427.707306][ T980] usb 2-1: SerialNumber: syz [ 2427.719825][T24755] usb 1-1: SerialNumber: syz [ 2427.731303][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2427.746163][T24755] usb 1-1: config 0 descriptor?? [ 2427.750645][ T980] usb 2-1: config 0 descriptor?? [ 2427.766914][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2427.795151][T24755] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2427.841931][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2427.942873][ T980] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2428.078147][T30612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5003'. [ 2428.163769][T18936] usb 3-1: USB disconnect, device number 102 [ 2428.177020][T30240] Bluetooth: hci0: command 0x0c1a tx timeout [ 2428.177226][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 2428.281303][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2428.575184][T30619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5005'. [ 2428.687059][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 2428.694426][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 2428.790096][T24755] usb 2-1: USB disconnect, device number 108 [ 2428.995928][T30626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5002'. [ 2429.039557][T24755] usb 1-1: USB disconnect, device number 84 [ 2429.095059][T30617] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2429.101293][T18936] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2429.111377][T30617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2429.291748][T30617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2429.345202][T30617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2429.352937][T18936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2429.383104][T18936] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2429.399667][T30617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2429.418927][T18936] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2429.498618][T18936] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2429.507817][T18936] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2429.516083][T18936] usb 4-1: Product: syz [ 2429.520399][T18936] usb 4-1: Manufacturer: syz [ 2429.525100][T18936] usb 4-1: SerialNumber: syz [ 2429.696731][T18936] usb 4-1: config 0 descriptor?? [ 2429.734868][T18936] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2429.785161][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2430.428560][T30630] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2430.474099][T30638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5008'. [ 2430.516977][T30630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2430.526976][T30630] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2430.533139][T18936] usb 4-1: USB disconnect, device number 95 [ 2430.535636][T30630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2430.616939][T30630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2430.853339][T30641] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 2430.946751][T30641] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 2431.017054][ T980] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2431.208726][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2431.549159][ T980] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2431.579774][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2431.590328][T30645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5012'. [ 2431.602403][ T980] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2431.611787][ T980] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2431.663928][ T980] usb 5-1: Product: syz [ 2431.744195][ T980] usb 5-1: Manufacturer: syz [ 2431.828698][ T980] usb 5-1: SerialNumber: syz [ 2431.858721][ T980] usb 5-1: config 0 descriptor?? [ 2431.899046][ T980] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2431.943939][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2432.076755][T15850] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2432.226339][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2432.305866][T30653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5010'. [ 2432.407045][T15850] usb 1-1: Using ep0 maxpacket: 8 [ 2432.440721][ T980] usb 5-1: USB disconnect, device number 84 [ 2432.479110][T15850] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2432.502200][T15850] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2432.527815][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2432.536360][T15850] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2432.558501][T15850] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2432.606895][T30240] Bluetooth: hci3: command 0x0c1a tx timeout [ 2432.612413][T30178] Bluetooth: hci0: command 0x0c1a tx timeout [ 2432.679528][T15850] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2432.692708][T15850] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2432.796833][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2432.796918][T15850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.263307][T30645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5012'. [ 2433.272425][T15850] usb 1-1: usb_control_msg returned -32 [ 2433.273263][T30645] netlink: 'syz.0.5012': attribute type 5 has an invalid length. [ 2433.286423][T15850] usbtmc 1-1:16.0: can't read capabilities [ 2433.315124][T30645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5012'. [ 2434.834804][T15850] usb 1-1: USB disconnect, device number 85 [ 2434.916698][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2436.166774][T18936] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2436.329756][T18936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2436.348600][T18936] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2436.369061][T18936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2436.386867][T15850] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2436.389189][T18936] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2436.495942][T18936] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2436.537183][ T980] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2436.557098][T18936] usb 5-1: Product: syz [ 2436.561352][T18936] usb 5-1: Manufacturer: syz [ 2436.575398][T18936] usb 5-1: SerialNumber: syz [ 2436.591588][T18936] usb 5-1: config 0 descriptor?? [ 2436.622796][T18936] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2436.673003][T15850] usb 2-1: Using ep0 maxpacket: 8 [ 2436.688491][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2436.912160][T15850] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2436.933173][T15850] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2436.946035][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2436.961973][T24755] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2436.971419][T15850] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2436.977161][ T980] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2436.986695][T15850] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2437.034883][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2437.053655][T15850] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2437.074129][T15850] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2437.103661][T15850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2437.163776][ T980] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2437.195950][ T980] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2437.204411][ T980] usb 3-1: Product: syz [ 2437.207236][T24755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2437.221443][ T980] usb 3-1: Manufacturer: syz [ 2437.226157][ T980] usb 3-1: SerialNumber: syz [ 2437.242723][ T980] usb 3-1: config 0 descriptor?? [ 2437.384986][T24755] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2437.805802][T15850] usb 2-1: usb_control_msg returned -32 [ 2437.811762][T24755] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2437.814852][ T980] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2437.821696][T15850] usbtmc 2-1:16.0: can't read capabilities [ 2438.081801][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5021'. [ 2438.098808][T30701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5019'. [ 2438.118041][T24755] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2438.195780][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2438.218743][ T980] usb 5-1: USB disconnect, device number 85 [ 2438.237296][T24755] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2438.392597][T24755] usb 1-1: Product: syz [ 2438.406822][T24755] usb 1-1: Manufacturer: syz [ 2438.434885][T24755] usb 1-1: SerialNumber: syz [ 2438.463024][T24755] usb 1-1: config 0 descriptor?? [ 2438.587456][T24755] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2438.619110][T18936] usb 3-1: USB disconnect, device number 103 [ 2438.698216][T30487] udevd[30487]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2439.020327][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5022'. [ 2439.033580][T24755] usb 1-1: USB disconnect, device number 86 [ 2439.936730][ T980] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2439.986811][T15850] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2440.077357][T24755] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2440.083417][T18936] usb 2-1: USB disconnect, device number 109 [ 2440.100004][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2440.140137][T15850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2440.140144][ T980] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2440.140170][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2440.163800][T15850] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2440.173246][ T980] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2440.196420][ T980] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2440.203190][T15850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2440.213622][T15850] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2440.223244][T15850] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2440.232639][ T980] usb 4-1: Product: syz [ 2440.232878][T15850] usb 3-1: Product: syz [ 2440.242121][ T980] usb 4-1: Manufacturer: syz [ 2440.247011][ T980] usb 4-1: SerialNumber: syz [ 2440.247836][T15850] usb 3-1: Manufacturer: syz [ 2440.259759][ T980] usb 4-1: config 0 descriptor?? [ 2440.275127][T15850] usb 3-1: SerialNumber: syz [ 2440.282330][T24755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2440.299932][T24755] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2440.326394][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5028'. [ 2440.510968][ T980] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2440.529834][T15850] usb 3-1: config 0 descriptor?? [ 2440.580374][T24755] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2440.613327][T15850] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2440.638262][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2440.656840][T24755] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2440.785678][T24755] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2440.823762][T30487] udevd[30487]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2440.916730][ T980] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2440.924653][T24755] usb 1-1: Product: syz [ 2440.953533][T24755] usb 1-1: Manufacturer: syz [ 2440.983068][T24755] usb 1-1: SerialNumber: syz [ 2441.003571][T24755] usb 1-1: config 0 descriptor?? [ 2441.059607][T30728] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2441.066573][T30728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2441.073566][T30728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2441.080559][T30728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2441.087635][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 2441.088559][T30728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2441.109253][ T980] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2441.117965][ T980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2441.127846][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2441.137660][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2441.147714][ T980] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2441.160854][ T980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2441.170187][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2441.291963][T30734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5025'. [ 2441.406085][T30735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'. [ 2441.456895][T18936] usb 3-1: USB disconnect, device number 104 [ 2441.464209][T24755] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2441.561217][ T980] usb 2-1: usb_control_msg returned -32 [ 2441.636074][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2441.663778][T30726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5028'. [ 2441.680659][ T980] usbtmc 2-1:16.0: can't read capabilities [ 2441.731589][ T2151] usb 4-1: USB disconnect, device number 96 [ 2441.772968][T30726] netlink: 'syz.1.5028': attribute type 5 has an invalid length. [ 2441.781974][T30726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5028'. [ 2441.827321][T30739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5027'. [ 2441.866911][T24755] usb 1-1: USB disconnect, device number 87 [ 2443.122823][T30178] Bluetooth: hci5: command 0x0c1a tx timeout [ 2443.166920][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2443.172958][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2443.179005][T30178] Bluetooth: hci0: command 0x0c1a tx timeout [ 2443.185037][T30178] Bluetooth: hci2: command 0x0c1a tx timeout [ 2443.816704][T18936] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2444.035115][T15850] usb 2-1: USB disconnect, device number 110 [ 2444.176710][T18936] usb 5-1: Using ep0 maxpacket: 8 [ 2445.039232][T18936] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2445.109212][T18936] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2445.119976][T18936] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2445.137868][T18936] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2445.156979][T18936] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2445.170276][T18936] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2445.179410][T18936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2446.078467][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2446.211995][T30750] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2446.218474][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2446.327121][T18936] usb 5-1: usb_control_msg returned -32 [ 2446.332927][T18936] usbtmc 5-1:16.0: can't read capabilities [ 2446.463691][T30750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2446.478087][T30750] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2446.484629][T30750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2446.495126][T30750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2446.705600][T30747] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 2446.797899][T18936] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2446.836811][ T2151] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2446.906741][ T980] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2446.958186][T18936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2446.968393][T18936] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2446.982457][T18936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2446.989781][T29526] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2446.999992][ T2151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2447.001559][T18936] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2447.010472][ T2151] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2447.021484][T18936] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2447.040828][T18936] usb 3-1: Product: syz [ 2447.041239][ T2151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2447.044989][T18936] usb 3-1: Manufacturer: syz [ 2447.045006][T18936] usb 3-1: SerialNumber: syz [ 2447.047991][T18936] usb 3-1: config 0 descriptor?? [ 2447.070447][ T2151] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2447.079976][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2447.089005][ T2151] usb 2-1: Product: syz [ 2447.093601][ T2151] usb 2-1: Manufacturer: syz [ 2447.098221][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2447.098264][ T980] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2447.098287][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2447.100830][ T980] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2447.109333][ T2151] usb 2-1: SerialNumber: syz [ 2447.131185][T18936] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2447.153451][ T980] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2447.180200][ T980] usb 1-1: Product: syz [ 2447.186099][ T2151] usb 2-1: config 0 descriptor?? [ 2447.191777][T18936] usb 3-1: USB disconnect, device number 105 [ 2447.202592][ T980] usb 1-1: Manufacturer: syz [ 2447.202728][T29526] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2447.223425][ T980] usb 1-1: SerialNumber: syz [ 2447.234244][T29526] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2447.235591][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2447.250190][ T980] usb 1-1: config 0 descriptor?? [ 2447.284600][T29526] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2447.300854][ T2151] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2447.313543][T29526] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2447.339617][T29526] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2447.351755][T29526] usb 4-1: Product: syz [ 2447.357742][T29526] usb 4-1: Manufacturer: syz [ 2447.364701][ T980] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2447.372139][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2447.375754][T29526] usb 4-1: SerialNumber: syz [ 2447.408176][T29526] usb 4-1: config 0 descriptor?? [ 2447.663372][T29526] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2447.705884][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2447.750247][T30782] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2447.788205][ T2151] usb 5-1: USB disconnect, device number 86 [ 2447.812332][T30782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2447.818934][T30782] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2447.825445][T30782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2447.834760][T30782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2447.898690][T30613] udevd[30613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2448.090734][T30790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5036'. [ 2448.118246][T15850] usb 2-1: USB disconnect, device number 111 [ 2448.249258][T30792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5037'. [ 2448.260597][ T2151] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2448.301695][T24755] usb 1-1: USB disconnect, device number 88 [ 2448.450872][ T2151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2448.461786][ T2151] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2448.475983][ T2151] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2448.515404][T30796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5038'. [ 2448.538851][T24755] usb 4-1: USB disconnect, device number 97 [ 2449.052047][ T2151] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2449.100402][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2449.150967][ T2151] usb 5-1: Product: syz [ 2449.156285][ T2151] usb 5-1: Manufacturer: syz [ 2449.161376][ T2151] usb 5-1: SerialNumber: syz [ 2449.190805][ T2151] usb 5-1: config 0 descriptor?? [ 2449.223599][ T2151] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2449.316118][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2449.763221][T30799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5040'. [ 2449.807431][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2449.887364][T30240] Bluetooth: hci1: command 0x0406 tx timeout [ 2449.887420][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2449.893407][T30240] Bluetooth: hci0: command 0x0c1a tx timeout [ 2449.899420][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 2449.957069][T18936] usb 5-1: USB disconnect, device number 87 [ 2450.599861][T18936] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2450.967857][T18936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.996481][T18936] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2451.023630][T18936] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2451.050101][T18936] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2451.070403][T18936] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2451.085103][T18936] usb 1-1: Product: syz [ 2451.090424][T18936] usb 1-1: Manufacturer: syz [ 2451.097310][T18936] usb 1-1: SerialNumber: syz [ 2451.111991][T18936] usb 1-1: config 0 descriptor?? [ 2451.163844][T18936] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2451.219663][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2451.504866][T30816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5042'. [ 2451.521014][ T2151] usb 1-1: USB disconnect, device number 89 [ 2451.988774][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2453.366902][T29526] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2453.804376][T29526] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2453.818450][T29526] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2453.832074][T29526] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2453.846926][T29526] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2453.856395][T29526] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2453.867837][T29526] usb 3-1: Product: syz [ 2453.873525][T29526] usb 3-1: Manufacturer: syz [ 2453.879555][T29526] usb 3-1: SerialNumber: syz [ 2453.916988][T29526] usb 3-1: config 0 descriptor?? [ 2454.048353][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2454.110710][T15850] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2454.182473][T29526] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2454.265580][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2454.369401][T15850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.380865][T15850] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2454.397613][T15850] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2454.584816][T15850] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2454.597447][T15850] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2454.667039][T15850] usb 4-1: Product: syz [ 2454.692779][T15850] usb 4-1: Manufacturer: syz [ 2454.785951][T15850] usb 4-1: SerialNumber: syz [ 2454.797749][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5046'. [ 2455.571170][T15850] usb 4-1: config 0 descriptor?? [ 2455.852203][T30853] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2455.874836][T18936] usb 3-1: USB disconnect, device number 106 [ 2455.901401][T30853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2455.924782][T30853] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2455.939015][T30853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2455.946157][T30853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2456.009582][T15850] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2456.092965][T30837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5048'. [ 2456.110732][T15850] usb 4-1: USB disconnect, device number 98 [ 2456.149478][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2457.127356][T30868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5053'. [ 2457.936750][T30178] Bluetooth: hci5: command 0x0c1a tx timeout [ 2457.976795][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2457.982959][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2457.989058][T30240] Bluetooth: hci0: command 0x0c1a tx timeout [ 2457.995053][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2458.606766][T15850] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2458.746858][T18936] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2458.759322][T15850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2458.772890][T15850] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2458.786117][T15850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2458.794558][T15850] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2458.803742][T15850] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2458.812039][T15850] usb 3-1: Product: syz [ 2458.816229][T15850] usb 3-1: Manufacturer: syz [ 2458.820897][T15850] usb 3-1: SerialNumber: syz [ 2458.841895][T15850] usb 3-1: config 0 descriptor?? [ 2458.893149][T15850] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2458.920586][T18936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2458.940432][T18936] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2458.964811][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2458.965762][T18936] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2458.990437][T18936] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2459.000161][T18936] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2459.010849][T18936] usb 2-1: Product: syz [ 2459.021794][T18936] usb 2-1: Manufacturer: syz [ 2459.032273][T18936] usb 2-1: SerialNumber: syz [ 2459.039264][T18936] usb 2-1: config 0 descriptor?? [ 2459.155977][T18936] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2459.173742][T30887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5057'. [ 2459.248488][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2459.632377][T30893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5055'. [ 2459.737030][T18936] usb 3-1: USB disconnect, device number 107 [ 2460.083586][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2460.196711][T30899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5056'. [ 2460.294481][T24755] usb 2-1: USB disconnect, device number 112 [ 2460.445401][T30900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5059'. [ 2462.687820][ T2151] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2462.866752][ T2151] usb 1-1: Using ep0 maxpacket: 8 [ 2462.873990][ T2151] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2462.882468][ T2151] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2462.892255][ T2151] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2462.942171][T30914] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2462.949539][T30914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2462.966711][ T2151] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2462.982724][T30914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2462.989517][T30914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2462.996045][T30914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2463.026448][ T2151] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2463.058267][ T2151] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2463.222940][ T2151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2463.666805][T14939] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2463.721393][T30913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5061'. [ 2463.736844][T30913] netlink: 'syz.0.5061': attribute type 5 has an invalid length. [ 2463.755267][T30913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5061'. [ 2463.900693][T14939] usb 2-1: Using ep0 maxpacket: 8 [ 2463.934116][ T2151] usb 1-1: usb_control_msg returned -32 [ 2463.960050][ T2151] usbtmc 1-1:16.0: can't read capabilities [ 2464.006896][T14939] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2464.075768][T14939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2464.169043][T14939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2464.183338][T14939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2464.196103][T14939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2464.214523][T14939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2464.229098][T14939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2464.523755][T14939] usb 2-1: usb_control_msg returned -32 [ 2464.638361][T14939] usbtmc 2-1:16.0: can't read capabilities [ 2464.850565][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2465.007483][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2465.125856][T30240] Bluetooth: hci1: command 0x0406 tx timeout [ 2465.131985][T30241] Bluetooth: hci3: command 0x0c1a tx timeout [ 2465.133726][T30178] Bluetooth: hci0: command 0x0c1a tx timeout [ 2465.932476][T14939] usb 1-1: USB disconnect, device number 90 [ 2465.956803][T30934] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 2466.993538][T30946] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2467.001398][T30946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2467.009570][T30946] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2467.015913][T30946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2467.026768][T30946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2467.294384][T14939] usb 2-1: USB disconnect, device number 113 [ 2467.664626][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.672377][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.994710][T14939] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2468.416716][T14939] usb 2-1: Using ep0 maxpacket: 8 [ 2468.423550][T14939] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2468.432494][T14939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2468.442828][T14939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2468.496963][T14939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2468.519574][T14939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2468.576890][T14939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2468.595146][T14939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2468.924376][T14939] usb 2-1: usb_control_msg returned -32 [ 2468.938802][T14939] usbtmc 2-1:16.0: can't read capabilities [ 2469.006855][T30178] Bluetooth: hci2: command 0x0c1a tx timeout [ 2469.012917][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2469.086965][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2469.087048][T30240] Bluetooth: hci3: command 0x0c1a tx timeout [ 2469.099135][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 2469.297064][T30971] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 2470.678070][ T980] usb 2-1: USB disconnect, device number 114 [ 2470.878227][T30984] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2470.888840][T30984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2470.895129][T30984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2470.902213][T30984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2470.909156][T30984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2471.393889][T30997] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 2471.402860][T30997] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 2471.436919][ T980] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2471.576752][ T2151] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2471.618297][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2471.628601][ T980] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2471.640401][ T980] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2471.649932][ T980] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2471.658343][ T980] usb 4-1: Product: syz [ 2471.663143][ T980] usb 4-1: Manufacturer: syz [ 2471.668521][ T980] usb 4-1: SerialNumber: syz [ 2471.681918][ T980] usb 4-1: config 0 descriptor?? [ 2471.729066][ T2151] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2471.751596][ T2151] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2471.766170][ T2151] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2471.779048][ T2151] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2471.794907][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2471.803750][ T2151] usb 1-1: Product: syz [ 2471.808373][ T2151] usb 1-1: Manufacturer: syz [ 2471.813097][ T2151] usb 1-1: SerialNumber: syz [ 2471.822326][ T2151] usb 1-1: config 0 descriptor?? [ 2471.857002][ T2151] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2471.904832][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2472.233308][T31005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5075'. [ 2472.264332][ T980] usb 4-1: USB disconnect, device number 99 [ 2472.833790][T31013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5076'. [ 2472.917148][ T2151] usb 1-1: USB disconnect, device number 91 [ 2472.926860][T30178] Bluetooth: hci0: command 0x0c1a tx timeout [ 2472.933192][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2472.939507][T30241] Bluetooth: hci5: command 0x0c1a tx timeout [ 2473.006865][T30240] Bluetooth: hci1: command 0x0406 tx timeout [ 2473.013298][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2474.259629][T29526] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2474.306757][ T980] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2474.428274][T29526] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2474.438894][T29526] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2474.450851][T29526] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2474.460759][T29526] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2474.469767][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2474.480077][ T980] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2474.496363][T29526] usb 3-1: Product: syz [ 2474.501074][T29526] usb 3-1: Manufacturer: syz [ 2474.506164][T29526] usb 3-1: SerialNumber: syz [ 2474.511598][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2474.580136][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2474.604274][T29526] usb 3-1: config 0 descriptor?? [ 2474.669327][ T980] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2474.706211][ T980] usb 2-1: Product: syz [ 2474.713103][ T980] usb 2-1: Manufacturer: syz [ 2474.720934][ T980] usb 2-1: SerialNumber: syz [ 2474.735498][ T980] usb 2-1: config 0 descriptor?? [ 2474.837498][ T980] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2475.275314][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2475.352379][T31034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5080'. [ 2475.506099][ T5837] usb 3-1: USB disconnect, device number 108 [ 2475.614667][T31024] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2475.620993][T31024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2475.700431][T31024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2475.707753][T31024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2475.715001][T31024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2475.759105][T31038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5081'. [ 2475.979717][T29526] usb 2-1: USB disconnect, device number 115 [ 2477.433511][T30178] Bluetooth: hci5: command 0x0c1a tx timeout [ 2477.646962][T30178] Bluetooth: hci2: command 0x0c1a tx timeout [ 2477.727130][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2477.733189][T30241] Bluetooth: hci3: command 0x0c1a tx timeout [ 2477.739261][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 2478.558851][T31051] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2478.745875][T31051] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2478.923479][T31051] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2478.933872][T31051] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2478.940990][T31051] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2480.177100][T29526] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2480.417514][T29526] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2480.434276][T29526] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2480.488027][T29526] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2480.512196][T29526] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2480.521613][T29526] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2480.530485][T29526] usb 2-1: Product: syz [ 2480.534894][T29526] usb 2-1: Manufacturer: syz [ 2480.540095][T29526] usb 2-1: SerialNumber: syz [ 2480.551040][T29526] usb 2-1: config 0 descriptor?? [ 2480.591460][T29526] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2480.729399][T30178] Bluetooth: hci5: command 0x0c1a tx timeout [ 2480.766734][T30178] Bluetooth: hci2: command 0x0c1a tx timeout [ 2480.926827][T30178] Bluetooth: hci0: command 0x0c1a tx timeout [ 2481.018195][T30178] Bluetooth: hci1: command 0x0406 tx timeout [ 2481.024336][T30241] Bluetooth: hci3: command 0x0c1a tx timeout [ 2481.284868][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2481.491672][T31077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5089'. [ 2481.531779][T18936] usb 2-1: USB disconnect, device number 116 [ 2481.636781][T29526] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2481.869144][T29526] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2481.880127][T29526] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2481.905588][T29526] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2481.915065][T29526] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2481.925154][T29526] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2481.940713][T29526] usb 3-1: Product: syz [ 2481.949156][T29526] usb 3-1: Manufacturer: syz [ 2481.958540][T29526] usb 3-1: SerialNumber: syz [ 2481.973197][T29526] usb 3-1: config 0 descriptor?? [ 2482.009691][T29526] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2482.114005][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2483.087208][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2483.299531][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5092'. [ 2483.311630][T18936] usb 3-1: USB disconnect, device number 109 [ 2483.606892][T29526] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2483.928593][T29526] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2484.014450][T29526] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2484.024706][T29526] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2484.034329][T29526] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2484.044000][T29526] usb 5-1: Product: syz [ 2484.048659][T29526] usb 5-1: Manufacturer: syz [ 2484.053371][T29526] usb 5-1: SerialNumber: syz [ 2484.066314][T29526] usb 5-1: config 0 descriptor?? [ 2484.092954][T29526] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2484.130641][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2484.567270][T31112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5095'. [ 2484.607384][T14939] usb 5-1: USB disconnect, device number 88 [ 2485.353053][T31086] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2485.369847][T31086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2485.382333][T31086] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2485.389957][T31086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2485.396227][T31086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2485.570062][T30241] Bluetooth: hci5: command 0x0c1a tx timeout [ 2485.646756][ T2151] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2486.056057][ T2151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2486.086694][ T2151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2486.122508][ T2151] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2486.140356][T31119] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2486.150123][T31119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2486.158041][T31119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2486.165399][T31119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2486.172412][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2486.181322][T24755] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2486.191204][T31119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2486.201160][ T2151] usb 2-1: Product: syz [ 2486.240066][ T2151] usb 2-1: Manufacturer: syz [ 2486.244732][ T2151] usb 2-1: SerialNumber: syz [ 2486.257979][ T2151] usb 2-1: config 0 descriptor?? [ 2486.295981][ T2151] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2486.406182][T24755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2486.542887][T24755] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2486.551260][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2486.555293][T24755] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2486.596317][T24755] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2486.632981][T24755] usb 3-1: Product: syz [ 2486.644377][T24755] usb 3-1: Manufacturer: syz [ 2486.661625][T24755] usb 3-1: SerialNumber: syz [ 2486.687361][T24755] usb 3-1: config 0 descriptor?? [ 2486.886744][ T2151] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2486.916740][ T5837] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2486.962150][T31132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5096'. [ 2487.032620][T15850] usb 2-1: USB disconnect, device number 117 [ 2487.044761][ T2151] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2487.063789][ T2151] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2487.079204][ T5837] usb 5-1: Using ep0 maxpacket: 8 [ 2487.095516][ T5837] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2487.107257][ T5837] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2487.126868][ T5837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2487.146953][ T2151] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2487.159709][ T2151] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2487.186867][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2487.195273][ T5837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2487.302242][ T2151] usb 1-1: Product: syz [ 2487.308985][ T2151] usb 1-1: Manufacturer: syz [ 2487.332128][ T5837] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2487.345388][ T2151] usb 1-1: SerialNumber: syz [ 2487.404563][ T5837] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2487.417554][ T2151] usb 1-1: config 0 descriptor?? [ 2487.424664][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2487.461447][ T2151] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2487.470967][T31135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5099'. [ 2487.577249][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2487.647376][T18936] usb 3-1: USB disconnect, device number 110 [ 2487.702728][ T5837] usb 5-1: usb_control_msg returned -32 [ 2487.711867][ T5837] usbtmc 5-1:16.0: can't read capabilities [ 2488.129617][T30241] Bluetooth: hci5: command 0x0c1a tx timeout [ 2488.167849][T31140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5101'. [ 2488.208431][T29526] usb 1-1: USB disconnect, device number 92 [ 2488.236978][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2488.243090][T30241] Bluetooth: hci3: command 0x0c1a tx timeout [ 2488.249444][T30241] Bluetooth: hci0: command 0x0c1a tx timeout [ 2488.255470][T30241] Bluetooth: hci2: command 0x0c1a tx timeout [ 2488.448214][T31139] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 2489.317159][T29526] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2489.700587][T29526] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2489.710888][T29526] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2489.737639][T29526] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2489.749020][T29526] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2489.758353][T29526] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2489.766573][T29526] usb 4-1: Product: syz [ 2489.771164][T29526] usb 4-1: Manufacturer: syz [ 2489.777079][T29526] usb 4-1: SerialNumber: syz [ 2489.810478][ T5837] usb 5-1: USB disconnect, device number 89 [ 2489.973978][T29526] usb 4-1: config 0 descriptor?? [ 2490.287299][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2490.311743][T29526] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2490.404873][T31158] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2490.411410][T31158] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2490.418180][T31158] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2490.425140][T31158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2490.431551][T31158] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2490.517016][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2490.819604][T31163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5102'. [ 2490.842712][ T980] usb 4-1: USB disconnect, device number 100 [ 2491.256912][T29526] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2491.496576][T29526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2491.514850][T29526] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2491.526712][ T2151] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2491.569906][T29526] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2491.579127][T29526] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2491.615110][T29526] usb 1-1: Product: syz [ 2491.631790][T29526] usb 1-1: Manufacturer: syz [ 2491.656825][T29526] usb 1-1: SerialNumber: syz [ 2491.678742][ T2151] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2491.689764][ T2151] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2491.690321][T29526] usb 1-1: config 0 descriptor?? [ 2491.766570][T29526] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2491.775836][ T2151] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2491.823185][ T2151] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2491.870166][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2491.913428][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2491.990099][ T2151] usb 3-1: Product: syz [ 2492.003255][ T2151] usb 3-1: Manufacturer: syz [ 2492.018150][ T2151] usb 3-1: SerialNumber: syz [ 2492.086169][ T2151] usb 3-1: config 0 descriptor?? [ 2492.246053][T31171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5106'. [ 2492.292923][ T5837] usb 1-1: USB disconnect, device number 93 [ 2492.358032][ T2151] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2492.372683][T30241] Bluetooth: hci5: command 0x0c1a tx timeout [ 2492.387934][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2492.459831][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2492.465965][T30241] Bluetooth: hci0: command 0x0c1a tx timeout [ 2492.552665][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2492.561337][T30240] Bluetooth: hci3: command 0x0c1a tx timeout [ 2493.010748][T31176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5107'. [ 2493.050663][T29526] usb 3-1: USB disconnect, device number 111 [ 2493.376967][ T980] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2493.528526][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2493.539060][ T980] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2493.552997][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2493.563495][ T980] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2493.574649][ T980] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2493.585749][ T980] usb 4-1: Product: syz [ 2493.590234][ T980] usb 4-1: Manufacturer: syz [ 2493.595322][ T980] usb 4-1: SerialNumber: syz [ 2493.609734][ T980] usb 4-1: config 0 descriptor?? [ 2493.992674][ T980] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2494.314010][ T980] usb 4-1: USB disconnect, device number 101 [ 2494.326356][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2494.926820][T30240] Bluetooth: hci1: command 0x0406 tx timeout [ 2495.495967][ T5837] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2495.498452][T29526] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2495.667977][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2495.678527][ T5837] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2495.688658][T29526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2495.707881][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2495.715742][T29526] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2495.718022][ T5837] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2495.756731][ T980] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2495.811290][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2495.820076][T29526] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2495.832143][ T5837] usb 3-1: Product: syz [ 2495.832369][T29526] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2495.853557][ T5837] usb 3-1: Manufacturer: syz [ 2495.858491][ T5837] usb 3-1: SerialNumber: syz [ 2495.863370][T29526] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2495.872674][T29526] usb 1-1: Product: syz [ 2495.894572][ T5837] usb 3-1: config 0 descriptor?? [ 2495.900835][T29526] usb 1-1: Manufacturer: syz [ 2495.905606][T29526] usb 1-1: SerialNumber: syz [ 2495.931765][T29526] usb 1-1: config 0 descriptor?? [ 2495.956735][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 2495.974987][ T980] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2496.001547][ T980] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2496.017068][ T980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2496.042200][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2496.044503][ T5837] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2496.225099][T31194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5111'. [ 2496.259252][T30487] udevd[30487]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2496.310869][T29526] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2496.453056][T29526] usb 1-1: USB disconnect, device number 94 [ 2496.729225][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2496.897642][T31208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5110'. [ 2496.985471][ T5837] usb 3-1: USB disconnect, device number 112 [ 2498.421980][T29526] usb 5-1: USB disconnect, device number 90 [ 2498.526815][T30241] Bluetooth: hci5: command 0x0c1a tx timeout [ 2498.526860][T31205] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2498.955648][T31205] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2498.961954][T31205] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2498.968103][T31205] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2498.974190][T31205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2499.355819][T14939] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2499.717279][T29526] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2499.738212][T14939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2499.758637][T14939] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2499.782192][T14939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2499.855790][T14939] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2499.867549][T14939] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2499.886856][T14939] usb 5-1: Product: syz [ 2499.891127][T14939] usb 5-1: Manufacturer: syz [ 2499.895740][T14939] usb 5-1: SerialNumber: syz [ 2499.900525][T29526] usb 1-1: Using ep0 maxpacket: 8 [ 2499.912419][T29526] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2499.923639][T14939] usb 5-1: config 0 descriptor?? [ 2499.942614][T29526] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2499.996390][T29526] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2500.116493][T14939] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2500.129121][T29526] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2500.272020][T29526] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2500.370278][T29526] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2500.381388][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2500.479813][T29526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2500.543993][T29526] usbtmc 1-1:16.0: bulk endpoints not found [ 2500.676233][T30241] Bluetooth: hci2: command 0x0c1a tx timeout [ 2501.022281][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2501.026385][T24755] usb 5-1: USB disconnect, device number 91 [ 2501.028447][T30241] Bluetooth: hci3: command 0x0c1a tx timeout [ 2501.039244][T30240] Bluetooth: hci0: command 0x0c1a tx timeout [ 2502.088220][T31226] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2502.097749][T31226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2502.103903][T31226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2502.110330][T31226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2502.120401][T31226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2502.246999][T31246] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2502.255788][T31246] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2502.262762][T31246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2502.270885][T31246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2502.277619][T31246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2502.747748][T29526] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2502.906736][T29526] usb 4-1: Using ep0 maxpacket: 8 [ 2502.923181][T29526] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2502.938076][T29526] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2502.948556][T29526] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2502.963670][T29526] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2502.975656][T29526] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2502.998402][T29526] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2503.009562][T29526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2503.139408][ T980] usb 1-1: USB disconnect, device number 95 [ 2503.202982][T31256] syzkaller0: entered promiscuous mode [ 2503.209088][T31256] syzkaller0: entered allmulticast mode [ 2503.603544][T29526] usb 4-1: usb_control_msg returned -32 [ 2503.609353][T29526] usbtmc 4-1:16.0: can't read capabilities [ 2503.830304][T31261] syzkaller0: entered promiscuous mode [ 2503.835791][T31261] syzkaller0: entered allmulticast mode [ 2504.131640][T31266] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 2504.287141][T30240] Bluetooth: hci1: command 0x0406 tx timeout [ 2504.287177][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2504.293297][T30240] Bluetooth: hci0: command 0x0c1a tx timeout [ 2504.299324][T30241] Bluetooth: hci2: command 0x0c1a tx timeout [ 2504.299369][T30241] Bluetooth: hci5: command 0x0c1a tx timeout [ 2504.305932][ T5837] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2504.534466][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 2504.659661][ T5837] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2504.669757][ T5837] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2504.763227][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2504.786084][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2504.882344][ T5837] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2505.055640][ T5837] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2505.100574][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.493129][ T5837] usb 1-1: usb_control_msg returned -32 [ 2505.505915][ T5837] usbtmc 1-1:16.0: can't read capabilities [ 2505.795451][ T5837] usb 4-1: USB disconnect, device number 102 [ 2506.526796][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2506.607274][T31277] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2506.618380][T31277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2506.625449][T31277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2506.636206][T31277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2506.656163][T31277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2506.907953][ T5837] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2506.916694][ T5932] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2507.023264][T24755] usb 1-1: USB disconnect, device number 96 [ 2507.076823][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 2507.087847][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2507.133446][ T5932] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2507.169786][ T5932] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2507.180831][ T5837] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2507.214760][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2507.234098][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2507.246690][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2507.287705][ T5932] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2507.301506][ T5837] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2507.329727][ T5932] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2507.345502][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2507.354784][ T5837] usb 4-1: Product: syz [ 2507.359533][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2507.367904][ T5837] usb 4-1: Manufacturer: syz [ 2507.372582][ T5837] usb 4-1: SerialNumber: syz [ 2507.444783][ T5837] usb 4-1: config 0 descriptor?? [ 2507.449944][T24755] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2507.491178][ T5837] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2507.545146][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2507.619154][T24755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2507.637090][T24755] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2507.637763][ T980] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2507.660066][T24755] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2507.677706][T24755] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2507.696829][T24755] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2507.714933][ T5932] usb 2-1: usb_control_msg returned -32 [ 2507.721612][T24755] usb 1-1: Product: syz [ 2507.725819][T24755] usb 1-1: Manufacturer: syz [ 2507.732176][ T5932] usbtmc 2-1:16.0: can't read capabilities [ 2507.738638][T24755] usb 1-1: SerialNumber: syz [ 2507.786109][T24755] usb 1-1: config 0 descriptor?? [ 2507.829695][T24755] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2507.850606][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2507.860018][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2508.101244][T31286] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 2508.103449][ T980] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2508.125054][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2508.138717][ T980] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2508.148261][ T980] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2508.156451][ T980] usb 5-1: Product: syz [ 2508.161385][ T980] usb 5-1: Manufacturer: syz [ 2508.165991][ T980] usb 5-1: SerialNumber: syz [ 2508.206022][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5126'. [ 2508.282462][T29526] usb 4-1: USB disconnect, device number 103 [ 2508.319390][ T980] usb 5-1: config 0 descriptor?? [ 2508.652927][ T980] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2508.675879][T31299] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2508.692350][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2508.699055][T30178] Bluetooth: hci3: command 0x0c1a tx timeout [ 2508.705108][T30241] Bluetooth: hci0: command 0x0c1a tx timeout [ 2508.711651][T30241] Bluetooth: hci2: command 0x0c1a tx timeout [ 2508.728435][T31299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2508.735669][T31299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2508.745941][T31299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2508.755127][T31299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2508.926316][T31308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5128'. [ 2508.949709][ T980] usb 1-1: USB disconnect, device number 97 [ 2508.953827][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2509.408478][T31307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5129'. [ 2509.482944][T24755] usb 5-1: USB disconnect, device number 92 [ 2509.715785][T29526] usb 2-1: USB disconnect, device number 118 [ 2510.137727][T29526] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2510.429373][T29526] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2510.440239][T29526] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2510.455168][T29526] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2510.468248][T29526] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2510.477545][T29526] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2510.486233][T29526] usb 2-1: Product: syz [ 2510.490695][T29526] usb 2-1: Manufacturer: syz [ 2510.495661][T29526] usb 2-1: SerialNumber: syz [ 2510.504321][T29526] usb 2-1: config 0 descriptor?? [ 2510.558100][T29526] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2510.608017][T12569] Bluetooth: hci5: command 0x0c1a tx timeout [ 2510.783083][T12569] Bluetooth: hci0: command 0x0c1a tx timeout [ 2510.792048][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2510.804029][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2510.967651][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2510.972780][T30240] Bluetooth: hci3: command 0x0c1a tx timeout [ 2511.557287][T24755] usb 2-1: USB disconnect, device number 119 [ 2511.616780][T29526] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2511.686932][ T980] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2511.789223][T29526] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2511.799967][T29526] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2511.929509][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2511.943287][ T980] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2511.956662][T29526] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2511.978051][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2511.987363][T29526] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2512.029962][T29526] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2512.038363][T29526] usb 5-1: Product: syz [ 2512.042695][T29526] usb 5-1: Manufacturer: syz [ 2512.076104][ T980] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2512.085814][T29526] usb 5-1: SerialNumber: syz [ 2512.095174][ T980] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2512.105486][T29526] usb 5-1: config 0 descriptor?? [ 2512.121367][ T980] usb 1-1: Product: syz [ 2512.136668][ T980] usb 1-1: Manufacturer: syz [ 2512.151740][ T980] usb 1-1: SerialNumber: syz [ 2512.163425][T29526] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2512.180907][ T980] usb 1-1: config 0 descriptor?? [ 2512.285384][ T980] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2512.292966][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2512.432882][T30487] udevd[30487]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2512.803085][T24755] usb 1-1: USB disconnect, device number 98 [ 2512.914894][ T5932] usb 5-1: USB disconnect, device number 93 [ 2513.087823][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2513.758451][T31337] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2513.766713][T31337] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2513.773725][T31337] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2513.780639][T31337] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2513.838447][T31337] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2513.946859][ T5932] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2514.567967][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2514.598163][ T5932] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2514.981031][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2515.075447][ T5932] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2515.084811][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2515.093704][ T5932] usb 2-1: Product: syz [ 2515.099507][ T5932] usb 2-1: Manufacturer: syz [ 2515.104206][ T5932] usb 2-1: SerialNumber: syz [ 2515.118441][ T5932] usb 2-1: config 0 descriptor?? [ 2515.147426][ T5932] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2515.223844][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2515.507704][T29526] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2515.579616][T31352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5136'. [ 2515.663190][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2515.806855][T30240] Bluetooth: hci3: command 0x0c1a tx timeout [ 2515.814222][T30240] Bluetooth: hci0: command 0x0c1a tx timeout [ 2515.820659][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2515.908030][T30240] Bluetooth: hci1: command 0x0406 tx timeout [ 2515.944075][ T980] usb 2-1: USB disconnect, device number 120 [ 2515.987510][T29526] usb 5-1: Using ep0 maxpacket: 8 [ 2516.153293][T29526] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2516.161929][T29526] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2516.178466][T29526] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2516.190178][T29526] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2516.201447][T29526] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2516.219484][T29526] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2516.242493][T29526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.426737][ T5837] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2516.619866][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2516.641724][ T5837] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2516.691871][ T5837] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2516.693256][T29526] usbtmc 5-1:16.0: bulk endpoints not found [ 2516.724887][ T5837] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2516.742473][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2516.761029][ T5837] usb 1-1: Product: syz [ 2516.765692][ T5837] usb 1-1: Manufacturer: syz [ 2516.771006][ T5837] usb 1-1: SerialNumber: syz [ 2516.802050][ T5837] usb 1-1: config 0 descriptor?? [ 2516.835897][ T5837] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2517.030293][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2517.296238][T31359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5139'. [ 2517.331420][ T5932] usb 1-1: USB disconnect, device number 99 [ 2517.773766][T31361] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2517.781574][T31361] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2517.788821][T31361] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2517.847002][T31361] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2517.853338][T31361] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2519.503303][ T5932] usb 5-1: USB disconnect, device number 94 [ 2519.726877][T30241] Bluetooth: hci5: command 0x0c1a tx timeout [ 2519.807749][T30241] Bluetooth: hci0: command 0x0c1a tx timeout [ 2519.815187][T30240] Bluetooth: hci2: command 0x0c1a tx timeout [ 2519.887703][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2519.896886][T30240] Bluetooth: hci3: command 0x0c1a tx timeout [ 2519.948147][ T5932] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2520.120423][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2520.133555][ T5932] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2520.162195][ T5932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2520.183054][ T5932] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2520.196080][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2520.212489][ T5932] usb 5-1: Product: syz [ 2520.280700][ T5932] usb 5-1: Manufacturer: syz [ 2520.303793][ T5932] usb 5-1: SerialNumber: syz [ 2520.352665][ T5932] usb 5-1: config 0 descriptor?? [ 2520.425131][ T5932] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2520.593043][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2521.056302][T31392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5144'. [ 2521.121128][ T5932] usb 5-1: USB disconnect, device number 95 [ 2521.966980][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2523.008244][T12569] Bluetooth: hci5: command 0x0c1a tx timeout [ 2523.013373][T31389] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2523.384000][T31389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2523.390702][T31389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2523.397448][T31389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2523.404347][T31389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2523.659439][T31400] syzkaller0: entered promiscuous mode [ 2523.665143][T31400] syzkaller0: entered allmulticast mode [ 2523.766905][ T980] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2523.845774][ T5932] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2524.093507][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2524.137031][ T5932] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2524.157471][ T2151] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2524.320976][ T5932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2524.347640][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2524.366537][ T980] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2524.387575][ T5932] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2524.444439][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2524.453892][T31405] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2524.464365][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2524.473443][T31405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2524.475271][ T980] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2524.493305][ T980] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2524.497406][ T2151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2524.502993][ T980] usb 3-1: Product: syz [ 2524.525732][ T980] usb 3-1: Manufacturer: syz [ 2524.531075][ T980] usb 3-1: SerialNumber: syz [ 2524.535984][ T5932] usb 4-1: Product: syz [ 2524.541648][ T980] usb 3-1: config 0 descriptor?? [ 2524.552043][ T5932] usb 4-1: Manufacturer: syz [ 2524.637151][T31405] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2524.643731][T31405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2524.677425][ T5932] usb 4-1: SerialNumber: syz [ 2524.689420][T31405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2524.707183][ T2151] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2524.746873][ T5932] usb 4-1: config 0 descriptor?? [ 2524.749212][ T980] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2524.802179][ T2151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2524.841511][ T2151] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2524.878728][ T5932] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2524.978022][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2525.011481][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2525.030988][ T2151] usb 2-1: Product: syz [ 2525.046827][ T2151] usb 2-1: Manufacturer: syz [ 2525.056922][ T2151] usb 2-1: SerialNumber: syz [ 2525.109062][ T2151] usb 2-1: config 0 descriptor?? [ 2525.197912][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2525.216660][ T2151] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2525.311440][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2525.433313][T31418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5149'. [ 2525.479093][T29526] usb 4-1: USB disconnect, device number 104 [ 2525.577512][T31417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5146'. [ 2525.613385][ T980] usb 3-1: USB disconnect, device number 113 [ 2525.773499][T31420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5151'. [ 2525.794447][T18936] usb 2-1: USB disconnect, device number 121 [ 2526.531388][T30241] Bluetooth: hci2: command 0x0c1a tx timeout [ 2526.538496][T30240] Bluetooth: hci5: command 0x0c1a tx timeout [ 2526.687093][T30241] Bluetooth: hci3: command 0x0c1a tx timeout [ 2526.694877][T30240] Bluetooth: hci0: command 0x0c1a tx timeout [ 2526.767363][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2527.467625][T31427] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2527.475958][T31427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2527.482807][T31427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2527.534209][T31427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2527.542043][T31427] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2528.340131][T18936] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2528.524731][T18936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2528.538145][T18936] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2528.634943][T18936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2528.666067][T18936] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2528.677794][T18936] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2528.733602][ T2151] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2528.743687][T18936] usb 5-1: Product: syz [ 2528.743710][T18936] usb 5-1: Manufacturer: syz [ 2528.753219][T18936] usb 5-1: SerialNumber: syz [ 2528.769006][T18936] usb 5-1: config 0 descriptor?? [ 2528.884792][T18936] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2529.024435][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2529.101883][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.113812][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.247064][ T2151] usb 2-1: Using ep0 maxpacket: 8 [ 2529.260890][ T2151] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2529.293522][T31448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5155'. [ 2529.322949][T18936] usb 5-1: USB disconnect, device number 96 [ 2529.361711][ T2151] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2529.463804][ T2151] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2529.501518][T30241] Bluetooth: hci5: command 0x0c1a tx timeout [ 2529.567066][T30241] Bluetooth: hci0: command 0x0c1a tx timeout [ 2529.575441][T30240] Bluetooth: hci3: command 0x0c1a tx timeout [ 2529.583530][T30178] Bluetooth: hci2: command 0x0c1a tx timeout [ 2529.655831][T30241] Bluetooth: hci1: command 0x0406 tx timeout [ 2529.669682][ T2151] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2529.680709][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.791803][ T2151] usbtmc 2-1:16.0: bulk endpoints not found [ 2530.706798][T18936] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2530.871575][T18936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2530.885354][T18936] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2531.161937][T18936] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2531.191583][T18936] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2531.205022][T18936] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2531.223724][T18936] usb 1-1: Product: syz [ 2531.232286][T18936] usb 1-1: Manufacturer: syz [ 2531.242831][T18936] usb 1-1: SerialNumber: syz [ 2531.286837][T18936] usb 1-1: config 0 descriptor?? [ 2531.395947][T18936] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2531.536242][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2531.736893][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2532.318202][ T5932] usb 2-1: USB disconnect, device number 122 [ 2532.335862][T31471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5157'. [ 2532.486839][T18936] usb 1-1: USB disconnect, device number 100 [ 2533.246881][T31458] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2533.247162][T12569] Bluetooth: hci5: command 0x0c1a tx timeout [ 2533.806932][T12569] Bluetooth: hci1: command 0x0406 tx timeout [ 2534.247774][T31458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2534.255332][T31458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2534.262865][T31458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2534.270959][T31458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2534.279656][T12569] ================================================================== [ 2534.289557][T12569] BUG: KASAN: slab-use-after-free in l2cap_disconn_ind+0x79/0xc0 [ 2534.298580][T12569] Read of size 1 at addr ffff88807bb0fab0 by task kworker/u9:1/12569 [ 2534.308226][T12569] [ 2534.310926][T12569] CPU: 0 UID: 0 PID: 12569 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 2534.310941][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2534.310950][T12569] Workqueue: hci1 hci_conn_timeout [ 2534.311058][T12569] Call Trace: [ 2534.311066][T12569] [ 2534.311072][T12569] dump_stack_lvl+0x189/0x250 [ 2534.311103][T12569] ? __virt_addr_valid+0x1c8/0x5c0 [ 2534.311118][T12569] ? rcu_is_watching+0x15/0xb0 [ 2534.311134][T12569] ? __kasan_check_byte+0x12/0x40 [ 2534.311168][T12569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2534.311179][T12569] ? rcu_is_watching+0x15/0xb0 [ 2534.311189][T12569] ? lock_release+0x4b/0x3e0 [ 2534.311200][T12569] ? __virt_addr_valid+0x1c8/0x5c0 [ 2534.311213][T12569] ? __virt_addr_valid+0x4a5/0x5c0 [ 2534.311225][T12569] print_report+0xca/0x240 [ 2534.311241][T12569] ? l2cap_disconn_ind+0x79/0xc0 [ 2534.311250][T12569] kasan_report+0x118/0x150 [ 2534.311265][T12569] ? l2cap_disconn_ind+0x79/0xc0 [ 2534.311275][T12569] l2cap_disconn_ind+0x79/0xc0 [ 2534.311284][T12569] hci_conn_timeout+0xdd/0x290 [ 2534.311297][T12569] ? process_scheduled_works+0x9ef/0x17b0 [ 2534.311312][T12569] process_scheduled_works+0xade/0x17b0 [ 2534.311328][T12569] ? __pfx_process_scheduled_works+0x10/0x10 [ 2534.311341][T12569] worker_thread+0x8a0/0xda0 [ 2534.311357][T12569] kthread+0x70e/0x8a0 [ 2534.311371][T12569] ? __pfx_worker_thread+0x10/0x10 [ 2534.311381][T12569] ? __pfx_kthread+0x10/0x10 [ 2534.311394][T12569] ? _raw_spin_unlock_irq+0x23/0x50 [ 2534.311452][T12569] ? lockdep_hardirqs_on+0x9c/0x150 [ 2534.311513][T12569] ? __pfx_kthread+0x10/0x10 [ 2534.311526][T12569] ret_from_fork+0x436/0x7d0 [ 2534.311542][T12569] ? __pfx_ret_from_fork+0x10/0x10 [ 2534.311552][T12569] ? __switch_to_asm+0x39/0x70 [ 2534.311565][T12569] ? __switch_to_asm+0x33/0x70 [ 2534.311576][T12569] ? __pfx_kthread+0x10/0x10 [ 2534.311589][T12569] ret_from_fork_asm+0x1a/0x30 [ 2534.311604][T12569] [ 2534.311608][T12569] [ 2534.540566][T12569] Allocated by task 31430: [ 2534.545778][T12569] kasan_save_track+0x3e/0x80 [ 2534.551380][T12569] __kasan_kmalloc+0x93/0xb0 [ 2534.556523][T12569] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 2534.564129][T12569] l2cap_conn_add+0xaa/0x8d0 [ 2534.569453][T12569] l2cap_chan_connect+0x6c8/0xe30 [ 2534.575544][T12569] lowpan_control_write+0x421/0x6c0 [ 2534.581920][T12569] full_proxy_write+0x127/0x1f0 [ 2534.587779][T12569] vfs_write+0x27b/0xb30 [ 2534.592795][T12569] ksys_write+0x145/0x250 [ 2534.598110][T12569] __do_fast_syscall_32+0xb6/0x2b0 [ 2534.603877][T12569] do_fast_syscall_32+0x34/0x80 [ 2534.609356][T12569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2534.616762][T12569] [ 2534.619110][T12569] Freed by task 31458: [ 2534.624121][T12569] kasan_save_track+0x3e/0x80 [ 2534.629432][T12569] __kasan_save_free_info+0x46/0x50 [ 2534.634981][T12569] __kasan_slab_free+0x5c/0x80 [ 2534.640373][T12569] kfree+0x19a/0x6d0 [ 2534.645863][T12569] l2cap_connect_cfm+0x11d/0x1040 [ 2534.652736][T12569] hci_conn_failed+0x1ce/0x310 [ 2534.659727][T12569] hci_abort_conn_sync+0x658/0xe30 [ 2534.664988][T12569] hci_disconnect_all_sync+0x1b5/0x350 [ 2534.672568][T12569] hci_suspend_sync+0x3fc/0xc60 [ 2534.678461][T12569] hci_suspend_dev+0x28d/0x4d0 [ 2534.684092][T12569] hci_suspend_notifier+0xf2/0x290 [ 2534.689986][T12569] notifier_call_chain+0x1b6/0x3e0 [ 2534.696052][T12569] blocking_notifier_call_chain_robust+0x85/0x100 [ 2534.704118][T12569] pm_notifier_call_chain_robust+0x2c/0x60 [ 2534.711792][T12569] snapshot_open+0x19c/0x280 [ 2534.718034][T12569] misc_open+0x2bc/0x330 [ 2534.724138][T12569] chrdev_open+0x4cc/0x5e0 [ 2534.728573][T12569] do_dentry_open+0x953/0x13f0 [ 2534.733880][T12569] vfs_open+0x3b/0x340 [ 2534.738049][T12569] path_openat+0x2ee5/0x3830 [ 2534.744121][T12569] do_filp_open+0x1fa/0x410 [ 2534.748625][T12569] do_sys_openat2+0x121/0x1c0 [ 2534.753764][T12569] __ia32_compat_sys_openat+0x131/0x160 [ 2534.759483][T12569] __do_fast_syscall_32+0xb6/0x2b0 [ 2534.764924][T12569] do_fast_syscall_32+0x34/0x80 [ 2534.770561][T12569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2534.777063][T12569] [ 2534.779595][T12569] The buggy address belongs to the object at ffff88807bb0f800 [ 2534.779595][T12569] which belongs to the cache kmalloc-1k of size 1024 [ 2534.795946][T12569] The buggy address is located 688 bytes inside of [ 2534.795946][T12569] freed 1024-byte region [ffff88807bb0f800, ffff88807bb0fc00) [ 2534.814100][T12569] [ 2534.816971][T12569] The buggy address belongs to the physical page: [ 2534.825040][T12569] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bb08 [ 2534.834680][T12569] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2534.843717][T12569] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2534.851522][T12569] page_type: f5(slab) [ 2534.856406][T12569] raw: 00fff00000000040 ffff88813fe26dc0 dead000000000100 dead000000000122 [ 2534.867340][T12569] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2534.877396][T12569] head: 00fff00000000040 ffff88813fe26dc0 dead000000000100 dead000000000122 [ 2534.886780][T12569] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2534.896067][T12569] head: 00fff00000000003 ffffea0001eec201 00000000ffffffff 00000000ffffffff [ 2534.905281][T12569] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2534.914929][T12569] page dumped because: kasan: bad access detected [ 2534.921901][T12569] page_owner tracks the page as allocated [ 2534.927716][T12569] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u8:1), ts 195390710820, free_ts 195384216811 [ 2534.949955][T12569] post_alloc_hook+0x240/0x2a0 [ 2534.955906][T12569] get_page_from_freelist+0x2365/0x2440 [ 2534.961547][T12569] __alloc_frozen_pages_noprof+0x181/0x370 [ 2534.967450][T12569] alloc_pages_mpol+0x232/0x4a0 [ 2534.972732][T12569] allocate_slab+0x96/0x3a0 [ 2534.977240][T12569] ___slab_alloc+0xe94/0x1920 [ 2534.981993][T12569] __slab_alloc+0x65/0x100 [ 2534.986419][T12569] __kmalloc_noprof+0x471/0x7f0 [ 2534.991454][T12569] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 2534.997604][T12569] ieee80211_inform_bss+0x10c/0x10a0 [ 2535.003201][T12569] cfg80211_inform_single_bss_data+0xd02/0x1ac0 [ 2535.009975][T12569] cfg80211_inform_bss_data+0x203/0x3b40 [ 2535.016307][T12569] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 2535.022450][T12569] ieee80211_bss_info_update+0x749/0x9e0 [ 2535.031699][T12569] ieee80211_ibss_rx_queued_mgmt+0xa4e/0x2af0 [ 2535.038763][T12569] ieee80211_iface_work+0x85f/0x12d0 [ 2535.044308][T12569] page last free pid 6321 tgid 6321 stack trace: [ 2535.051520][T12569] __free_frozen_pages+0xbc4/0xd30 [ 2535.057231][T12569] __put_partials+0x146/0x170 [ 2535.064102][T12569] put_cpu_partial+0x1f2/0x2e0 [ 2535.069165][T12569] __slab_free+0x2b9/0x390 [ 2535.073776][T12569] qlist_free_all+0x97/0x140 [ 2535.079337][T12569] kasan_quarantine_reduce+0x148/0x160 [ 2535.086208][T12569] __kasan_slab_alloc+0x22/0x80 [ 2535.091605][T12569] kmem_cache_alloc_noprof+0x367/0x6e0 [ 2535.097622][T12569] getname_flags+0xb8/0x540 [ 2535.102406][T12569] do_sys_openat2+0xbc/0x1c0 [ 2535.107349][T12569] __x64_sys_openat+0x138/0x170 [ 2535.112296][T12569] do_syscall_64+0xfa/0x3b0 [ 2535.116988][T12569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2535.123665][T12569] [ 2535.126007][T12569] Memory state around the buggy address: [ 2535.131627][T12569] ffff88807bb0f980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.141181][T12569] ffff88807bb0fa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.151130][T12569] >ffff88807bb0fa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.162143][T12569] ^ [ 2535.168304][T12569] ffff88807bb0fb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.178097][T12569] ffff88807bb0fb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2535.187585][T12569] ================================================================== [ 2535.198307][T12569] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2535.206552][T12569] CPU: 0 UID: 0 PID: 12569 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 2535.218395][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2535.229951][T12569] Workqueue: hci1 hci_conn_timeout [ 2535.235558][T12569] Call Trace: [ 2535.238963][T12569] [ 2535.242167][T12569] dump_stack_lvl+0x99/0x250 [ 2535.248124][T12569] ? __asan_memcpy+0x40/0x70 [ 2535.253561][T12569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2535.258993][T12569] ? __pfx__printk+0x10/0x10 [ 2535.264063][T12569] vpanic+0x237/0x6d0 [ 2535.268682][T12569] ? __pfx_vpanic+0x10/0x10 [ 2535.274665][T12569] ? preempt_schedule_common+0x83/0xd0 [ 2535.281620][T12569] ? preempt_schedule+0xae/0xc0 [ 2535.288816][T12569] panic+0xb9/0xc0 [ 2535.293068][T12569] ? __pfx_panic+0x10/0x10 [ 2535.299630][T12569] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2535.308376][T12569] ? l2cap_disconn_ind+0x79/0xc0 [ 2535.313533][T12569] check_panic_on_warn+0x89/0xb0 [ 2535.320218][T12569] ? l2cap_disconn_ind+0x79/0xc0 [ 2535.326344][T12569] end_report+0x78/0x160 [ 2535.331060][T12569] kasan_report+0x129/0x150 [ 2535.335691][T12569] ? l2cap_disconn_ind+0x79/0xc0 [ 2535.341002][T12569] l2cap_disconn_ind+0x79/0xc0 [ 2535.346716][T12569] hci_conn_timeout+0xdd/0x290 [ 2535.351793][T12569] ? process_scheduled_works+0x9ef/0x17b0 [ 2535.358994][T12569] process_scheduled_works+0xade/0x17b0 [ 2535.365074][T12569] ? __pfx_process_scheduled_works+0x10/0x10 [ 2535.371342][T12569] worker_thread+0x8a0/0xda0 [ 2535.376584][T12569] kthread+0x70e/0x8a0 [ 2535.380772][T12569] ? __pfx_worker_thread+0x10/0x10 [ 2535.386009][T12569] ? __pfx_kthread+0x10/0x10 [ 2535.390790][T12569] ? _raw_spin_unlock_irq+0x23/0x50 [ 2535.396290][T12569] ? lockdep_hardirqs_on+0x9c/0x150 [ 2535.401930][T12569] ? __pfx_kthread+0x10/0x10 [ 2535.406520][T12569] ret_from_fork+0x436/0x7d0 [ 2535.411234][T12569] ? __pfx_ret_from_fork+0x10/0x10 [ 2535.420042][T12569] ? __switch_to_asm+0x39/0x70 [ 2535.426738][T12569] ? __switch_to_asm+0x33/0x70 [ 2535.432136][T12569] ? __pfx_kthread+0x10/0x10 [ 2535.437173][T12569] ret_from_fork_asm+0x1a/0x30 [ 2535.443299][T12569] [ 2535.448240][T12569] Kernel Offset: disabled [ 2535.453930][T12569] Rebooting in 86400 seconds..