last executing test programs: 2m47.520736944s ago: executing program 0 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x42, 0x0, 0x1}, 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x7006000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmmsg$inet(r0, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfae21000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) 2m46.287978449s ago: executing program 0 (id=1547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(gcm_base(ecb(cast5),sha256-asm))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee", 0x1f) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003bc0)=""/111, 0x6f}, {&(0x7f0000000600)=""/4095, 0xfff}], 0x2}, 0x10000) lsm_get_self_attr(0x68, 0xffffffffffffffff, &(0x7f00000000c0), 0x1) sendmmsg$alg(r2, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001880)="2cbddd39dad9edc182feabcec21043acf4901b5df84f6709085697efcd0fcbfd23a6ee947703d4caecd6891f8ef08b05deb5c46024483e03e2f5b82ceb60e8c70a3daccd2cc4d80d591400b3b86e89d92e93a7f80fa9422943323f143a75765e287ff71a12b15aa80efc2142c9193a1ac1ffcb5f8e6646e54443915586a7978e", 0x80}], 0x1, 0x0, 0x0, 0x15}], 0x1, 0x4000000) unshare(0x2c020400) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="50cccff119910154a918e2ef377456d03d30fddbf445fe32a24dc25ff6bdafedde90d3679b1c5448e96dbd0116db28ac6d5c5cca31b143a143eb78ece88aa944a8b35416e7e90b", 0x47}, {&(0x7f0000001600)="115ac3e3c195004709212606974be3d5fe18dcf01f83a3f78603bbc654062e06922ff22c9c9aa30ddd2dbf53663345cbca80ef2ba60dd2b6a19c761bb93c41965e0dbce6df58250f9897e5568cf2fd297d9eea2a3452433884a6ce517ba83d8754d78a94e2e725f62370464d826823548a23e9767acff647615f1ed269177b625818a13359248f374314849d22cb3492dd95d7b49238dbcf9d456fe05400bf84574ee7afeee97961e1b0a8d8aea78c9b74d98cb76ec18e0872a77110a543499c87dee241e45296", 0xc7}], 0x2}, 0x24000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x9908}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xa}]}, 0x28}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getegid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0xa) 2m44.989767326s ago: executing program 0 (id=1550): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_settime(0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x281) 2m43.073443983s ago: executing program 0 (id=1553): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfe000, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x10001}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2m39.026431144s ago: executing program 1 (id=1558): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000012c0)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="003170b70ecf3e52a900000000000000440012800e00010069703601fc7370616e00000030000280140006002001000000000000000000000000000214000700fc02000000d09a40d10d624ca80000"], 0x64}}, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x8, 0x64ff, 0x40, 0x50000, 0xfffffffa, 0x5}}, 0x2081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="2004000000000000ff7f1b000000"], 0x28}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 2m38.896584012s ago: executing program 3 (id=1560): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m36.768766241s ago: executing program 3 (id=1563): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 2m36.732699189s ago: executing program 0 (id=1564): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCSETSW2(r3, 0x80047456, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = fsopen(0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) 2m35.156646646s ago: executing program 3 (id=1566): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 2m33.558214136s ago: executing program 3 (id=1568): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r7], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x8000) 2m32.868336879s ago: executing program 1 (id=1569): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 2m32.028083912s ago: executing program 0 (id=1570): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000abef32450d6986aeb4d7f1ab41b"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x1c, 0x44}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) 2m31.16459595s ago: executing program 1 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x4000000) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(gcm_base(ecb(cast5),sha256-asm))\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001880)="2cbddd39dad9edc182feabcec21043acf4901b5df84f6709085697efcd0fcbfd23a6ee947703d4caecd6891f8ef08b05deb5c46024483e03e2f5b82ceb60e8c70a3daccd2cc4d80d591400b3b86e89d92e93a7f80fa9422943323f143a75765e287ff71a12b15aa80efc2142c9193a1ac1ffcb5f8e6646e54443915586a7978e", 0x80}], 0x1, 0x0, 0x0, 0x15}], 0x1, 0x4000000) unshare(0x2c020400) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$kcm(0x10, 0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x3, 0xa) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x1, @local}, 0x6, {0x2, 0x4e23, @multicast1}, 'syz_tun\x00'}) 2m29.868147118s ago: executing program 3 (id=1573): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045", 0xbe}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766", 0x783}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}, {&(0x7f0000000a40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 2m29.592788461s ago: executing program 3 (id=1575): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000abef32450d6986aeb4d7f1ab41b"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x1c, 0x44}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) 2m29.538140972s ago: executing program 1 (id=1576): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0x763039aa, 0x114}, 0x10, 0x5}) io_setup(0x8, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x40000000, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) 2m25.25870442s ago: executing program 1 (id=1580): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x5) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 2m23.497940512s ago: executing program 1 (id=1584): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000012c0)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="003170b70ecf3e52a900000000000000440012800e00010069703601fc7370616e00000030000280140006002001000000000000000000000000000214000700fc02000000d09a40d10d624ca80000"], 0x64}}, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x8, 0x64ff, 0x40, 0x50000, 0xfffffffa, 0x5}}, 0x2081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="2004000000000000ff7f1b000000"], 0x28}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 2m8.314846466s ago: executing program 32 (id=1570): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000abef32450d6986aeb4d7f1ab41b"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x1c, 0x44}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) 2m8.038447399s ago: executing program 33 (id=1584): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000012c0)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="003170b70ecf3e52a900000000000000440012800e00010069703601fc7370616e00000030000280140006002001000000000000000000000000000214000700fc02000000d09a40d10d624ca80000"], 0x64}}, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x8, 0x64ff, 0x40, 0x50000, 0xfffffffa, 0x5}}, 0x2081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="2004000000000000ff7f1b000000"], 0x28}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 2m7.802780992s ago: executing program 34 (id=1575): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000abef32450d6986aeb4d7f1ab41b"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x1c, 0x44}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) 19.813341528s ago: executing program 4 (id=1710): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101"], 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r7], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x8000) 13.928047672s ago: executing program 4 (id=1714): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x7c, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3643, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000001240)=@ready={0x0, 0x0, 0x8, "de384b3d", {0x1, 0xca1e, 0xc000, 0x9, 0x5}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB]) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0x44, &(0x7f0000000300)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdc01, {{}, {}, {0x8, 0x11, 0xa3f}}, [""]}, 0x24}}, 0x40010) 12.104031237s ago: executing program 4 (id=1718): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101"], 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r7], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x8000) 7.977442283s ago: executing program 4 (id=1720): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x5, 0x10, 0x10, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x0, 0x65}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfe000, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x10001}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000081) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000000)={0x60, 0x5, 0x6, 0x0, 0x0, 0xfefffffd, 0x0}) 7.307733769s ago: executing program 2 (id=1721): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = dup3(r0, r0, 0x80000) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000aa3000/0x1000)=nil, 0x1000}}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x44) r6 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xc3b9, 0x80, 0xfffffffd, 0xf0, 0x0, r5}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 5.365959502s ago: executing program 4 (id=1722): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r6], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000012c0)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="003170b70ecf3e52a900000000000000440012800e00010069703601fc7370616e00000030000280140006002001000000000000000000000000000214000700fc02000000d09a40d10d624ca80000"], 0x64}}, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x8, 0x64ff, 0x40, 0x50000, 0xfffffffa, 0x5}}, 0x2081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="2004000000000000ff7f1b000000"], 0x28}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 3.317909062s ago: executing program 2 (id=1723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685e48943f26ed6e8d84b02464cc13dd7cc64d3a5a334a763cad337436ce16682040000000000000041579f9e3959de3e9f8005da735613f1fc390f61811b62d69ee340f9f79e873b463b442399d8f632fd469049daa8994b59ebbeefa4859b11599cc05188d9a9f46af90a8264052857cffe0fb0e528cc079e26ab9a2f2094fafe18763cbc7ae174a9bf4b0bebf592861d437b496968f81219de64c46557436b171144d804539a9d788799b583fba9a776cd6a6dc6c0bfe9f3d84acaf6fa8ac7b08f3511e996373651dafa74b208ea066271246b56984bee8da5be03d29f2fe1dc52714a6e36c4bdadb42b", 0x10f, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.125606315s ago: executing program 2 (id=1724): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea43", 0x7f}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030", 0x791}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.776395871s ago: executing program 2 (id=1725): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) 2.632544437s ago: executing program 4 (id=1726): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x7c, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3643, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000001240)=@ready={0x0, 0x0, 0x8, "de384b3d", {0x1, 0xca1e, 0xc000, 0x9, 0x5}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00']) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0x44, &(0x7f0000000300)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdc01, {{}, {}, {0x8, 0x11, 0xa3f}}, [""]}, 0x24}}, 0x40010) 1.159377569s ago: executing program 2 (id=1727): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b7", 0x5a}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9", 0xb3}, {&(0x7f0000001400)="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", 0xf9e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=1728): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x5, 0x10, 0x10, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x0, 0x65}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfe000, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x10001}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000081) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000000)={0x60, 0x5, 0x6, 0x0, 0x0, 0xfefffffd, 0x0}) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioprio_set$pid(0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}], 0x1, 0x0, 0x0, 0x3) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) kernel console output (not intermixed with test programs): 11.425162][ T992] usb 3-1: Using ep0 maxpacket: 8 [ 211.429694][ T992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.429727][ T992] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 211.429745][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.432873][ T992] usb 3-1: config 0 descriptor?? [ 211.454121][ T992] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 211.798883][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 212.902714][ T992] gspca_vc032x: reg_w err -71 [ 212.902816][ T992] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 212.946954][ T992] usb 3-1: USB disconnect, device number 12 [ 214.053479][ T7335] netlink: 52 bytes leftover after parsing attributes in process `syz.4.439'. [ 217.145483][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.260393][ T7409] hub 9-0:1.0: USB hub found [ 218.269041][ T7409] hub 9-0:1.0: 1 port detected [ 221.263530][ T5814] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 221.413512][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 221.416084][ T5814] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.416112][ T5814] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.416132][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.416163][ T5814] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 221.416183][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.475585][ T5814] usb 2-1: config 0 descriptor?? [ 221.687586][ T7461] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 222.783472][ T5814] usbhid 2-1:0.0: can't add hid device: -71 [ 222.783598][ T5814] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 222.791983][ T5814] usb 2-1: USB disconnect, device number 3 [ 224.977506][ T992] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.153537][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 225.155268][ T992] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 225.155302][ T992] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.155314][ T992] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.155325][ T992] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.155411][ T992] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.155449][ T992] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.155459][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.162335][ T992] usbtmc 2-1:16.0: bulk endpoints not found [ 227.116945][ T5979] usb 2-1: USB disconnect, device number 4 [ 228.962291][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 229.388756][ T995] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 229.553776][ T995] usb 1-1: Using ep0 maxpacket: 8 [ 229.556083][ T995] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 229.556150][ T995] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.556171][ T995] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.556194][ T995] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.556214][ T995] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.556252][ T995] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.556273][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.672962][ T995] usbtmc 1-1:16.0: bulk endpoints not found [ 231.501519][ T7617] geneve2: entered promiscuous mode [ 231.501546][ T7617] geneve2: entered allmulticast mode [ 232.299520][ T5904] usb 1-1: USB disconnect, device number 7 [ 233.504567][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 236.693536][ T5814] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 236.863486][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 236.865339][ T5814] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 236.865416][ T5814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.865428][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.865440][ T5814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 236.865450][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 236.865461][ T5814] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.865483][ T5814] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.865494][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.974932][ T5814] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 238.010990][ T7709] geneve2: entered promiscuous mode [ 238.011085][ T7709] geneve2: entered allmulticast mode [ 239.429843][ T992] usb 3-1: USB disconnect, device number 13 [ 244.863976][ T5814] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 245.093600][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 245.095395][ T5814] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 245.095430][ T5814] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.095441][ T5814] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.095452][ T5814] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 245.095462][ T5814] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 245.095473][ T5814] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.095495][ T5814] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 245.099064][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.215079][ T5814] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 246.521672][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 246.873354][ T7831] binder: 7830:7831 ioctl 4018620d 0 returned -22 [ 246.964033][ T995] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 247.113673][ T995] usb 2-1: Using ep0 maxpacket: 8 [ 247.118307][ T995] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 247.118363][ T995] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.118381][ T995] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.118402][ T995] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.118421][ T995] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.118457][ T995] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.118477][ T995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.205622][ T5904] usb 1-1: USB disconnect, device number 8 [ 247.470681][ T995] usb 2-1: usb_control_msg returned -32 [ 247.470710][ T995] usbtmc 2-1:16.0: can't read capabilities [ 248.529123][ T7849] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 250.877856][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'. [ 250.944557][ T5979] usb 2-1: USB disconnect, device number 5 [ 251.460172][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 252.467992][ T5814] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 252.679625][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 252.742608][ T5814] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 252.742778][ T5814] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.742791][ T5814] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.742803][ T5814] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.742814][ T5814] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.742838][ T5814] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.742849][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.093974][ T5814] usb 2-1: usb_control_msg returned -32 [ 253.094018][ T5814] usbtmc 2-1:16.0: can't read capabilities [ 253.968692][ T7885] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 255.164757][ T5979] usb 2-1: USB disconnect, device number 6 [ 255.789845][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.789913][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.190330][ T7949] geneve2: entered promiscuous mode [ 256.190363][ T7949] geneve2: entered allmulticast mode [ 257.253869][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.198878][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.523929][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.030718][ T7989] netlink: 288 bytes leftover after parsing attributes in process `syz.2.685'. [ 260.109889][ T7990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.543522][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 260.700370][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.701323][ T44] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 260.726271][ T44] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 260.726290][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.726301][ T44] usb 2-1: Product: syz [ 260.726362][ T44] usb 2-1: Manufacturer: syz [ 260.726381][ T44] usb 2-1: SerialNumber: syz [ 261.663566][ T44] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 261.816822][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.132801][ T44] usb 2-1: USB disconnect, device number 7 [ 262.543548][ T995] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 262.795973][ T995] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.795998][ T995] usb 5-1: config 0 has no interface number 0 [ 262.801494][ T995] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 262.801521][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.801537][ T995] usb 5-1: Product: syz [ 262.801550][ T995] usb 5-1: Manufacturer: syz [ 262.801562][ T995] usb 5-1: SerialNumber: syz [ 262.808168][ T995] usb 5-1: config 0 descriptor?? [ 263.405770][ T8036] netlink: 68 bytes leftover after parsing attributes in process `syz.1.705'. [ 263.461638][ T995] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 263.512816][ T995] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.542529][ T995] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 263.542625][ T995] usb 5-1: media controller created [ 263.747440][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.152540][ T995] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 264.347940][ T995] usb 5-1: USB disconnect, device number 7 [ 264.372412][ T5869] udevd[5869]: setting mode of /dev/bus/usb/005/007 to 020664 failed: No such file or directory [ 264.372600][ T5869] udevd[5869]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory [ 265.003999][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.004064][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.004114][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.004160][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.004205][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.004253][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.004301][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.004347][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.085101][ T8054] __nla_validate_parse: 46 callbacks suppressed [ 265.085125][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.085172][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.085214][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.085256][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.085308][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.085355][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.085398][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.086200][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.086298][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 265.086342][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 266.143715][ T995] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 266.395906][ T995] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.395931][ T995] usb 2-1: config 0 has no interface number 0 [ 266.403558][ T995] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 266.403585][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.403602][ T995] usb 2-1: Product: syz [ 266.403614][ T995] usb 2-1: Manufacturer: syz [ 266.403625][ T995] usb 2-1: SerialNumber: syz [ 266.456137][ T995] usb 2-1: config 0 descriptor?? [ 266.675720][ T995] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 266.698588][ T995] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.698939][ T995] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 266.698987][ T995] usb 2-1: media controller created [ 266.887856][ T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.143212][ T995] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 267.393801][ T995] usb 2-1: USB disconnect, device number 8 [ 269.393545][ T5903] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 269.543555][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 269.552166][ T5903] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.552185][ T5903] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.552196][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.552215][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 269.552226][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.607479][ T8112] syz.1.731 (8112) used greatest stack depth: 16728 bytes left [ 269.644759][ T5903] usb 5-1: config 0 descriptor?? [ 270.451066][ T5903] usbhid 5-1:0.0: can't add hid device: -71 [ 270.452330][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 270.480937][ T5903] usb 5-1: USB disconnect, device number 8 [ 272.637194][ T8154] hub 9-0:1.0: USB hub found [ 272.640268][ T8154] hub 9-0:1.0: 1 port detected [ 273.859021][ T8170] hub 9-0:1.0: USB hub found [ 273.863678][ T8170] hub 9-0:1.0: 1 port detected [ 276.014282][ T8206] __nla_validate_parse: 45 callbacks suppressed [ 276.014301][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'. [ 282.268968][ T8279] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.699087][ T37] audit: type=1326 audit(1759607586.468:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 282.699153][ T37] audit: type=1326 audit(1759607586.468:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 282.699188][ T37] audit: type=1326 audit(1759607586.468:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 282.699230][ T37] audit: type=1326 audit(1759607586.468:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 282.699266][ T37] audit: type=1326 audit(1759607586.468:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 282.699300][ T37] audit: type=1326 audit(1759607586.468:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 282.699334][ T37] audit: type=1326 audit(1759607586.468:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 282.699368][ T37] audit: type=1326 audit(1759607586.468:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 282.699401][ T37] audit: type=1326 audit(1759607586.468:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 282.699434][ T37] audit: type=1326 audit(1759607586.468:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 285.771809][ T8344] netlink: 68 bytes leftover after parsing attributes in process `syz.2.814'. [ 286.746391][ T5814] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 286.925607][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 286.927646][ T5814] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.927673][ T5814] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.927693][ T5814] usb 1-1: config 0 interface 0 has no altsetting 0 [ 286.927722][ T5814] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 286.927740][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.940298][ T5814] usb 1-1: config 0 descriptor?? [ 287.160453][ T5814] usbhid 1-1:0.0: can't add hid device: -71 [ 287.160531][ T5814] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 287.181387][ T5814] usb 1-1: USB disconnect, device number 9 [ 289.665550][ T8412] binder: 8411:8412 ioctl c0306201 0 returned -14 [ 289.963532][ T5903] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 290.113542][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 290.116910][ T5903] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.116928][ T5903] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.116939][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.116958][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 290.116968][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.132374][ T5903] usb 3-1: config 0 descriptor?? [ 290.435517][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 290.435594][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 290.465772][ T5903] usb 3-1: USB disconnect, device number 14 [ 292.885906][ T8453] geneve2: entered promiscuous mode [ 292.885954][ T8453] geneve2: entered allmulticast mode [ 295.873506][ T5903] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 296.059297][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 296.061553][ T5903] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.061581][ T5903] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.061601][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.061631][ T5903] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 296.061650][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.205145][ T5903] usb 1-1: config 0 descriptor?? [ 296.439611][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 296.439733][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 296.490782][ T5903] usb 1-1: USB disconnect, device number 10 [ 296.523869][ T8510] netlink: 68 bytes leftover after parsing attributes in process `syz.1.878'. [ 297.297302][ T8517] netlink: 288 bytes leftover after parsing attributes in process `syz.4.882'. [ 297.352067][ T8519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.527361][ T8520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.325149][ T8540] geneve2: entered promiscuous mode [ 298.325177][ T8540] geneve2: entered allmulticast mode [ 298.369975][ T8545] binder: BINDER_SET_CONTEXT_MGR already set [ 298.369988][ T8545] binder: 8544:8545 ioctl 4018620d 200000000040 returned -16 [ 299.751332][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 300.446901][ T5903] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 300.603625][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 300.624117][ T5903] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 300.624156][ T5903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.624168][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.624179][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.624190][ T5903] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.624295][ T5903] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.624316][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.941731][ T5903] usb 1-1: usb_control_msg returned -32 [ 300.941775][ T5903] usbtmc 1-1:16.0: can't read capabilities [ 301.180016][ T8590] netlink: 68 bytes leftover after parsing attributes in process `syz.4.905'. [ 301.735584][ T8598] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 301.964145][ T8595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.441708][ T8604] hub 9-0:1.0: USB hub found [ 302.681882][ T8604] hub 9-0:1.0: 1 port detected [ 303.938692][ T992] usb 1-1: USB disconnect, device number 11 [ 306.181295][ T8661] hub 9-0:1.0: USB hub found [ 306.183730][ T8661] hub 9-0:1.0: 1 port detected [ 307.334988][ T8672] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 309.253250][ T8717] binder: 8716:8717 ioctl 4018620d 0 returned -22 [ 309.662828][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 310.254898][ T8728] netlink: 68 bytes leftover after parsing attributes in process `syz.4.955'. [ 311.330962][ T8745] hub 9-0:1.0: USB hub found [ 311.332869][ T8745] hub 9-0:1.0: 1 port detected [ 311.908867][ T8757] binder: 8755:8757 ioctl c0306201 0 returned -14 [ 313.499614][ T8790] binder: 8789:8790 ioctl c0306201 0 returned -14 [ 314.624930][ T8808] netlink: 68 bytes leftover after parsing attributes in process `syz.4.984'. [ 314.886492][ T8805] hub 9-0:1.0: USB hub found [ 314.887099][ T8805] hub 9-0:1.0: 1 port detected [ 317.188305][ T37] kauditd_printk_skb: 408 callbacks suppressed [ 317.188323][ T37] audit: type=1326 audit(1759607621.028:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 317.189280][ T37] audit: type=1326 audit(1759607621.028:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 317.192760][ T37] audit: type=1326 audit(1759607621.028:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 317.194311][ T37] audit: type=1326 audit(1759607621.028:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 317.194953][ T37] audit: type=1326 audit(1759607621.038:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 317.195703][ T37] audit: type=1326 audit(1759607621.038:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 317.199304][ T37] audit: type=1326 audit(1759607621.038:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 317.202350][ T37] audit: type=1326 audit(1759607621.038:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 317.206441][ T37] audit: type=1326 audit(1759607621.048:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 317.209145][ T37] audit: type=1326 audit(1759607621.048:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 317.230822][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.230906][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.087563][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 320.267597][ T8895] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1016'. [ 321.985057][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 321.987604][ T8906] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 322.724394][ T37] kauditd_printk_skb: 425 callbacks suppressed [ 322.724410][ T37] audit: type=1326 audit(1759607626.568:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f248c58af79 code=0x7ffc0000 [ 322.725318][ T37] audit: type=1326 audit(1759607626.568:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248c5eeec9 code=0x7ffc0000 [ 322.725939][ T37] audit: type=1326 audit(1759607626.568:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248c5eeec9 code=0x7ffc0000 [ 322.817702][ T37] audit: type=1326 audit(1759607626.618:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f248c58af79 code=0x7ffc0000 [ 322.817758][ T37] audit: type=1326 audit(1759607626.618:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248c5eeec9 code=0x7ffc0000 [ 322.817797][ T37] audit: type=1326 audit(1759607626.618:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248c5eeec9 code=0x7ffc0000 [ 322.817833][ T37] audit: type=1326 audit(1759607626.618:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f248c58af79 code=0x7ffc0000 [ 322.817870][ T37] audit: type=1326 audit(1759607626.618:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248c5eeec9 code=0x7ffc0000 [ 322.817905][ T37] audit: type=1326 audit(1759607626.618:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248c5eeec9 code=0x7ffc0000 [ 322.817941][ T37] audit: type=1326 audit(1759607626.618:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8934 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248c5eeec9 code=0x7ffc0000 [ 323.492828][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 331.853587][ T5903] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 332.067371][ T5903] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.067397][ T5903] usb 5-1: config 0 has no interface number 0 [ 332.074145][ T5903] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 332.074171][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.074188][ T5903] usb 5-1: Product: syz [ 332.074210][ T5903] usb 5-1: Manufacturer: syz [ 332.074222][ T5903] usb 5-1: SerialNumber: syz [ 332.079631][ T5903] usb 5-1: config 0 descriptor?? [ 332.310172][ T5903] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 332.352461][ T5903] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 332.352851][ T5903] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 332.352901][ T5903] usb 5-1: media controller created [ 332.548499][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.773615][ T5903] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 332.978683][ T5903] usb 5-1: USB disconnect, device number 9 [ 333.005952][ T37] kauditd_printk_skb: 274 callbacks suppressed [ 333.005970][ T37] audit: type=1326 audit(1759607636.848:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 333.006641][ T37] audit: type=1326 audit(1759607636.848:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 333.007260][ T37] audit: type=1326 audit(1759607636.848:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 333.008553][ T37] audit: type=1326 audit(1759607636.848:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 333.011542][ T37] audit: type=1326 audit(1759607636.848:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 333.012986][ T37] audit: type=1326 audit(1759607636.848:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 333.167782][ T37] audit: type=1326 audit(1759607636.848:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 333.169045][ T37] audit: type=1326 audit(1759607637.008:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 333.173067][ T37] audit: type=1326 audit(1759607637.008:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 333.254659][ T37] audit: type=1326 audit(1759607637.008:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9101 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 335.535320][ T9134] hub 9-0:1.0: USB hub found [ 335.535791][ T9134] hub 9-0:1.0: 1 port detected [ 335.776054][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 338.963711][ T9197] hub 9-0:1.0: USB hub found [ 338.978857][ T9197] hub 9-0:1.0: 1 port detected [ 343.212846][ T9261] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1155'. [ 345.399987][ T37] kauditd_printk_skb: 144 callbacks suppressed [ 345.400005][ T37] audit: type=1326 audit(1759607649.238:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 345.400044][ T37] audit: type=1326 audit(1759607649.238:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 345.400067][ T37] audit: type=1326 audit(1759607649.238:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 345.402251][ T37] audit: type=1326 audit(1759607649.238:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 345.402688][ T37] audit: type=1326 audit(1759607649.238:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1d9af79 code=0x7ffc0000 [ 345.403235][ T37] audit: type=1326 audit(1759607649.238:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 345.403745][ T37] audit: type=1326 audit(1759607649.238:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 345.404316][ T37] audit: type=1326 audit(1759607649.248:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 345.404763][ T37] audit: type=1326 audit(1759607649.248:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 345.408648][ T37] audit: type=1326 audit(1759607649.248:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.2.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7ffc0000 [ 348.084142][ T9329] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1180'. [ 352.164600][ T9392] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1203'. [ 352.655161][ T5903] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 352.793950][ T9405] binder_alloc: 9404: binder_alloc_buf size 1024 failed, no address space [ 352.794102][ T9405] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 352.803582][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 352.819107][ T5903] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 352.819179][ T5903] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.819349][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.819434][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.819501][ T5903] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.819543][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 352.819562][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.232503][ T5903] usb 2-1: usb_control_msg returned -32 [ 353.232546][ T5903] usbtmc 2-1:16.0: can't read capabilities [ 354.682925][ T9426] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 355.395110][ T9432] hub 9-0:1.0: USB hub found [ 355.396042][ T9432] hub 9-0:1.0: 1 port detected [ 356.677828][ T5813] usb 2-1: USB disconnect, device number 9 [ 357.398047][ T37] kauditd_printk_skb: 154 callbacks suppressed [ 357.398065][ T37] audit: type=1326 audit(1759607661.238:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 357.440601][ T37] audit: type=1326 audit(1759607661.278:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 357.441304][ T37] audit: type=1326 audit(1759607661.278:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 357.442349][ T37] audit: type=1326 audit(1759607661.278:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 357.443499][ T5903] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 357.558955][ T37] audit: type=1326 audit(1759607661.278:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 357.559016][ T37] audit: type=1326 audit(1759607661.378:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 357.611256][ T37] audit: type=1326 audit(1759607661.448:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 357.612143][ T37] audit: type=1326 audit(1759607661.448:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 357.612871][ T37] audit: type=1326 audit(1759607661.448:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 357.613500][ T37] audit: type=1326 audit(1759607661.448:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9455 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 357.716131][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 357.723234][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.730035][ T5903] usb 2-1: config 4 interface 0 has no altsetting 0 [ 357.818629][ T5903] usb 2-1: string descriptor 0 read error: -22 [ 357.819181][ T5903] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 357.819205][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.882742][ T5903] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 357.908851][ T5903] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 357.909129][ T5903] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 357.909156][ T5903] usb 2-1: media controller created [ 358.077544][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.256234][ T5903] zl10353_read_register: readreg error (reg=127, ret==0) [ 358.660819][ T5903] usb 2-1: USB disconnect, device number 10 [ 358.751374][ T9479] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1236'. [ 362.598428][ T9517] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1254'. [ 362.915225][ T9558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.057633][ T9645] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1302'. [ 371.657547][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.673896][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.676901][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.678069][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.679230][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.599747][ T9519] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.668245][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 373.668300][ T37] audit: type=1326 audit(1759607677.508:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe55d1af79 code=0x7ffc0000 [ 373.668749][ T37] audit: type=1326 audit(1759607677.508:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe55d7eec9 code=0x7ffc0000 [ 373.669275][ T37] audit: type=1326 audit(1759607677.508:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe55d7eec9 code=0x7ffc0000 [ 373.670857][ T37] audit: type=1326 audit(1759607677.508:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe55d7eec9 code=0x7ffc0000 [ 373.673834][ T37] audit: type=1326 audit(1759607677.508:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe55d7eec9 code=0x7ffc0000 [ 373.673876][ T37] audit: type=1326 audit(1759607677.508:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe55d7eec9 code=0x7ffc0000 [ 373.673913][ T37] audit: type=1326 audit(1759607677.508:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe55d1af79 code=0x7ffc0000 [ 373.673954][ T37] audit: type=1326 audit(1759607677.508:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe55d1af79 code=0x7ffc0000 [ 373.673989][ T37] audit: type=1326 audit(1759607677.508:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe55d1af79 code=0x7ffc0000 [ 373.674025][ T37] audit: type=1326 audit(1759607677.508:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9708 comm="syz.0.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe55d7eec9 code=0x7ffc0000 [ 373.783928][ T5825] Bluetooth: hci1: command tx timeout [ 374.739419][ T9519] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.863603][ T5825] Bluetooth: hci1: command tx timeout [ 376.882508][ T9519] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.778806][ T9519] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.945170][ T5825] Bluetooth: hci1: command tx timeout [ 378.014274][ T9694] chnl_net:caif_netlink_parms(): no params data found [ 378.773807][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.773883][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.910650][ T37] kauditd_printk_skb: 182 callbacks suppressed [ 378.910670][ T37] audit: type=1326 audit(1759607682.748:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 378.911324][ T37] audit: type=1326 audit(1759607682.748:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 378.912022][ T37] audit: type=1326 audit(1759607682.748:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 378.913320][ T37] audit: type=1326 audit(1759607682.748:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 378.922775][ T37] audit: type=1326 audit(1759607682.758:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 379.125702][ T37] audit: type=1326 audit(1759607682.908:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 379.156840][ T37] audit: type=1326 audit(1759607682.998:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 379.160627][ T37] audit: type=1326 audit(1759607682.998:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 379.207885][ T37] audit: type=1326 audit(1759607682.998:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 379.237541][ T37] audit: type=1326 audit(1759607683.048:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9756 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 379.312889][ T9766] binder: BINDER_SET_CONTEXT_MGR already set [ 379.312899][ T9766] binder: 9765:9766 ioctl 4018620d 200000000040 returned -16 [ 379.313350][ T9766] binder: 9765:9766 ioctl c0306201 0 returned -14 [ 380.025085][ T5825] Bluetooth: hci1: command tx timeout [ 381.184007][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.184142][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.184382][ T9694] bridge_slave_0: entered allmulticast mode [ 381.191270][ T9694] bridge_slave_0: entered promiscuous mode [ 381.308165][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.308239][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.308413][ T9694] bridge_slave_1: entered allmulticast mode [ 381.362537][ T9694] bridge_slave_1: entered promiscuous mode [ 382.461855][ T9694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.620528][ T9694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.622388][ T9519] bridge_slave_1: left allmulticast mode [ 382.622599][ T9519] bridge_slave_1: left promiscuous mode [ 382.650273][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 382.694447][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.392293][ T9519] bridge_slave_0: left allmulticast mode [ 383.392314][ T9519] bridge_slave_0: left promiscuous mode [ 383.392497][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.525414][ T6009] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 383.683565][ T6009] usb 3-1: Using ep0 maxpacket: 8 [ 383.689306][ T6009] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 383.689361][ T6009] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.689467][ T6009] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.689488][ T6009] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.689579][ T6009] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.689631][ T6009] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 383.689650][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.058712][ T6009] usb 3-1: usb_control_msg returned -32 [ 384.058760][ T6009] usbtmc 3-1:16.0: can't read capabilities [ 384.894330][ T9806] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 386.771711][ T5813] usb 3-1: USB disconnect, device number 15 [ 386.868945][ T9519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.944520][ T9519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.970275][ T9519] bond0 (unregistering): Released all slaves [ 388.439553][ T9694] team0: Port device team_slave_0 added [ 388.482685][ T9694] team0: Port device team_slave_1 added [ 390.037255][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.037271][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.037293][ T9694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.091588][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.091604][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.091625][ T9694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.133610][ T5813] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 390.343668][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 390.345145][ T5813] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.345163][ T5813] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.345174][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 390.345193][ T5813] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 390.345204][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.350871][ T5813] usb 5-1: config 0 descriptor?? [ 390.744117][ T9519] hsr_slave_0: left promiscuous mode [ 390.787887][ T9519] hsr_slave_1: left promiscuous mode [ 390.789251][ T9519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.789639][ T9519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.917262][ T9519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.917282][ T9519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.958164][ T5813] usbhid 5-1:0.0: can't add hid device: -71 [ 390.958278][ T5813] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 391.129580][ T5813] usb 5-1: USB disconnect, device number 10 [ 391.387060][ T9519] veth1_macvtap: left promiscuous mode [ 391.387372][ T9519] veth0_macvtap: left promiscuous mode [ 391.387675][ T9519] veth1_vlan: left promiscuous mode [ 391.387997][ T9519] veth0_vlan: left promiscuous mode [ 392.275098][ T9902] fuse: Bad value for 'fd' [ 395.614139][ T9519] team0 (unregistering): Port device team_slave_1 removed [ 395.815164][ T9519] team0 (unregistering): Port device team_slave_0 removed [ 398.437816][ T9694] hsr_slave_0: entered promiscuous mode [ 398.449785][ T9694] hsr_slave_1: entered promiscuous mode [ 398.459898][ T9694] debugfs: 'hsr0' already exists in 'hsr' [ 398.459920][ T9694] Cannot create hsr debugfs directory [ 399.112492][ T37] kauditd_printk_skb: 86 callbacks suppressed [ 399.112506][ T37] audit: type=1326 audit(1759607702.948:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 399.113966][ T37] audit: type=1326 audit(1759607702.958:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 399.116244][ T37] audit: type=1326 audit(1759607702.958:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 399.116717][ T37] audit: type=1326 audit(1759607702.958:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 399.117316][ T37] audit: type=1326 audit(1759607702.958:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 399.117838][ T37] audit: type=1326 audit(1759607702.958:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 399.120024][ T37] audit: type=1326 audit(1759607702.958:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 399.121162][ T37] audit: type=1326 audit(1759607702.958:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 399.122176][ T37] audit: type=1326 audit(1759607702.958:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 399.128019][ T37] audit: type=1326 audit(1759607702.968:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9921 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 399.728738][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 400.053657][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 400.217213][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 400.222799][ T5903] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 400.222854][ T5903] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.222866][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.222877][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.222888][ T5903] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.222911][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 400.222922][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.474792][ T5903] usb 2-1: usb_control_msg returned -32 [ 400.474828][ T5903] usbtmc 2-1:16.0: can't read capabilities [ 400.653662][ T5904] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 400.803562][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 400.807834][ T5904] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.807854][ T5904] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.807864][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.807883][ T5904] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 400.807894][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.821251][ T5904] usb 5-1: config 0 descriptor?? [ 401.743869][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 402.061412][ T5904] usbhid 5-1:0.0: can't add hid device: -71 [ 402.061543][ T5904] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 402.095595][ T5904] usb 5-1: USB disconnect, device number 11 [ 402.175113][ T9949] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 402.884605][ T5813] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 403.053573][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 403.145028][ T5813] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 403.145088][ T5813] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.145108][ T5813] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.145129][ T5813] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.145150][ T5813] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.145229][ T5813] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.145248][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.552122][ T5813] usb 1-1: usb_control_msg returned -32 [ 403.552167][ T5813] usbtmc 1-1:16.0: can't read capabilities [ 408.414577][ T37] kauditd_printk_skb: 68 callbacks suppressed [ 408.414595][ T37] audit: type=1326 audit(1759607712.258:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 408.466903][ T37] audit: type=1326 audit(1759607712.308:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 408.467501][ T37] audit: type=1326 audit(1759607712.308:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 408.468027][ T37] audit: type=1326 audit(1759607712.308:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 408.468815][ T37] audit: type=1326 audit(1759607712.308:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 408.575166][ T37] audit: type=1326 audit(1759607712.308:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 408.575689][ T37] audit: type=1326 audit(1759607712.418:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eb2feec9 code=0x7ffc0000 [ 408.576525][ T37] audit: type=1326 audit(1759607712.418:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 408.577343][ T37] audit: type=1326 audit(1759607712.418:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 408.578409][ T37] audit: type=1326 audit(1759607712.418:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57eb29af79 code=0x7ffc0000 [ 408.754896][ T9694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 408.960136][ T9694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 409.152123][ T9694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 409.320460][ T9953] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 409.322227][ T5813] usb 2-1: USB disconnect, device number 11 [ 409.346626][ T9694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 409.474805][ T5814] usb 1-1: USB disconnect, device number 12 [ 409.971464][T10018] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1394'. [ 411.115324][T10031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.300784][ T9694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.409779][ T9694] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.457321][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.488677][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.538161][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.617520][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.838338][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.877479][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.352270][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.396263][ T9694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.847668][ T9694] veth0_vlan: entered promiscuous mode [ 421.861919][ T9694] veth1_vlan: entered promiscuous mode [ 422.311902][ T9694] veth0_macvtap: entered promiscuous mode [ 422.367858][ T9694] veth1_macvtap: entered promiscuous mode [ 422.562443][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.638233][ T9694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.754390][ T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.772444][ T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.774096][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.775214][ T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.073682][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.073701][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.336644][ T9519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.336659][ T9519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.070891][ T5904] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 425.253857][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 425.276795][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 425.279105][ T5904] usb 3-1: config 4 interface 0 has no altsetting 0 [ 425.288199][ T5904] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 425.288226][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.288243][ T5904] usb 3-1: Product: syz [ 425.288255][ T5904] usb 3-1: Manufacturer: syz [ 425.288268][ T5904] usb 3-1: SerialNumber: syz [ 425.767389][ T5904] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 425.801862][ T5904] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 425.802248][ T5904] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 425.802298][ T5904] usb 3-1: media controller created [ 426.004440][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.537591][ T5904] zl10353_read_register: readreg error (reg=127, ret==0) [ 426.746574][ T5904] usb 3-1: USB disconnect, device number 16 [ 428.569536][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1426'. [ 429.100850][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.122673][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.250765][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.269806][T10172] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1428'. [ 431.556887][T10177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.895983][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.638939][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.853338][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.835585][T10207] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 435.835845][T10207] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 436.482169][T10213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 436.482539][T10213] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 440.166430][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.166500][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.003606][ T5903] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 441.153512][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 441.156334][ T5903] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.156362][ T5903] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.156380][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 441.156411][ T5903] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 441.156436][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.230966][ T5903] usb 1-1: config 0 descriptor?? [ 444.097183][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 444.097302][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 444.118451][ T5903] usb 1-1: USB disconnect, device number 13 [ 445.815626][T10273] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 445.815799][T10273] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 452.933539][ T992] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 453.083499][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 453.086052][ T992] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.086080][ T992] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.086100][ T992] usb 5-1: config 0 interface 0 has no altsetting 0 [ 453.086130][ T992] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 453.086150][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.148638][ T992] usb 5-1: config 0 descriptor?? [ 453.351212][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'. [ 453.500435][ T992] usbhid 5-1:0.0: can't add hid device: -71 [ 453.500558][ T992] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 453.530204][ T992] usb 5-1: USB disconnect, device number 12 [ 453.853747][ T5979] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 454.986960][ T5979] usb 1-1: Using ep0 maxpacket: 8 [ 454.999605][ T5979] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 454.999658][ T5979] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.999670][ T5979] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.999682][ T5979] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.999693][ T5979] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.999717][ T5979] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.999727][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.240207][ T5979] usb 1-1: usb_control_msg returned -32 [ 455.240236][ T5979] usbtmc 1-1:16.0: can't read capabilities [ 455.544686][T10337] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 455.547312][T10337] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 457.352680][T10347] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 457.353178][T10347] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 459.850178][ T992] usb 1-1: USB disconnect, device number 14 [ 460.473616][ T5979] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 461.713519][ T5979] usb 1-1: Using ep0 maxpacket: 8 [ 461.716717][ T5979] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.716747][ T5979] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.716766][ T5979] usb 1-1: config 0 interface 0 has no altsetting 0 [ 461.716805][ T5979] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 461.716824][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.722298][ T5979] usb 1-1: config 0 descriptor?? [ 462.942919][T10401] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 462.944477][T10401] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 463.368716][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 463.735279][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 463.735298][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.735309][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 463.735328][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 463.735377][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.763356][ T9] usb 4-1: config 0 descriptor?? [ 463.970990][ T5979] usbhid 1-1:0.0: can't add hid device: -71 [ 463.971256][ T5979] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 463.990764][ T5979] usb 1-1: USB disconnect, device number 15 [ 464.345902][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 464.345978][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 464.363231][ T9] usb 4-1: USB disconnect, device number 5 [ 466.699150][T10419] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1498'. [ 466.829499][T10413] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1496'. [ 466.910904][T10420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.561218][T10427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.527426][T10433] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 468.527589][T10433] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 473.763233][T10475] binder: BINDER_SET_CONTEXT_MGR already set [ 473.763245][T10475] binder: 10474:10475 ioctl 4018620d 200000004a80 returned -16 [ 474.226518][T10480] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 474.228203][T10480] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 479.646591][T10513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 479.646743][T10513] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 487.422590][T10575] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 487.422773][T10575] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 488.363544][T10399] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 488.558091][T10399] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 488.558111][T10399] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.558122][T10399] usb 2-1: config 0 interface 0 has no altsetting 0 [ 488.558141][T10399] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 488.558151][T10399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.561517][T10399] usb 2-1: config 0 descriptor?? [ 488.880009][T10560] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1536'. [ 488.901272][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 488.967745][T10399] usbhid 2-1:0.0: can't add hid device: -71 [ 488.967824][T10399] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 488.989119][T10399] usb 2-1: USB disconnect, device number 12 [ 490.823746][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 491.262317][ T44] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 491.323524][ T6009] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 491.584143][ T6009] usb 4-1: Using ep0 maxpacket: 8 [ 491.587450][ T6009] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 491.587504][ T6009] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.587517][ T6009] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.587529][ T6009] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.587544][ T6009] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.587580][ T6009] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 491.587600][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.601703][ T44] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 491.601733][ T44] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.601752][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 491.601784][ T44] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 491.601804][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.630286][ T44] usb 5-1: config 0 descriptor?? [ 491.928299][ T6009] usb 4-1: usb_control_msg returned -32 [ 491.928347][ T6009] usbtmc 4-1:16.0: can't read capabilities [ 493.262080][T10591] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1543'. [ 493.298807][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 493.298956][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.493656][ T44] usb 5-1: USB disconnect, device number 13 [ 494.305868][T10613] binder: BINDER_SET_CONTEXT_MGR already set [ 494.305878][T10613] binder: 10612:10613 ioctl 4018620d 200000004a80 returned -16 [ 494.890446][T10617] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1549'. [ 497.501185][T10633] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 497.507386][T10633] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 498.610001][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 499.408385][ T6009] usb 4-1: USB disconnect, device number 6 [ 501.065857][T10662] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 501.066024][T10662] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 501.694990][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.695061][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.507102][T10666] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1558'. [ 503.494394][T10681] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 503.496055][T10681] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 505.622154][T10694] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1567'. [ 507.645390][T10705] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 507.646963][T10705] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 508.639538][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 509.193633][T10399] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 509.392713][T10399] usb 1-1: Using ep0 maxpacket: 8 [ 509.398132][T10399] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 509.398186][T10399] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.398205][T10399] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.398223][T10399] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.398241][T10399] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.398275][T10399] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.398291][T10399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.857118][T10399] usb 1-1: usb_control_msg returned -32 [ 509.857161][T10399] usbtmc 1-1:16.0: can't read capabilities [ 510.222431][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 510.583656][T10399] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 510.748088][T10399] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 510.748122][T10399] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.748142][T10399] usb 2-1: config 0 interface 0 has no altsetting 0 [ 510.748175][T10399] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 510.748196][T10399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.766894][T10711] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 510.770892][T10399] usb 2-1: config 0 descriptor?? [ 511.175363][T10737] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 511.175535][T10737] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 512.022296][T10729] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1576'. [ 512.063653][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 512.193651][T10399] usbhid 2-1:0.0: can't add hid device: -71 [ 512.206885][T10399] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 512.212377][T10399] usb 2-1: USB disconnect, device number 13 [ 512.385400][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 512.389283][ T44] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 512.389346][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.389366][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.389386][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.389407][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.389443][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 512.389463][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.769339][ T44] usb 4-1: usb_control_msg returned -32 [ 512.769392][ T44] usbtmc 4-1:16.0: can't read capabilities [ 514.491142][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 520.324268][T10772] overlayfs: failed to resolve './file1': -2 [ 531.154386][ T44] usb 4-1: USB disconnect, device number 7 [ 531.177693][ T6009] usb 1-1: USB disconnect, device number 16 [ 532.300953][T10787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 532.302575][T10787] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 533.959638][T10791] overlayfs: failed to resolve './file1': -2 [ 535.009869][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 535.021686][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 535.043336][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 535.058373][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 535.059791][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.174698][T10800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 535.193047][T10800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 535.201194][T10800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 535.202425][T10800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 535.203252][T10800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 535.779375][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 535.822578][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 535.832240][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 535.847366][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 535.851991][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 537.303733][ T5815] Bluetooth: hci6: command tx timeout [ 537.385508][ T5815] Bluetooth: hci5: command tx timeout [ 537.851900][T10818] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 537.853927][T10818] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 538.567609][ T9833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.613562][ T5815] Bluetooth: hci3: command tx timeout [ 539.086687][ T9833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.473577][ T5815] Bluetooth: hci6: command tx timeout [ 539.473616][ T5815] Bluetooth: hci5: command tx timeout [ 540.339400][ T9833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.674725][ T5825] Bluetooth: hci3: command tx timeout [ 540.913589][ T5903] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 541.009812][ T9833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.068367][ T5903] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 541.068398][ T5903] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.068419][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 541.068450][ T5903] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 541.068471][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.133305][ T5903] usb 5-1: config 0 descriptor?? [ 541.430590][T10834] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1603'. [ 541.430646][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 541.453281][ T5903] usbhid 5-1:0.0: can't add hid device: -71 [ 541.459921][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 541.543642][ T5825] Bluetooth: hci5: command tx timeout [ 541.543673][ T5825] Bluetooth: hci6: command tx timeout [ 541.550465][ T5903] usb 5-1: USB disconnect, device number 14 [ 543.471480][ T5825] Bluetooth: hci3: command tx timeout [ 543.639047][ T5825] Bluetooth: hci5: command tx timeout [ 543.644204][ T5825] Bluetooth: hci6: command tx timeout [ 544.104051][T10793] chnl_net:caif_netlink_parms(): no params data found [ 544.297644][T10798] chnl_net:caif_netlink_parms(): no params data found [ 544.676880][ T9833] bridge_slave_1: left allmulticast mode [ 544.676907][ T9833] bridge_slave_1: left promiscuous mode [ 544.677159][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.536749][ T9833] bridge_slave_0: left allmulticast mode [ 545.536776][ T9833] bridge_slave_0: left promiscuous mode [ 545.540374][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.545461][ T5825] Bluetooth: hci3: command tx timeout [ 545.873538][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 546.044171][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.044202][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.044221][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 546.044251][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 546.044270][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.119279][ T9] usb 5-1: config 0 descriptor?? [ 546.464482][T10863] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1609'. [ 546.464529][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 546.481090][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 546.481212][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 546.506451][ T9] usb 5-1: USB disconnect, device number 15 [ 547.779575][T10882] overlayfs: failed to resolve './file1': -2 [ 549.073670][ T5979] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 549.236000][ T5979] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.236032][ T5979] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.236051][ T5979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 549.236082][ T5979] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 549.236101][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.241691][ T5979] usb 5-1: config 0 descriptor?? [ 549.419582][ T9833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.497529][ T9833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.512465][T10885] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1615'. [ 549.512501][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 549.539314][ T5979] usbhid 5-1:0.0: can't add hid device: -71 [ 549.539411][ T5979] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 549.542834][ T5979] usb 5-1: USB disconnect, device number 16 [ 549.574028][ T9833] bond0 (unregistering): Released all slaves [ 549.855768][T10807] chnl_net:caif_netlink_parms(): no params data found [ 550.573582][ T5813] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 550.749316][ T5813] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 550.749347][ T5813] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.749368][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.749400][ T5813] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 550.749421][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.835965][ T5813] usb 5-1: config 0 descriptor?? [ 551.057217][T10793] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.057349][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.057578][T10793] bridge_slave_0: entered allmulticast mode [ 551.059977][T10793] bridge_slave_0: entered promiscuous mode [ 551.121496][T10898] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1617'. [ 551.121534][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 551.152998][ T5813] usbhid 5-1:0.0: can't add hid device: -71 [ 551.153103][ T5813] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 551.185879][ T5813] usb 5-1: USB disconnect, device number 17 [ 551.280759][T10793] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.280850][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.281003][T10793] bridge_slave_1: entered allmulticast mode [ 551.282691][T10793] bridge_slave_1: entered promiscuous mode [ 552.688853][T10915] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1620'. [ 552.688894][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 553.147814][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.147947][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.148184][T10798] bridge_slave_0: entered allmulticast mode [ 553.150766][T10798] bridge_slave_0: entered promiscuous mode [ 554.498384][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.498507][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.498747][T10798] bridge_slave_1: entered allmulticast mode [ 554.501686][T10798] bridge_slave_1: entered promiscuous mode [ 554.891380][T10926] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 555.812882][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.979768][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.183588][ T9833] hsr_slave_0: left promiscuous mode [ 556.205194][ T9833] hsr_slave_1: left promiscuous mode [ 556.205855][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.205871][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.249182][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.249209][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.453012][ T9833] veth1_macvtap: left promiscuous mode [ 557.465430][ T9833] veth0_macvtap: left promiscuous mode [ 557.465724][ T9833] veth1_vlan: left promiscuous mode [ 557.465900][ T9833] veth0_vlan: left promiscuous mode [ 561.805713][ T9833] team0 (unregistering): Port device team_slave_1 removed [ 562.084301][ T9833] team0 (unregistering): Port device team_slave_0 removed [ 563.002571][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.002642][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.635597][T10807] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.635763][T10807] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.635905][T10807] bridge_slave_0: entered allmulticast mode [ 564.637376][T10807] bridge_slave_0: entered promiscuous mode [ 564.952796][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.967970][T10807] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.968164][T10807] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.968389][T10807] bridge_slave_1: entered allmulticast mode [ 564.971132][T10807] bridge_slave_1: entered promiscuous mode [ 564.976346][T10793] team0: Port device team_slave_0 added [ 565.074846][T10953] overlayfs: overlapping lowerdir path [ 565.255290][T10954] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 565.875319][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.257125][T10793] team0: Port device team_slave_1 added [ 566.456795][T10958] overlayfs: failed to resolve './file1': -2 [ 569.049855][T10807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.135518][T10798] team0: Port device team_slave_0 added [ 569.138572][T10807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.139048][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.139055][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.139068][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.142064][T10798] team0: Port device team_slave_1 added [ 569.142900][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.142907][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.142921][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.410137][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.410149][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.410163][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.463553][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 570.545660][T10807] team0: Port device team_slave_0 added [ 570.566179][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.566190][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.566205][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.622771][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 570.622791][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.622803][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 570.622821][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 570.622833][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.627996][ T9] usb 3-1: config 0 descriptor?? [ 570.728757][T10807] team0: Port device team_slave_1 added [ 570.786772][T10793] hsr_slave_0: entered promiscuous mode [ 570.788436][T10793] hsr_slave_1: entered promiscuous mode [ 570.789477][T10793] debugfs: 'hsr0' already exists in 'hsr' [ 570.789501][T10793] Cannot create hsr debugfs directory [ 570.891759][T10978] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1635'. [ 570.891799][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 571.154005][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 571.154127][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 571.173738][ T9] usb 3-1: USB disconnect, device number 17 [ 571.667878][T10807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.667894][T10807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.667918][T10807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.969505][T10807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.969521][T10807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.969544][T10807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.094128][T10798] hsr_slave_0: entered promiscuous mode [ 573.095568][T10798] hsr_slave_1: entered promiscuous mode [ 573.096579][T10798] debugfs: 'hsr0' already exists in 'hsr' [ 573.096606][T10798] Cannot create hsr debugfs directory [ 574.733563][ T5903] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 574.883570][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 574.885911][ T5903] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 574.885945][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 574.885957][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 574.885969][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 574.885980][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.886002][ T5903] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 574.886013][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.168868][ T5903] usb 3-1: usb_control_msg returned -32 [ 575.168917][ T5903] usbtmc 3-1:16.0: can't read capabilities [ 576.450253][ T37] kauditd_printk_skb: 73 callbacks suppressed [ 576.450271][ T37] audit: type=1800 audit(1759607880.288:1956): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1643" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 576.450901][T11031] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 576.450940][T11031] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 576.450969][T11031] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 577.002899][T11034] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 577.248921][ T9833] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.586433][T10807] hsr_slave_0: entered promiscuous mode [ 577.676070][T10807] hsr_slave_1: entered promiscuous mode [ 577.678348][T10807] debugfs: 'hsr0' already exists in 'hsr' [ 577.678382][T10807] Cannot create hsr debugfs directory [ 577.991201][ T9833] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.425995][ T5903] usb 3-1: USB disconnect, device number 18 [ 579.406429][ T9833] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.127851][ T9833] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.580822][T11048] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1647'. [ 580.952023][T11054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.497283][T11055] hub 9-0:1.0: USB hub found [ 581.503991][T11055] hub 9-0:1.0: 1 port detected [ 581.901053][T10793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 582.054070][T10793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 582.257109][T10793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 582.423554][T10793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 584.034820][ T9833] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.468901][ T9833] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.568979][T10798] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 584.666265][T10798] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 585.203959][ T9833] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.246870][T10798] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 585.447370][T10798] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 586.107568][ T9833] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.604533][T10807] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 588.155642][T10807] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 588.322823][T10807] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.403396][T10807] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 588.728270][ T9833] bridge_slave_1: left allmulticast mode [ 588.728297][ T9833] bridge_slave_1: left promiscuous mode [ 588.728538][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.094393][ T9833] bridge_slave_0: left allmulticast mode [ 589.094413][ T9833] bridge_slave_0: left promiscuous mode [ 589.094618][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.921674][ T9833] bridge_slave_1: left allmulticast mode [ 589.921703][ T9833] bridge_slave_1: left promiscuous mode [ 589.921938][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.027907][ T9833] bridge_slave_0: left allmulticast mode [ 590.027933][ T9833] bridge_slave_0: left promiscuous mode [ 590.028182][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.242325][T11172] overlayfs: overlapping lowerdir path [ 592.380453][T11173] overlayfs: failed to resolve './file1': -2 [ 594.387520][ T37] audit: type=1326 audit(1759607898.058:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.387573][ T37] audit: type=1326 audit(1759607898.058:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.387613][ T37] audit: type=1326 audit(1759607898.058:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.387650][ T37] audit: type=1326 audit(1759607898.058:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.387689][ T37] audit: type=1326 audit(1759607898.058:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.387727][ T37] audit: type=1326 audit(1759607898.068:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.387767][ T37] audit: type=1326 audit(1759607898.068:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.387808][ T37] audit: type=1326 audit(1759607898.068:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.387847][ T37] audit: type=1326 audit(1759607898.068:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.387885][ T37] audit: type=1326 audit(1759607898.068:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1dfeec9 code=0x7fc00000 [ 594.705149][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 594.732556][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 594.742921][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 594.759830][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 594.760788][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 594.957384][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.966708][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.969446][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 594.985490][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 594.986234][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 595.280586][ T5815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 595.293761][ T5815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 595.297724][ T5815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 595.299277][ T5815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 595.300337][ T5815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 596.674075][ T9833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.755093][ T9833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.775713][ T9833] bond0 (unregistering): Released all slaves [ 597.003553][ T5825] Bluetooth: hci1: command tx timeout [ 597.144112][ T5825] Bluetooth: hci2: command tx timeout [ 597.383629][ T5825] Bluetooth: hci7: command tx timeout [ 598.386544][ T9833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.445254][ T9833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.468257][ T9833] bond0 (unregistering): Released all slaves [ 599.069168][ T5825] Bluetooth: hci1: command tx timeout [ 599.225771][ T5825] Bluetooth: hci2: command tx timeout [ 599.497710][ T5825] Bluetooth: hci7: command tx timeout [ 599.962840][T11201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 601.143597][ T5825] Bluetooth: hci1: command tx timeout [ 601.303909][ T5825] Bluetooth: hci2: command tx timeout [ 601.553580][ T5825] Bluetooth: hci7: command tx timeout [ 601.631538][T11237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'. [ 603.223602][ T5825] Bluetooth: hci1: command tx timeout [ 603.398024][ T5825] Bluetooth: hci2: command tx timeout [ 603.643674][ T5825] Bluetooth: hci7: command tx timeout [ 605.181954][T11182] chnl_net:caif_netlink_parms(): no params data found [ 605.943871][ T9833] hsr_slave_0: left promiscuous mode [ 605.983579][ T9833] hsr_slave_1: left promiscuous mode [ 605.987027][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.987055][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.045929][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.045953][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.253647][ T9833] hsr_slave_0: left promiscuous mode [ 606.303851][ T9833] hsr_slave_1: left promiscuous mode [ 606.304867][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.304890][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.365695][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.365714][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.593710][ T9833] veth1_macvtap: left promiscuous mode [ 606.593820][ T9833] veth0_macvtap: left promiscuous mode [ 606.603763][ T9833] veth1_vlan: left promiscuous mode [ 606.603991][ T9833] veth0_vlan: left promiscuous mode [ 606.842248][ T9833] veth1_macvtap: left promiscuous mode [ 606.842312][ T9833] veth0_macvtap: left promiscuous mode [ 606.842459][ T9833] veth1_vlan: left promiscuous mode [ 606.842556][ T9833] veth0_vlan: left promiscuous mode [ 610.854271][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.755420][ T9833] team0 (unregistering): Port device team_slave_1 removed [ 612.984831][ T9833] team0 (unregistering): Port device team_slave_0 removed [ 617.554789][ T9833] team0 (unregistering): Port device team_slave_1 removed [ 617.794172][ T9833] team0 (unregistering): Port device team_slave_0 removed [ 620.540300][T11282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 620.540473][T11282] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 620.599881][T11184] chnl_net:caif_netlink_parms(): no params data found [ 620.615085][T11188] chnl_net:caif_netlink_parms(): no params data found [ 620.716620][T11289] overlayfs: overlapping lowerdir path [ 620.775853][T11292] overlayfs: failed to resolve './file1': -2 [ 621.772647][T11307] netlink: 384 bytes leftover after parsing attributes in process `syz.4.1685'. [ 621.976751][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.976953][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.977183][T11182] bridge_slave_0: entered allmulticast mode [ 621.979832][T11182] bridge_slave_0: entered promiscuous mode [ 622.023598][ T992] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 622.031555][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.031680][T11182] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.031890][T11182] bridge_slave_1: entered allmulticast mode [ 622.067795][T11182] bridge_slave_1: entered promiscuous mode [ 622.173556][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 622.175384][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 622.175400][ T992] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 622.175412][ T992] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 622.177240][ T992] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 622.177255][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.177286][ T992] usb 5-1: Product: syz [ 622.177293][ T992] usb 5-1: Manufacturer: syz [ 622.177300][ T992] usb 5-1: SerialNumber: syz [ 622.181116][ T992] usb 5-1: config 0 descriptor?? [ 622.182924][T11307] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 622.465138][ T992] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 622.465414][ T992] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 622.465530][ T992] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 622.465570][ T992] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 622.465585][ T992] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 622.518782][ T992] usb 5-1: USB disconnect, device number 18 [ 622.538921][ T992] mcba_usb 5-1:0.0 can0: device disconnected [ 622.913845][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.914021][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.914214][T11184] bridge_slave_0: entered allmulticast mode [ 622.915686][T11184] bridge_slave_0: entered promiscuous mode [ 622.917507][T11188] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.917625][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.917823][T11188] bridge_slave_0: entered allmulticast mode [ 622.919542][T11188] bridge_slave_0: entered promiscuous mode [ 622.926593][T11182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.929625][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.929761][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.929940][T11184] bridge_slave_1: entered allmulticast mode [ 622.939859][T11184] bridge_slave_1: entered promiscuous mode [ 622.941648][T11188] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.941766][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.941938][T11188] bridge_slave_1: entered allmulticast mode [ 622.959289][T11188] bridge_slave_1: entered promiscuous mode [ 622.989422][T11182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.441651][T11323] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1687'. [ 623.558891][T11327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.937040][T11184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.944265][T11188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.959528][T11184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.961648][T11182] team0: Port device team_slave_0 added [ 624.192242][T11188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.194138][T11182] team0: Port device team_slave_1 added [ 624.480993][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.481064][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.594905][T11335] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 625.140456][T11332] hub 9-0:1.0: USB hub found [ 625.140860][T11332] hub 9-0:1.0: 1 port detected [ 625.908712][T11184] team0: Port device team_slave_0 added [ 625.911608][T11188] team0: Port device team_slave_0 added [ 625.917035][T11184] team0: Port device team_slave_1 added [ 626.025339][T11182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.025355][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.025380][T11182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.028059][T11188] team0: Port device team_slave_1 added [ 626.462604][T11182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.462628][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.462653][T11182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.912264][T11188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.912276][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.912291][T11188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.917062][T11184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.917079][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.917103][T11184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.919459][T11188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.919625][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.919659][T11188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.932480][T11184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.932495][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.932520][T11184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.293915][T11182] hsr_slave_0: entered promiscuous mode [ 629.294777][T11182] hsr_slave_1: entered promiscuous mode [ 629.295378][T11182] debugfs: 'hsr0' already exists in 'hsr' [ 629.295394][T11182] Cannot create hsr debugfs directory [ 629.327865][T11188] hsr_slave_0: entered promiscuous mode [ 629.329175][T11188] hsr_slave_1: entered promiscuous mode [ 629.329786][T11188] debugfs: 'hsr0' already exists in 'hsr' [ 629.329801][T11188] Cannot create hsr debugfs directory [ 629.360145][T11184] hsr_slave_0: entered promiscuous mode [ 629.361119][T11184] hsr_slave_1: entered promiscuous mode [ 629.361686][T11184] debugfs: 'hsr0' already exists in 'hsr' [ 629.361701][T11184] Cannot create hsr debugfs directory [ 630.744069][T11380] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1696'. [ 631.075361][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.081339][T11382] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 631.081455][T11382] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 631.214591][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.071414][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 632.473538][ T5813] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 632.643556][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 632.645854][ T5813] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 632.645892][ T5813] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.645904][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 632.645917][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 632.645931][ T5813] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.645955][ T5813] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 632.645966][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.093903][ T5813] usb 5-1: usb_control_msg returned -32 [ 633.093949][ T5813] usbtmc 5-1:16.0: can't read capabilities [ 634.184276][T11398] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 635.370484][ T5813] usb 5-1: USB disconnect, device number 19 [ 636.145944][T11429] hub 9-0:1.0: USB hub found [ 636.147985][T11429] hub 9-0:1.0: 1 port detected [ 637.514105][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.962187][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.149171][ T9833] bridge_slave_1: left allmulticast mode [ 640.149200][ T9833] bridge_slave_1: left promiscuous mode [ 640.149466][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.229782][ T9833] bridge_slave_0: left allmulticast mode [ 640.229802][ T9833] bridge_slave_0: left promiscuous mode [ 640.230007][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.307667][ T9833] bridge_slave_1: left allmulticast mode [ 640.307688][ T9833] bridge_slave_1: left promiscuous mode [ 640.307845][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.384482][ T9833] bridge_slave_0: left allmulticast mode [ 640.384502][ T9833] bridge_slave_0: left promiscuous mode [ 640.384653][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.476198][ T9833] bridge_slave_1: left allmulticast mode [ 640.476218][ T9833] bridge_slave_1: left promiscuous mode [ 640.476470][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.886005][ T9833] bridge_slave_0: left allmulticast mode [ 640.886034][ T9833] bridge_slave_0: left promiscuous mode [ 640.886450][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.727493][T11501] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 642.727661][T11501] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 643.754442][ T9833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.854534][ T9833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.916289][ T9833] bond0 (unregistering): Released all slaves [ 644.647468][ T9833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.714458][ T9833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.783273][ T9833] bond0 (unregistering): Released all slaves [ 645.234264][ T9833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.314211][ T9833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.379487][ T9833] bond0 (unregistering): Released all slaves [ 645.823804][ T5813] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 645.994236][ T5813] usb 5-1: too many configurations: 67, using maximum allowed: 8 [ 646.029343][ T5813] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 646.029371][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.029389][ T5813] usb 5-1: Product: syz [ 646.029401][ T5813] usb 5-1: Manufacturer: syz [ 646.029414][ T5813] usb 5-1: SerialNumber: syz [ 646.075733][ T5813] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 646.220130][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 646.373585][ T9833] hsr_slave_0: left promiscuous mode [ 646.432885][ T9833] hsr_slave_1: left promiscuous mode [ 646.433857][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.484936][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.733633][ T9833] hsr_slave_0: left promiscuous mode [ 646.763708][ T9833] hsr_slave_1: left promiscuous mode [ 646.764680][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.787696][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.863732][ T44] usb 5-1: USB disconnect, device number 20 [ 646.963784][ T9833] hsr_slave_0: left promiscuous mode [ 646.985791][ T9833] hsr_slave_1: left promiscuous mode [ 646.986774][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.024268][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.464371][ T9] usb 5-1: Service connection timeout for: 256 [ 647.464394][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 647.639119][ T9] ath9k_htc: Failed to initialize the device [ 647.645760][ T44] usb 5-1: ath9k_htc: USB layer deinitialized [ 647.934147][ T9833] team0 (unregistering): Port device team_slave_1 removed [ 648.087393][ T9833] team0 (unregistering): Port device team_slave_0 removed [ 649.424232][ T9833] team0 (unregistering): Port device team_slave_1 removed [ 649.565700][ T9833] team0 (unregistering): Port device team_slave_0 removed [ 650.727551][ T9833] team0 (unregistering): Port device team_slave_1 removed [ 650.894773][ T9833] team0 (unregistering): Port device team_slave_0 removed [ 653.474500][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 653.479110][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 653.480256][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 653.485329][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 653.486412][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 653.661018][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 653.709104][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 653.721539][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 653.733025][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 653.742441][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 654.934799][T11572] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1722'. [ 655.248183][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.251770][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.279393][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.287671][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.293392][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 655.645909][ T5825] Bluetooth: hci3: command tx timeout [ 655.783654][ T5825] Bluetooth: hci5: command tx timeout [ 657.133585][T10399] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 657.284365][T10399] usb 5-1: too many configurations: 67, using maximum allowed: 8 [ 657.323802][T10399] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 657.323830][T10399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.323848][T10399] usb 5-1: Product: syz [ 657.323861][T10399] usb 5-1: Manufacturer: syz [ 657.323873][T10399] usb 5-1: SerialNumber: syz [ 657.371184][T10399] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 657.383735][ T5825] Bluetooth: hci1: command tx timeout [ 657.427571][ T5979] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 657.703680][ T5815] Bluetooth: hci3: command tx timeout [ 657.863753][ T5825] Bluetooth: hci5: command tx timeout [ 659.202772][ T5979] usb 5-1: Service connection timeout for: 256 [ 659.202790][ T5979] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 659.252128][ T5813] usb 5-1: USB disconnect, device number 21 [ 659.291917][ T5979] ath9k_htc: Failed to initialize the device [ 659.292371][ T5813] usb 5-1: ath9k_htc: USB layer deinitialized [ 659.463985][ T5825] Bluetooth: hci1: command tx timeout [ 659.802840][ T5825] Bluetooth: hci3: command tx timeout [ 659.902063][T11596] ------------[ cut here ]------------ [ 659.902089][T11596] WARNING: CPU: 1 PID: 11596 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 659.902129][T11596] Modules linked in: [ 659.902164][T11596] CPU: 1 UID: 0 PID: 11596 Comm: syz.4.1726 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 659.902184][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 659.902197][T11596] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 659.902220][T11596] Code: c7 c7 40 98 a4 8e 48 c7 c6 3c c6 ba 8c 48 c7 c2 fa 9c b9 8c 4c 89 f9 e8 32 46 f0 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 f4 9f f7 08 0f 1f 40 00 90 90 [ 659.902236][T11596] RSP: 0018:ffffc900055ffd00 EFLAGS: 00010287 [ 659.902251][T11596] RAX: f6d69a1b07268900 RBX: ffff88814131d800 RCX: 0000000000000000 [ 659.902265][T11596] RDX: 0000000000000000 RSI: ffffffff8b1dc0c0 RDI: 00000000ffffffff [ 659.902278][T11596] RBP: ffffc900055ffe78 R08: 0000000000000000 R09: ffffffff8ab4d7a1 [ 659.902290][T11596] R10: dffffc0000000000 R11: fffffbfff1d6b527 R12: 1ffff11004c9279d [ 659.902303][T11596] R13: 0000000000000000 R14: ffff88814131d808 R15: ffff888036835a00 [ 659.902323][T11596] FS: 000055557c98c500(0000) GS:ffff88812712f000(0000) knlGS:0000000000000000 [ 659.902339][T11596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 659.902351][T11596] CR2: 00005562f7e5e000 CR3: 00000000685d0000 CR4: 00000000003526f0 [ 659.902366][T11596] Call Trace: [ 659.902374][T11596] [ 659.902390][T11596] do_exit+0x105/0x2300 [ 659.902416][T11596] ? rt_mutex_slowunlock+0x493/0x8a0 [ 659.902435][T11596] ? rt_spin_lock+0x1c1/0x3e0 [ 659.902460][T11596] ? __pfx_do_exit+0x10/0x10 [ 659.902478][T11596] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 659.902496][T11596] ? rt_spin_unlock+0x150/0x200 [ 659.902517][T11596] ? rt_spin_unlock+0x161/0x200 [ 659.902536][T11596] do_group_exit+0x21c/0x2d0 [ 659.902561][T11596] __x64_sys_exit_group+0x3f/0x40 [ 659.902578][T11596] x64_sys_call+0x21f7/0x2200 [ 659.902592][T11596] do_syscall_64+0xfa/0x3b0 [ 659.902609][T11596] ? lockdep_hardirqs_on+0x9c/0x150 [ 659.902624][T11596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.902639][T11596] ? clear_bhb_loop+0x60/0xb0 [ 659.902656][T11596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.902670][T11596] RIP: 0033:0x7f57eb2feec9 [ 659.902688][T11596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.902700][T11596] RSP: 002b:00007ffee660d918 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 659.902714][T11596] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57eb2feec9 [ 659.902723][T11596] RDX: 00007f57ea569000 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.902732][T11596] RBP: 00007ffee660d97c R08: 00000000000123ac R09: 00000000000927c0 [ 659.902742][T11596] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000012a [ 659.902751][T11596] R13: 00000000000927c0 R14: 000000000009ff7c R15: 00007ffee660d9d0 [ 659.902773][T11596] [ 659.902784][T11596] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 659.902794][T11596] CPU: 1 UID: 0 PID: 11596 Comm: syz.4.1726 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 659.902810][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 659.902818][T11596] Call Trace: [ 659.902824][T11596] [ 659.902830][T11596] dump_stack_lvl+0x99/0x250 [ 659.902850][T11596] ? __asan_memcpy+0x40/0x70 [ 659.902867][T11596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 659.902887][T11596] ? __pfx__printk+0x10/0x10 [ 659.902913][T11596] vpanic+0x237/0x6d0 [ 659.902926][T11596] ? __pfx_vpanic+0x10/0x10 [ 659.902947][T11596] panic+0xb9/0xc0 [ 659.902959][T11596] ? __pfx_panic+0x10/0x10 [ 659.902983][T11596] __warn+0x31b/0x4b0 [ 659.902994][T11596] ? kcov_task_exit+0x13c/0x150 [ 659.903015][T11596] ? kcov_task_exit+0x13c/0x150 [ 659.903033][T11596] report_bug+0x2be/0x4f0 [ 659.903050][T11596] ? kcov_task_exit+0x13c/0x150 [ 659.903068][T11596] ? kcov_task_exit+0x13c/0x150 [ 659.903086][T11596] ? kcov_task_exit+0x13e/0x150 [ 659.903104][T11596] handle_bug+0x84/0x160 [ 659.903123][T11596] exc_invalid_op+0x1a/0x50 [ 659.903140][T11596] asm_exc_invalid_op+0x1a/0x20 [ 659.903153][T11596] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 659.903171][T11596] Code: c7 c7 40 98 a4 8e 48 c7 c6 3c c6 ba 8c 48 c7 c2 fa 9c b9 8c 4c 89 f9 e8 32 46 f0 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 f4 9f f7 08 0f 1f 40 00 90 90 [ 659.903183][T11596] RSP: 0018:ffffc900055ffd00 EFLAGS: 00010287 [ 659.903194][T11596] RAX: f6d69a1b07268900 RBX: ffff88814131d800 RCX: 0000000000000000 [ 659.903204][T11596] RDX: 0000000000000000 RSI: ffffffff8b1dc0c0 RDI: 00000000ffffffff [ 659.903213][T11596] RBP: ffffc900055ffe78 R08: 0000000000000000 R09: ffffffff8ab4d7a1 [ 659.903223][T11596] R10: dffffc0000000000 R11: fffffbfff1d6b527 R12: 1ffff11004c9279d [ 659.903233][T11596] R13: 0000000000000000 R14: ffff88814131d808 R15: ffff888036835a00 [ 659.903248][T11596] ? rt_spin_lock+0x1c1/0x3e0 [ 659.903277][T11596] do_exit+0x105/0x2300 [ 659.903296][T11596] ? rt_mutex_slowunlock+0x493/0x8a0 [ 659.903309][T11596] ? rt_spin_lock+0x1c1/0x3e0 [ 659.903338][T11596] ? __pfx_do_exit+0x10/0x10 [ 659.903352][T11596] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 659.903367][T11596] ? rt_spin_unlock+0x150/0x200 [ 659.903384][T11596] ? rt_spin_unlock+0x161/0x200 [ 659.903398][T11596] do_group_exit+0x21c/0x2d0 [ 659.903421][T11596] __x64_sys_exit_group+0x3f/0x40 [ 659.903435][T11596] x64_sys_call+0x21f7/0x2200 [ 659.903449][T11596] do_syscall_64+0xfa/0x3b0 [ 659.903465][T11596] ? lockdep_hardirqs_on+0x9c/0x150 [ 659.903481][T11596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.903495][T11596] ? clear_bhb_loop+0x60/0xb0 [ 659.903512][T11596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.903525][T11596] RIP: 0033:0x7f57eb2feec9 [ 659.903537][T11596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.903549][T11596] RSP: 002b:00007ffee660d918 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 659.903563][T11596] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57eb2feec9 [ 659.903574][T11596] RDX: 00007f57ea569000 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.903583][T11596] RBP: 00007ffee660d97c R08: 00000000000123ac R09: 00000000000927c0 [ 659.903592][T11596] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000012a [ 659.903601][T11596] R13: 00000000000927c0 R14: 000000000009ff7c R15: 00007ffee660d9d0 [ 659.903625][T11596] [ 659.904847][T11596] Kernel Offset: disabled