last executing test programs: 4m43.650189258s ago: executing program 2 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012"], 0x50}}, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) mount(&(0x7f0000000000)=@md0, 0x0, &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f0000000200)='\x00\x80\x00\x00\x00\x00\x00\x06\x8a\x82,\x9eA\x93\x8a\xb4\xf1y\x8d\x80\x00\xbb\x14C\xee\xd2(]\x1fZG\xdb\xee\xd3\xcf\x98+\x1d\x01\x87Q\xe9\x03H;0\xa8\xe4\xfe\x1a\xbb\x17\xb9\xf0\xe2\t\x93\xde\xf4\xad\x8a\xa2\xf6{\x1d\x02\x85I\f\x06\xe0\x03\xcd\xca\xa2d\x0e\x1d\xc6[\xe8\xd2\xe1\x9cX\xed\xc1?n9%\x00#_\b\xaadP\xf8\xab\xa0#') fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r7, 0x2007ffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) creat(0x0, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m38.217597453s ago: executing program 2 (id=403): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r0 = eventfd2(0x6, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x1, 0xdddd1000, 0x0, r0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x3, 0x8080000, 0xb, 0x0, 0xb, 0x2, 0x0, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xb000, 0x60000, 0xd, 0x2, 0x0, 0x3, 0x2d, 0x7, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0x3, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x8, 0xf5, 0x5, 0x8, 0x3, 0x10}, {0xf000, 0xe000, 0xf, 0x7, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x9, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x0, 0x60000, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x25000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000003, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m37.448640589s ago: executing program 2 (id=405): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000780)={'macvtap0\x00', &(0x7f0000000680)=@ethtool_link_settings={0x1, 0x2, 0x0, 0x0, 0xf, 0xeb, 0x38, 0x2, 0x0, 0x4, [0xffffffff, 0xffffe022, 0xfffffe00, 0xfffff000, 0xe3a0, 0x4ac, 0x3c85aa8b, 0x6]}}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) fstat(0xffffffffffffffff, &(0x7f0000001180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x40000000}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 4m33.98056616s ago: executing program 2 (id=409): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0x37}, 0x275a}], 0x1, 0x60010020, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioprio_set$pid(0x3, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) sendto$inet6(r4, &(0x7f0000000280)="d9803f88931cbad8757b831ae6dfdc22f6378318d7f71ba0679033bf706d7712d2977b42227cdf388027d7dc15673515e33f576f9c2da4df07180f0c", 0x3c, 0x40000, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @empty, 0x2}, 0x1c) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x45, 0xc3, 0x3f, 0x8, 0x5ac, 0x247, 0xb023, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10, 0x2}}]}}]}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pipe(&(0x7f0000000080)) 4m27.39171919s ago: executing program 2 (id=420): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) eventfd(0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) 4m26.182870947s ago: executing program 2 (id=421): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) poll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x200}], 0x1, 0x1ad) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x2f126000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) writev(r4, &(0x7f0000000580), 0x0) 4m10.50865961s ago: executing program 32 (id=421): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) poll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x200}], 0x1, 0x1ad) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x2f126000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) writev(r4, &(0x7f0000000580), 0x0) 2m57.410739958s ago: executing program 4 (id=560): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2m48.51577949s ago: executing program 4 (id=568): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0x4, 0x9, 0xe, 0x3ee1, 0x401, 0x31}) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="67727e10ea340180c200000086dd60120008001832000000000000000000000000000000000100000000000000000000000000000001"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 2m47.752310288s ago: executing program 4 (id=571): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) accept4(r3, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 2m45.199253521s ago: executing program 4 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mount(&(0x7f0000000000)=@md0, 0x0, &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f0000000200)='\x00\x80\x00\x00\x00\x00\x00\x06\x8a\x82,\x9eA\x93\x8a\xb4\xf1y\x8d\x80\x00\xbb\x14C\xee\xd2(]\x1fZG\xdb\xee\xd3\xcf\x98+\x1d\x01\x87Q\xe9\x03H;0\xa8\xe4\xfe\x1a\xbb\x17\xb9\xf0\xe2\t\x93\xde\xf4\xad\x8a\xa2\xf6{\x1d\x02\x85I\f\x06\xe0\x03\xcd\xca\xa2d\x0e\x1d\xc6[\xe8\xd2\xe1\x9cX\xed\xc1?n9%\x00#_\b\xaadP\xf8\xab\xa0#') fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r6, 0x2007ffb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r8, r7, 0x0, 0x7ffff000) creat(0x0, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m42.612528601s ago: executing program 4 (id=576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xf}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m41.687411286s ago: executing program 4 (id=582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x300, 0x1100, 0x3, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x20014880) syz_extract_tcp_res(0x0, 0xa, 0x3) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xefffffff, 0x0, 0xd]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x111e54fa760e8374, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="abc85dc528e750ef2cbb9d4d186ae830"}, @NL80211_ATTR_SSID={0x12, 0x34, @random="5d122a415619241ce1872c39aec3"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59be1", 0x15}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, 0x1}) 2m25.323891549s ago: executing program 33 (id=582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x300, 0x1100, 0x3, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x20014880) syz_extract_tcp_res(0x0, 0xa, 0x3) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xefffffff, 0x0, 0xd]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x111e54fa760e8374, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="abc85dc528e750ef2cbb9d4d186ae830"}, @NL80211_ATTR_SSID={0x12, 0x34, @random="5d122a415619241ce1872c39aec3"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59be1", 0x15}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, 0x1}) 19.738722817s ago: executing program 5 (id=843): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x7, 'bond_slave_0\x00', {}, 0x9}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) close(r6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r6) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000800) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) 17.489685404s ago: executing program 5 (id=850): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f00000033c0), 0x0, 0x881) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x585452c9, 0x0, 0x1, [{0x4, 0x2}, {0x8, 0x9}, {0x7, 0x1000}, {0x6, 0x7}, {0x7, 0x3}, {0x2, 0x4}, {0x101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000000c0)={r6, r7, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000280)=[0x8, 0x5, 0x8, 0x2, 0xffffffffffffbcd1]}) 13.925546042s ago: executing program 6 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 13.663527862s ago: executing program 6 (id=855): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f00000033c0), 0x0, 0x881) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x585452c9, 0x0, 0x1, [{0x4, 0x2}, {0x8, 0x9}, {0x7, 0x1000}, {0x6, 0x7}, {0x7, 0x3}, {0x2, 0x4}, {0x101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000000c0)={r6, r7, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000280)=[0x8, 0x5, 0x8, 0x2, 0xffffffffffffbcd1]}) 12.964425762s ago: executing program 5 (id=859): socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d0000001400000011"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000008000000000500000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x6a0}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r6, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c", 0x7, 0xfffffffffffffffb) 10.577738612s ago: executing program 0 (id=861): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x4c883) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x8009, 0x80080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10003, 0x0) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x4e, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x2, {0x0, 0x0, 0x0, 0x469a73b7, 0x8, 0x0, 0x0, 0x7, 0x8, "b4c5d699bf4809eef35e21f6d6792d809080cc234868b918b37b69919d4ea18b7221e2c58d5c86f5e2cda68469c27760830ebafc7a6cdf30052361fceaa3b300", "b78e90ae8e5ed3564d015f652330e36ac01ae4ab562c4f5f2429a13c96fdb703579b4b187902e28ab9006f3eb244c0af8fda5fc393124d302bde0bd77415b437", "4072a3e34b33b63e7085d908662adc159ac259cb280a1b56d569f1c054536caa", [0x6, 0x5]}}) 10.271124111s ago: executing program 6 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.166044069s ago: executing program 6 (id=865): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa6900, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') 9.056686501s ago: executing program 3 (id=866): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500"/66, 0x42}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x165}, {&(0x7f0000000d00)="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", 0x16e}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e", 0x2f}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.002544505s ago: executing program 0 (id=867): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x4c883) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x8009, 0x80080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10003, 0x0) connect$unix(r2, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="67727e10ea340180c200000086dd60120008001832000000000000000000000000000000000100000000000000000000000000000001"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x2, {0x0, 0x0, 0x0, 0x469a73b7, 0x8, 0x0, 0x0, 0x7, 0x8, "b4c5d699bf4809eef35e21f6d6792d809080cc234868b918b37b69919d4ea18b7221e2c58d5c86f5e2cda68469c27760830ebafc7a6cdf30052361fceaa3b300", "b78e90ae8e5ed3564d015f652330e36ac01ae4ab562c4f5f2429a13c96fdb703579b4b187902e28ab9006f3eb244c0af8fda5fc393124d302bde0bd77415b437", "4072a3e34b33b63e7085d908662adc159ac259cb280a1b56d569f1c054536caa", [0x6, 0x5]}}) 8.899594905s ago: executing program 3 (id=868): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f00000033c0), 0x0, 0x881) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000fcdbdf2500000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r4 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x585452c9, 0x0, 0x1, [{0x4, 0x2}, {0x8, 0x9}, {0x7, 0x1000}, {0x6, 0x7}, {0x7, 0x3}, {0x2, 0x4}, {0x101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000000c0)={r6, r7, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000280)=[0x8, 0x5, 0x8, 0x2, 0xffffffffffffbcd1]}) 7.614025426s ago: executing program 0 (id=869): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 7.307351663s ago: executing program 5 (id=870): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 6.963557063s ago: executing program 1 (id=871): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 6.959386342s ago: executing program 6 (id=872): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x80000000, 0x0, 0x9, 0x8001, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x4004851) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x96a, "5d4f7f7d62a8", @short="30e722b9d80daf65"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r5 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="297766646e6f57e2148ba7b3f8af65604bec12d626516328b0d469937e925537614d5778", @ANYRESHEX=r5, @ANYBLOB=',k']) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f00000000c0)='\x01\x00\x00\x00\x04\x00\x00\x00*\xd8\x9c$\x19?s\xa8rV', 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400cd1200000001000200000044000480240001800b000100736f636b6574000014000280080001400000000308000300000000891c0001800a00010071756575650000000c00028008000440000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000002a"], 0x98}}, 0x0) 6.33532536s ago: executing program 5 (id=873): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.488865996s ago: executing program 1 (id=874): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000240)={0x0, 0x1, 0x6fc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') socket$alg(0x26, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x158, 0x194, 0x194, 0x158, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x4e24, 0x9], [0x4e21, 0x4e24], 0x5, 0x4, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r7}) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)) 5.29986559s ago: executing program 3 (id=875): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500"/66, 0x42}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30cb196a2c508", 0x165}, {&(0x7f0000000d00)="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", 0x163}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e", 0x35}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.211315527s ago: executing program 1 (id=876): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) 3.968964859s ago: executing program 3 (id=877): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.781022155s ago: executing program 1 (id=878): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500"/66, 0x42}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x165}, {&(0x7f0000000d00)="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", 0x16e}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e", 0x2f}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.383899924s ago: executing program 1 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838", 0x9e}], 0x1, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a", 0x11}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad", 0xe3}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.139169712s ago: executing program 1 (id=880): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000500)}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.948476289s ago: executing program 5 (id=881): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() r1 = syz_open_dev$sndctrl(&(0x7f0000001200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85512, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) sched_setscheduler(r0, 0x1, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0xc474, 0x1, @ofdm={0x0, 0x8, 0x8, 0x13, 0x2, 0x1, 0x3}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f00000000c0)='rdma') r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r5}}, 0x18) 2.933729309s ago: executing program 0 (id=882): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x4c883) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x8009, 0x80080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x2, {0x0, 0x0, 0x0, 0x469a73b7, 0x8, 0x0, 0x0, 0x7, 0x8, "b4c5d699bf4809eef35e21f6d6792d809080cc234868b918b37b69919d4ea18b7221e2c58d5c86f5e2cda68469c27760830ebafc7a6cdf30052361fceaa3b300", "b78e90ae8e5ed3564d015f652330e36ac01ae4ab562c4f5f2429a13c96fdb703579b4b187902e28ab9006f3eb244c0af8fda5fc393124d302bde0bd77415b437", "4072a3e34b33b63e7085d908662adc159ac259cb280a1b56d569f1c054536caa", [0x6, 0x5]}}) 2.438844708s ago: executing program 0 (id=883): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 1.461158737s ago: executing program 3 (id=884): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.428504152s ago: executing program 6 (id=885): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004043554d00000000000001090224000100003000090410907f03000000092100000001220a000905810300"], 0x0) unshare(0x24060400) syz_io_uring_setup(0x85e, &(0x7f0000002040)={0x0, 0x9b3e, 0x2, 0x3, 0xfffffffc}, 0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r5, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x48c0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000810) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x10, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000}, 0x1c) 379.506553ms ago: executing program 3 (id=886): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x80000000, 0x0, 0x9, 0x8001, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x4004851) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x96a, "5d4f7f7d62a8", @short="30e722b9d80daf65"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r5 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="297766646e6f57e2148ba7b3f8af65604bec12d626516328b0d469937e925537614d5778", @ANYRESHEX=r5, @ANYBLOB=',k']) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f00000000c0)='\x01\x00\x00\x00\x04\x00\x00\x00*\xd8\x9c$\x19?s\xa8rV', 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400cd1200000001000200000044000480240001800b000100736f636b6574000014000280080001400000000308000300000000891c0001800a00010071756575650000000c00028008000440000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000002a"], 0x98}}, 0x0) 0s ago: executing program 0 (id=887): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r0 = eventfd2(0x6, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x1, 0xdddd1000, 0x0, r0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, 0x0, 0x0}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x3, 0x8080000, 0xb, 0x0, 0xb, 0x2, 0x0, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xb000, 0x60000, 0xd, 0x2, 0x0, 0x3, 0x2d, 0x7, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0x3, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x8, 0xf5, 0x5, 0x8, 0x3, 0x10}, {0xf000, 0xe000, 0xf, 0x7, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x9, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x0, 0x60000, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x25000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000003, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): ) entered forwarding state [ 111.974671][ T6136] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 111.977083][ T5881] usb 4-1: USB disconnect, device number 4 [ 113.307181][ T57] usb 3-1: USB disconnect, device number 3 [ 113.683486][ T5881] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.860978][ T5881] usb 2-1: config 17 has an invalid interface number: 255 but max is 0 [ 113.861108][ T5881] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 113.861128][ T5881] usb 2-1: config 17 has no interface number 0 [ 113.861160][ T5881] usb 2-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 113.861199][ T5881] usb 2-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 113.861226][ T5881] usb 2-1: config 17 interface 255 has no altsetting 0 [ 113.861258][ T5881] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 113.861280][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.038401][ T5881] aiptek 2-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 114.353562][ T5857] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.505468][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 114.507941][ T5857] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.507955][ T5857] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.507982][ T5857] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 114.507996][ T5857] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 114.508018][ T5857] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.508029][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.528491][ T5857] hub 5-1:1.0: bad descriptor, ignoring hub [ 114.528530][ T5857] hub 5-1:1.0: probe with driver hub failed with error -5 [ 114.529348][ T5857] cdc_wdm 5-1:1.0: skipping garbage [ 114.536197][ T5857] cdc_wdm 5-1:1.0: skipping garbage [ 114.609579][ T5857] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 114.609609][ T5857] cdc_wdm 5-1:1.0: Unknown control protocol [ 116.357704][ T10] usb 2-1: USB disconnect, device number 3 [ 117.852512][ T6201] bridge0: port 3(gretap0) entered blocking state [ 117.852572][ T6201] bridge0: port 3(gretap0) entered disabled state [ 117.852716][ T6201] gretap0: entered allmulticast mode [ 117.854119][ T6201] gretap0: entered promiscuous mode [ 117.854516][ T6201] bridge0: port 3(gretap0) entered blocking state [ 117.854577][ T6201] bridge0: port 3(gretap0) entered forwarding state [ 119.213847][ T5945] usb 5-1: USB disconnect, device number 3 [ 119.423518][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.534885][ T5945] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.573445][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 119.577065][ T10] usb 3-1: config 0 has no interfaces? [ 119.577100][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 119.577124][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.648510][ T10] usb 3-1: config 0 descriptor?? [ 119.700628][ T5945] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.700662][ T5945] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 119.700687][ T5945] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.700711][ T5945] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 119.700723][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.760564][ T6214] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.886837][ T6210] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.062467][ T6210] ip6gretap0: entered promiscuous mode [ 120.080216][ T6210] vlan2: entered promiscuous mode [ 120.377525][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.576258][ T10] usb 5-1: config 17 has an invalid interface number: 255 but max is 0 [ 120.576286][ T10] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 120.576305][ T10] usb 5-1: config 17 has no interface number 0 [ 120.576338][ T10] usb 5-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 120.576376][ T10] usb 5-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 120.576403][ T10] usb 5-1: config 17 interface 255 has no altsetting 0 [ 120.576436][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 120.576458][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.667728][ T5945] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 120.843067][ T10] aiptek 5-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 120.843176][ T5945] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input7 [ 120.952028][ T5857] usb 3-1: USB disconnect, device number 4 [ 121.344113][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 121.345179][ T5945] usb 1-1: USB disconnect, device number 4 [ 123.552262][ T10] usb 5-1: USB disconnect, device number 4 [ 123.583436][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.757474][ T5879] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 123.757504][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.757523][ T5879] usb 1-1: Product: syz [ 123.757536][ T5879] usb 1-1: Manufacturer: syz [ 123.757549][ T5879] usb 1-1: SerialNumber: syz [ 123.843260][ T5879] r8152-cfgselector 1-1: Unknown version 0x0000 [ 123.843285][ T5879] r8152-cfgselector 1-1: config 0 descriptor?? [ 124.146983][ T5879] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 125.093543][ T5879] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.275727][ T5879] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 125.275755][ T5879] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 125.275773][ T5879] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 125.275791][ T5879] usb 1-1: config 220 has no interface number 2 [ 125.275868][ T5879] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 125.275980][ T5879] usb 1-1: config 220 interface 0 has no altsetting 0 [ 125.275998][ T5879] usb 1-1: config 220 interface 76 has no altsetting 0 [ 125.276014][ T5879] usb 1-1: config 220 interface 1 has no altsetting 0 [ 125.278897][ T5879] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 125.278925][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.278943][ T5879] usb 1-1: Product: syz [ 125.278955][ T5879] usb 1-1: Manufacturer: syz [ 125.278968][ T5879] usb 1-1: SerialNumber: syz [ 125.640600][ T5879] usb 1-1: selecting invalid altsetting 0 [ 125.685871][ T5879] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 125.685892][ T5879] uvcvideo 1-1:220.0: No valid video chain found. [ 125.724481][ T5879] usb 1-1: selecting invalid altsetting 0 [ 125.724518][ T5879] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 125.753552][ T5879] usb 1-1: USB disconnect, device number 6 [ 126.233340][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 126.997767][ T6272] syz.2.84 uses obsolete (PF_INET,SOCK_PACKET) [ 128.233590][ T57] IPVS: starting estimator thread 0... [ 128.574468][ T6302] IPVS: using max 2 ests per chain, 4800 per kthread [ 129.443459][ T5879] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.496951][ T5879] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.496983][ T5879] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 130.497009][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.497040][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 130.497062][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.576051][ T5879] usb 5-1: config 0 descriptor?? [ 130.610907][ T5879] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 130.903584][ T5945] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.053927][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 131.116389][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.116928][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.116970][ T5945] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.116990][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.234940][ T5945] usb 1-1: config 0 descriptor?? [ 131.307734][ T5945] hub 1-1:0.0: USB hub found [ 131.372550][ T5150] bcm5974 5-1:0.0: could not read from device [ 131.374681][ T57] usb 5-1: USB disconnect, device number 5 [ 131.394680][ T5949] bcm5974 5-1:0.0: could not read from device [ 131.551315][ T5945] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 132.028032][ T5945] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 132.453554][ T6328] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 133.089684][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.089780][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.097327][ T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.155670][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.156183][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.248001][ T5879] usb 1-1: USB disconnect, device number 7 [ 133.283434][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 133.290894][ T57] usb 5-1: config 0 has no interfaces? [ 133.290929][ T57] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 133.290951][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.334736][ T57] usb 5-1: config 0 descriptor?? [ 133.359648][ T6330] fido_id[6330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 133.395835][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'. [ 133.716002][ T6324] ip6gretap0: entered promiscuous mode [ 133.716135][ T6324] vlan2: entered promiscuous mode [ 133.873430][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.917392][ T57] usb 5-1: USB disconnect, device number 6 [ 134.038190][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 134.038217][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 134.038234][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 134.038251][ T10] usb 4-1: config 220 has no interface number 2 [ 134.038322][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 134.038348][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 134.038364][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 134.038381][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 134.181720][ T6344] bridge0: port 3(gretap0) entered blocking state [ 134.184170][ T6344] bridge0: port 3(gretap0) entered disabled state [ 134.224823][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 134.224851][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.224869][ T10] usb 4-1: Product: syz [ 134.224882][ T10] usb 4-1: Manufacturer: syz [ 134.224895][ T10] usb 4-1: SerialNumber: syz [ 134.245357][ T6344] gretap0: entered allmulticast mode [ 134.658618][ T6344] gretap0: entered promiscuous mode [ 134.690031][ T6344] bridge0: port 3(gretap0) entered blocking state [ 134.691850][ T6344] bridge0: port 3(gretap0) entered forwarding state [ 134.774853][ T10] usb 4-1: selecting invalid altsetting 0 [ 134.792804][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 134.792840][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 134.920250][ T10] usb 4-1: selecting invalid altsetting 0 [ 134.920274][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 135.642202][ T10] usb 4-1: USB disconnect, device number 5 [ 136.499701][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 138.636357][ T5945] IPVS: starting estimator thread 0... [ 138.734471][ T6398] IPVS: using max 16 ests per chain, 38400 per kthread [ 138.840816][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 139.113594][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.326542][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 139.573428][ T10] usb 1-1: config 0 has no interfaces? [ 139.579636][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.579664][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.579683][ T10] usb 1-1: Manufacturer: syz [ 139.583097][ T10] usb 1-1: config 0 descriptor?? [ 139.657934][ T6400] hub 9-0:1.0: USB hub found [ 139.663697][ T6400] hub 9-0:1.0: 1 port detected [ 141.221535][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 141.396902][ T6413] hub 9-0:1.0: USB hub found [ 141.402262][ T6413] hub 9-0:1.0: 1 port detected [ 144.191617][ T10] usb 1-1: USB disconnect, device number 8 [ 150.863783][ T5865] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.919316][ T6490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.139'. [ 150.994078][ T5865] usb 4-1: device descriptor read/64, error -71 [ 151.205049][ T6497] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 151.404790][ T5865] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.213429][ T5865] usb 4-1: device descriptor read/64, error -71 [ 152.360980][ T5865] usb usb4-port1: attempt power cycle [ 153.013456][ T5865] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 153.035444][ T5865] usb 4-1: device descriptor read/8, error -71 [ 154.123438][ T5865] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.306379][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 154.333460][ T5865] usb 4-1: device not accepting address 9, error -71 [ 154.333888][ T5865] usb usb4-port1: unable to enumerate USB device [ 154.360862][ T6526] sctp: [Deprecated]: syz.0.146 (pid 6526) Use of int in max_burst socket option. [ 154.360862][ T6526] Use struct sctp_assoc_value instead [ 154.950855][ T6535] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 156.255430][ T6547] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 159.397644][ T6584] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 161.062803][ T6597] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 163.113528][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 163.441982][ T6618] hub 9-0:1.0: USB hub found [ 163.443914][ T6618] hub 9-0:1.0: 1 port detected [ 164.353351][ T5881] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.413464][ T5880] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.503473][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 164.505413][ T5881] usb 3-1: config 0 has no interfaces? [ 164.505447][ T5881] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 164.505469][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.509075][ T5881] usb 3-1: config 0 descriptor?? [ 164.563454][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 164.566435][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.566458][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.566511][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 164.566537][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 164.566569][ T5880] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 164.566581][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.708136][ T5880] hub 5-1:1.0: bad descriptor, ignoring hub [ 164.708175][ T5880] hub 5-1:1.0: probe with driver hub failed with error -5 [ 164.709042][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 164.709056][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 164.755772][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.756267][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.807821][ T5880] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 164.807842][ T5880] cdc_wdm 5-1:1.0: Unknown control protocol [ 164.811093][ T5881] usb 3-1: USB disconnect, device number 5 [ 165.303436][ T5881] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.473429][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 165.476862][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 165.476892][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.484286][ T5881] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.484313][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.484332][ T5881] usb 3-1: Product: syz [ 165.484345][ T5881] usb 3-1: Manufacturer: à ’ [ 165.484358][ T5881] usb 3-1: SerialNumber: syz [ 165.489699][ T5881] usb 3-1: config 0 descriptor?? [ 165.515956][ T5881] em28xx 3-1:0.0: New device à ’ syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 165.515987][ T5881] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 165.823862][ T5881] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 165.824320][ T5881] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 165.835541][ T5881] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 165.835561][ T5881] em28xx 3-1:0.0: No AC97 audio processor [ 165.904853][ T5881] usb 3-1: USB disconnect, device number 6 [ 165.906052][ T5881] em28xx 3-1:0.0: Disconnecting em28xx [ 165.987437][ T5881] em28xx 3-1:0.0: Freeing device [ 166.000839][ T6652] fuse: Bad value for 'user_id' [ 166.000858][ T6652] fuse: Bad value for 'user_id' [ 167.693695][ T6667] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 169.253493][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.421734][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 169.421763][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.421846][ T10] usb 4-1: Product: syz [ 169.421860][ T10] usb 4-1: Manufacturer: syz [ 169.421872][ T10] usb 4-1: SerialNumber: syz [ 169.614909][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 169.614926][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 170.176344][ T10] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 171.090329][ T5881] usb 5-1: USB disconnect, device number 7 [ 173.323566][ T6702] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 174.333460][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 174.496649][ T57] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 174.496677][ T57] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 174.496697][ T57] usb 5-1: config 220 has no interface number 2 [ 174.496771][ T57] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 174.496799][ T57] usb 5-1: config 220 interface 0 has no altsetting 0 [ 174.496816][ T57] usb 5-1: config 220 interface 76 has no altsetting 0 [ 174.496834][ T57] usb 5-1: config 220 interface 1 has no altsetting 0 [ 174.499522][ T57] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 174.499551][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.499571][ T57] usb 5-1: Product: syz [ 174.499585][ T57] usb 5-1: Manufacturer: syz [ 174.499606][ T57] usb 5-1: SerialNumber: syz [ 174.812450][ T57] usb 5-1: selecting invalid altsetting 0 [ 174.823156][ T57] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 174.823187][ T57] uvcvideo 5-1:220.0: No valid video chain found. [ 174.884155][ T57] usb 5-1: selecting invalid altsetting 0 [ 174.884177][ T57] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 174.934585][ T57] usb 5-1: USB disconnect, device number 8 [ 175.243424][ T5857] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 175.444873][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 175.448742][ T5857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 175.449833][ T5857] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 175.451568][ T5857] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 175.451583][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.451593][ T5857] usb 4-1: Product: syz [ 175.451600][ T5857] usb 4-1: Manufacturer: syz [ 175.451607][ T5857] usb 4-1: SerialNumber: syz [ 175.761604][ T5857] usb 4-1: Invalid number of CPorts: 0 [ 175.761647][ T5857] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 176.140949][ T5880] usb 4-1: USB disconnect, device number 11 [ 177.291648][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 177.402257][ T6750] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 177.711691][ T6748] hub 9-0:1.0: USB hub found [ 177.719779][ T6748] hub 9-0:1.0: 1 port detected [ 179.591969][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 180.101433][ T6773] hub 9-0:1.0: USB hub found [ 180.115516][ T6773] hub 9-0:1.0: 1 port detected [ 180.716142][ T6788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.783487][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 180.842131][ T6790] bond_slave_0: entered promiscuous mode [ 180.842172][ T6790] bond_slave_1: entered promiscuous mode [ 180.842771][ T6790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.887305][ T6790] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 180.943408][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 180.952241][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.953251][ T5880] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 180.983465][ T5880] usb 2-1: can't read configurations, error -71 [ 181.428925][ T6797] 9pnet_fd: Insufficient options for proto=fd [ 184.446595][ T6835] netlink: 96 bytes leftover after parsing attributes in process `syz.1.220'. [ 185.053908][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 186.806172][ T6852] syzkaller1: entered promiscuous mode [ 186.806188][ T6852] syzkaller1: entered allmulticast mode [ 187.403738][ T6855] 9p: Could not find request transport: fd0x000000000000000a)wfdnoW⋧³ø¯e`KìÖ&Qc(°Ôi“~’U7aMWx0x0000000000000007 [ 188.262822][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 188.417786][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.417812][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.417822][ T10] usb 4-1: Product: syz [ 188.417829][ T10] usb 4-1: Manufacturer: syz [ 188.417836][ T10] usb 4-1: SerialNumber: syz [ 188.469663][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 188.820233][ T5880] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.272968][ T6860] random: crng reseeded on system resumption [ 190.442210][ T10] usb 4-1: USB disconnect, device number 12 [ 190.466016][ T5880] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 190.466593][ T5880] ath9k_htc: Failed to initialize the device [ 190.504992][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 194.557180][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.557248][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.747573][ T6908] syzkaller1: entered promiscuous mode [ 194.747597][ T6908] syzkaller1: entered allmulticast mode [ 195.103402][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 195.277628][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 195.277733][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 195.277811][ T10] usb 2-1: config 220 has no interface number 2 [ 195.277889][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.277915][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 195.277933][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 195.277951][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 195.280256][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 195.280282][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.280301][ T10] usb 2-1: Product: syz [ 195.280314][ T10] usb 2-1: Manufacturer: syz [ 195.280325][ T10] usb 2-1: SerialNumber: syz [ 195.521124][ T10] usb 2-1: selecting invalid altsetting 0 [ 195.523652][ T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 195.523680][ T10] uvcvideo 2-1:220.0: No valid video chain found. [ 195.727091][ T10] usb 2-1: selecting invalid altsetting 0 [ 195.727131][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 195.744200][ T10] usb 2-1: USB disconnect, device number 6 [ 196.513481][ T810] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 196.692245][ T810] usb 3-1: Using ep0 maxpacket: 16 [ 196.802829][ T810] usb 3-1: config 0 has no interfaces? [ 196.802867][ T810] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 196.802889][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.811060][ T810] usb 3-1: config 0 descriptor?? [ 197.515387][ T6934] 8021q: VLANs not supported on ip6gre0 [ 197.518469][ T10] usb 3-1: USB disconnect, device number 7 [ 198.040010][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 198.187905][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 198.187936][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.187956][ T10] usb 4-1: Product: syz [ 198.187970][ T10] usb 4-1: Manufacturer: syz [ 198.187990][ T10] usb 4-1: SerialNumber: syz [ 198.220835][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 198.220858][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 198.541567][ T10] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 198.748130][ T6961] syzkaller1: entered promiscuous mode [ 198.748152][ T6961] syzkaller1: entered allmulticast mode [ 199.225870][ T6970] Zero length message leads to an empty skb [ 201.414382][ T6979] Bluetooth: hci1: command 0x0406 tx timeout [ 201.416074][ T6979] Bluetooth: hci4: command 0x0406 tx timeout [ 201.416102][ T6979] Bluetooth: hci0: command 0x0406 tx timeout [ 201.416124][ T6979] Bluetooth: hci3: command 0x0406 tx timeout [ 201.416145][ T6979] Bluetooth: hci2: command 0x0406 tx timeout [ 203.603195][ T810] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 203.783465][ T810] usb 1-1: Using ep0 maxpacket: 16 [ 203.787855][ T810] usb 1-1: config 0 has no interfaces? [ 203.787878][ T810] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 203.787890][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.831162][ T810] usb 1-1: config 0 descriptor?? [ 204.040455][ T7008] 8021q: VLANs not supported on ip6gre0 [ 204.063755][ T5880] usb 1-1: USB disconnect, device number 9 [ 205.973445][ T7031] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 206.457010][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 206.557518][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 209.873415][ T5879] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 210.279834][ T5879] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 210.279853][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.315827][ T5879] usb 3-1: config 0 descriptor?? [ 210.335007][ T5879] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 214.786537][ T7099] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 215.391536][ T5150] bcm5974 3-1:0.0: could not read from device [ 215.843338][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 215.904249][ T5150] bcm5974 3-1:0.0: could not read from device [ 215.967706][ T5879] usb 3-1: USB disconnect, device number 8 [ 216.000936][ T5946] bcm5974 3-1:0.0: could not read from device [ 216.003456][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 216.043865][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.043881][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.043908][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 216.043921][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 216.043943][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 216.043954][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.048892][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 216.048912][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 216.049368][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 216.049376][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 216.051875][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 216.051886][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 216.296346][ T5946] udevd[5946]: Error opening device "/dev/input/event4": No such file or directory [ 216.296476][ T5946] udevd[5946]: Unable to EVIOCGABS device "/dev/input/event4" [ 216.296579][ T5946] udevd[5946]: Unable to EVIOCGABS device "/dev/input/event4" [ 216.296682][ T5946] udevd[5946]: Unable to EVIOCGABS device "/dev/input/event4" [ 216.296784][ T5946] udevd[5946]: Unable to EVIOCGABS device "/dev/input/event4" [ 217.559257][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.301'. [ 223.493685][ T7144] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 224.083760][ T5881] usb 5-1: USB disconnect, device number 9 [ 224.142094][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 227.122750][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.313'. [ 229.024841][ T7187] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 229.123415][ T5865] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 229.253389][ T5865] usb 2-1: device descriptor read/64, error -71 [ 229.496138][ T5865] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 229.623402][ T5865] usb 2-1: device descriptor read/64, error -71 [ 229.923977][ T5865] usb usb2-port1: attempt power cycle [ 230.015821][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 230.284639][ T5865] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 230.306875][ T5865] usb 2-1: device descriptor read/8, error -71 [ 230.533579][ T7201] hub 9-0:1.0: USB hub found [ 230.535857][ T7201] hub 9-0:1.0: 1 port detected [ 230.793569][ T5865] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.814266][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 230.816282][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 230.816311][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 230.818941][ T5865] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 230.818966][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.818984][ T5865] usb 2-1: Product: syz [ 230.818997][ T5865] usb 2-1: Manufacturer: syz [ 230.819010][ T5865] usb 2-1: SerialNumber: syz [ 230.825895][ T5865] usb 2-1: config 0 descriptor?? [ 230.838429][ T5865] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 230.838461][ T5865] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 231.284264][ T7199] syz.4.322 (7199) used greatest stack depth: 18768 bytes left [ 231.338672][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.339058][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.395053][ T5865] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 231.395687][ T5865] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 231.396013][ T5865] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 231.396022][ T5865] em28xx 2-1:0.0: No AC97 audio processor [ 231.411774][ T5865] usb 2-1: USB disconnect, device number 10 [ 231.462729][ T5865] em28xx 2-1:0.0: Disconnecting em28xx [ 231.495064][ T5865] em28xx 2-1:0.0: Freeing device [ 232.752234][ T7222] sctp: [Deprecated]: syz.0.326 (pid 7222) Use of int in max_burst socket option. [ 232.752234][ T7222] Use struct sctp_assoc_value instead [ 234.221557][ T7236] binder: 7235:7236 ioctl c0306201 200000000240 returned -11 [ 235.473446][ T5879] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 235.693524][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 235.801507][ T5879] usb 5-1: config 0 has no interfaces? [ 235.821107][ T5879] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.821125][ T5879] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.821135][ T5879] usb 5-1: Manufacturer: syz [ 235.855404][ T5879] usb 5-1: config 0 descriptor?? [ 238.109859][ T7259] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 238.303363][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 238.433409][ T10] usb 3-1: device descriptor read/64, error -71 [ 238.715124][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 238.822353][ T5881] usb 5-1: USB disconnect, device number 10 [ 238.903767][ T10] usb 3-1: device descriptor read/64, error -71 [ 239.026333][ T10] usb usb3-port1: attempt power cycle [ 239.693406][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 239.714201][ T10] usb 3-1: device descriptor read/8, error -71 [ 239.871473][ T7272] process 'syz.4.337' launched './file0' with NULL argv: empty string added [ 240.047215][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 240.064179][ T10] usb 3-1: device descriptor read/8, error -71 [ 240.073753][ T37] audit: type=1326 audit(1770661740.397:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf1faf79 code=0x7ffc0000 [ 240.075087][ T37] audit: type=1326 audit(1770661740.397:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf1faf79 code=0x7ffc0000 [ 240.075111][ T37] audit: type=1326 audit(1770661740.397:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf1faf79 code=0x7ffc0000 [ 240.075132][ T37] audit: type=1326 audit(1770661740.397:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fddcf1faf79 code=0x7ffc0000 [ 240.075152][ T37] audit: type=1326 audit(1770661740.397:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddcf1faf79 code=0x0 [ 240.153897][ T37] audit: type=1326 audit(1770661740.497:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf1faf79 code=0x7ffc0000 [ 240.153942][ T37] audit: type=1326 audit(1770661740.497:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf1faf79 code=0x7ffc0000 [ 240.173705][ T10] usb usb3-port1: unable to enumerate USB device [ 240.204135][ T37] audit: type=1326 audit(1770661740.547:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf1faf79 code=0x7ffc0000 [ 240.204294][ T37] audit: type=1326 audit(1770661740.547:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf1faf79 code=0x7ffc0000 [ 240.207268][ T37] audit: type=1326 audit(1770661740.547:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf1faf79 code=0x7ffc0000 [ 240.863442][ T5865] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 241.014716][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 241.028808][ T5865] usb 2-1: config 0 has no interfaces? [ 241.042002][ T5865] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 241.042020][ T5865] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 241.042030][ T5865] usb 2-1: Manufacturer: syz [ 241.087191][ T5865] usb 2-1: config 0 descriptor?? [ 241.843383][ T5879] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 241.943430][ T5881] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 241.997558][ T5879] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 241.997578][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.997588][ T5879] usb 4-1: Product: syz [ 241.997595][ T5879] usb 4-1: Manufacturer: syz [ 241.997602][ T5879] usb 4-1: SerialNumber: syz [ 242.008724][ T5879] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 242.050703][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.116806][ T5881] usb 1-1: config 0 has no interfaces? [ 242.116829][ T5881] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 242.116841][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.232829][ T5881] usb 1-1: config 0 descriptor?? [ 242.297215][ T7295] random: crng reseeded on system resumption [ 242.458831][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.344'. [ 242.462543][ T810] usb 1-1: USB disconnect, device number 10 [ 242.541706][ T7305] netlink: 96 bytes leftover after parsing attributes in process `syz.4.346'. [ 243.574980][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 243.575149][ T10] ath9k_htc: Failed to initialize the device [ 247.608890][ T5879] usb 4-1: USB disconnect, device number 14 [ 247.643816][ T5879] usb 4-1: ath9k_htc: USB layer deinitialized [ 247.661865][ T7309] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 249.491733][ T7324] 9pnet_fd: Insufficient options for proto=fd [ 249.678679][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 250.173392][ T5945] usb 2-1: USB disconnect, device number 11 [ 253.912106][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 254.993417][ T810] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 255.629904][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.629976][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.667603][ T810] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 255.667631][ T810] usb 5-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 255.667650][ T810] usb 5-1: config 220 has no interface number 2 [ 255.667719][ T810] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 255.667744][ T810] usb 5-1: config 220 interface 0 has no altsetting 0 [ 255.667762][ T810] usb 5-1: config 220 interface 76 has no altsetting 0 [ 255.667779][ T810] usb 5-1: config 220 interface 1 has no altsetting 0 [ 255.764977][ T810] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 255.765006][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.765025][ T810] usb 5-1: Product: syz [ 255.765036][ T810] usb 5-1: Manufacturer: syz [ 255.765043][ T810] usb 5-1: SerialNumber: syz [ 256.137458][ T810] usb 5-1: selecting invalid altsetting 0 [ 256.137939][ T810] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 256.137968][ T810] uvcvideo 5-1:220.0: No valid video chain found. [ 256.181311][ T810] usb 5-1: selecting invalid altsetting 0 [ 256.181348][ T810] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 256.201168][ T810] usb 5-1: USB disconnect, device number 11 [ 256.517919][ T7379] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 256.933681][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 258.782078][ T7412] sctp: [Deprecated]: syz.4.370 (pid 7412) Use of int in max_burst socket option. [ 258.782078][ T7412] Use struct sctp_assoc_value instead [ 260.833448][ T810] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 261.019272][ T810] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 261.019299][ T810] usb 4-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 261.019318][ T810] usb 4-1: config 220 has no interface number 2 [ 261.019385][ T810] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 261.019419][ T810] usb 4-1: config 220 interface 0 has no altsetting 0 [ 261.019436][ T810] usb 4-1: config 220 interface 76 has no altsetting 0 [ 261.019454][ T810] usb 4-1: config 220 interface 1 has no altsetting 0 [ 261.021652][ T810] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 261.021677][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.021695][ T810] usb 4-1: Product: syz [ 261.021709][ T810] usb 4-1: Manufacturer: syz [ 261.021722][ T810] usb 4-1: SerialNumber: syz [ 261.848806][ T810] usb 4-1: selecting invalid altsetting 0 [ 261.849231][ T810] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 261.849259][ T810] uvcvideo 4-1:220.0: No valid video chain found. [ 262.084324][ T810] usb 4-1: selecting invalid altsetting 0 [ 262.084404][ T810] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 267.380117][ T810] usb 4-1: USB disconnect, device number 15 [ 267.799819][ T7443] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 268.309619][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.381'. [ 269.293393][ T5811] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 269.493468][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 269.496601][ T5811] usb 1-1: config 0 has no interfaces? [ 269.498486][ T5811] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 269.498502][ T5811] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 269.498512][ T5811] usb 1-1: Manufacturer: syz [ 269.510499][ T5811] usb 1-1: config 0 descriptor?? [ 269.549481][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 269.621508][ T7470] fuse: Bad value for 'fd' [ 275.200891][ T7496] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 275.483370][ T5945] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 275.529876][ T5811] usb 1-1: USB disconnect, device number 11 [ 275.635420][ T5945] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 275.635447][ T5945] usb 5-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 275.635466][ T5945] usb 5-1: config 220 has no interface number 2 [ 275.635526][ T5945] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 275.635539][ T5945] usb 5-1: config 220 interface 0 has no altsetting 0 [ 275.635548][ T5945] usb 5-1: config 220 interface 76 has no altsetting 0 [ 275.635557][ T5945] usb 5-1: config 220 interface 1 has no altsetting 0 [ 275.638046][ T5945] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 275.638071][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.638089][ T5945] usb 5-1: Product: syz [ 275.638103][ T5945] usb 5-1: Manufacturer: syz [ 275.638116][ T5945] usb 5-1: SerialNumber: syz [ 276.410767][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 276.484547][ T5945] usb 5-1: selecting invalid altsetting 0 [ 276.485020][ T5945] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 276.485047][ T5945] uvcvideo 5-1:220.0: No valid video chain found. [ 276.590475][ T5945] usb 5-1: selecting invalid altsetting 0 [ 276.590498][ T5945] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 276.630180][ T5945] usb 5-1: USB disconnect, device number 12 [ 284.113630][ T5945] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 284.204079][ T810] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 284.204341][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 284.288574][ T5945] usb 5-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 284.288590][ T5945] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 284.288609][ T5945] usb 5-1: config 220 interface 0 has no altsetting 0 [ 284.293557][ T5945] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 284.293584][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.293597][ T5945] usb 5-1: Product: syz [ 284.293605][ T5945] usb 5-1: Manufacturer: syz [ 284.293611][ T5945] usb 5-1: SerialNumber: syz [ 284.333328][ T810] usb 4-1: device descriptor read/64, error -32 [ 284.547167][ T5945] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 284.547187][ T5945] uvcvideo 5-1:220.0: No valid video chain found. [ 284.552981][ T5945] usb 5-1: USB disconnect, device number 13 [ 284.573414][ T810] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 284.762814][ T810] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 284.762842][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.788187][ T810] usb 4-1: config 0 descriptor?? [ 284.793134][ T810] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 285.775919][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'. [ 287.744672][ T5150] bcm5974 4-1:0.0: could not read from device [ 287.745087][ T5945] usb 4-1: USB disconnect, device number 17 [ 287.840262][ T7181] bcm5974 4-1:0.0: could not read from device [ 287.975139][ T7181] udevd[7181]: Error opening device "/dev/input/event4": No such file or directory [ 287.975213][ T7181] udevd[7181]: Unable to EVIOCGABS device "/dev/input/event4" [ 287.975274][ T7181] udevd[7181]: Unable to EVIOCGABS device "/dev/input/event4" [ 287.975332][ T7181] udevd[7181]: Unable to EVIOCGABS device "/dev/input/event4" [ 287.975390][ T7181] udevd[7181]: Unable to EVIOCGABS device "/dev/input/event4" [ 288.693392][ T810] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 288.866543][ T810] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 288.866573][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.901284][ T810] usb 3-1: config 0 descriptor?? [ 289.172132][ T10] IPVS: starting estimator thread 0... [ 289.503447][ T7579] IPVS: using max 10 ests per chain, 24000 per kthread [ 289.575480][ T810] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 291.279505][ T57] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 291.355541][ T5857] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 291.536212][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 291.541007][ T5857] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 291.541056][ T5857] usb 1-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 291.541067][ T5857] usb 1-1: config 220 has no interface number 2 [ 291.541109][ T5857] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 291.541123][ T5857] usb 1-1: config 220 interface 0 has no altsetting 0 [ 291.541132][ T5857] usb 1-1: config 220 interface 76 has no altsetting 0 [ 291.541141][ T5857] usb 1-1: config 220 interface 1 has no altsetting 0 [ 291.549713][ T5857] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 291.549793][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.549812][ T5857] usb 1-1: Product: syz [ 291.549825][ T5857] usb 1-1: Manufacturer: syz [ 291.549838][ T5857] usb 1-1: SerialNumber: syz [ 291.661793][ T57] usb 2-1: config 0 has no interfaces? [ 291.682980][ T57] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 291.682998][ T57] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 291.683041][ T57] usb 2-1: Manufacturer: syz [ 291.768560][ T57] usb 2-1: config 0 descriptor?? [ 292.081973][ T5857] usb 1-1: selecting invalid altsetting 0 [ 292.082975][ T5857] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 292.083033][ T5857] uvcvideo 1-1:220.0: No valid video chain found. [ 292.196810][ T5857] usb 1-1: selecting invalid altsetting 0 [ 292.197018][ T5857] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 292.244346][ T5857] usb 1-1: USB disconnect, device number 12 [ 292.820745][ T7603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'. [ 294.244467][ T5150] bcm5974 3-1:0.0: could not read from device [ 294.383855][ T810] usb 3-1: USB disconnect, device number 13 [ 295.702292][ T7157] udevd[7157]: Error opening device "/dev/input/event4": No such file or directory [ 295.702367][ T7157] udevd[7157]: Unable to EVIOCGABS device "/dev/input/event4" [ 295.702425][ T7157] udevd[7157]: Unable to EVIOCGABS device "/dev/input/event4" [ 295.702483][ T7157] udevd[7157]: Unable to EVIOCGABS device "/dev/input/event4" [ 295.702541][ T7157] udevd[7157]: Unable to EVIOCGABS device "/dev/input/event4" [ 295.851472][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 296.283168][ T37] kauditd_printk_skb: 136 callbacks suppressed [ 296.283187][ T37] audit: type=1326 audit(1770661796.617:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110bb6af79 code=0x7ffc0000 [ 296.331679][ T37] audit: type=1326 audit(1770661796.617:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110bb6af79 code=0x7ffc0000 [ 296.331707][ T37] audit: type=1326 audit(1770661796.617:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110bb6af79 code=0x7ffc0000 [ 296.331729][ T37] audit: type=1326 audit(1770661796.617:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f110bb6af79 code=0x7ffc0000 [ 296.331749][ T37] audit: type=1326 audit(1770661796.617:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110bb6af79 code=0x7ffc0000 [ 296.331769][ T37] audit: type=1326 audit(1770661796.617:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f110bb6af79 code=0x0 [ 296.332577][ T37] audit: type=1326 audit(1770661796.667:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110bb6af79 code=0x7ffc0000 [ 296.332603][ T37] audit: type=1326 audit(1770661796.667:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110bb6af79 code=0x7ffc0000 [ 296.408180][ T37] audit: type=1326 audit(1770661796.747:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110bb6af79 code=0x7ffc0000 [ 296.408229][ T37] audit: type=1326 audit(1770661796.747:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7623 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f110bb6ace2 code=0x7ffc0000 [ 296.567502][ T7618] hub 9-0:1.0: USB hub found [ 296.589026][ T7618] hub 9-0:1.0: 1 port detected [ 296.785033][ T57] usb 2-1: USB disconnect, device number 12 [ 297.983345][ T5945] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 298.223395][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 298.279152][ T5945] usb 5-1: config 0 has no interfaces? [ 298.281141][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.281169][ T5945] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.281189][ T5945] usb 5-1: Manufacturer: syz [ 298.286623][ T5945] usb 5-1: config 0 descriptor?? [ 301.775134][ T5880] usb 5-1: USB disconnect, device number 14 [ 301.867303][ T7661] binder_alloc: 7660: binder_alloc_buf, no vma [ 301.867800][ T7661] binder: 7660:7661 ioctl c0306201 200000000240 returned -11 [ 302.085662][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.429'. [ 302.343478][ T5865] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 302.495050][ T5865] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 302.495068][ T5865] usb 1-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 302.495078][ T5865] usb 1-1: config 220 has no interface number 2 [ 302.495116][ T5865] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 302.495147][ T5865] usb 1-1: config 220 interface 0 has no altsetting 0 [ 302.495157][ T5865] usb 1-1: config 220 interface 76 has no altsetting 0 [ 302.495165][ T5865] usb 1-1: config 220 interface 1 has no altsetting 0 [ 302.496903][ T5865] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 302.496918][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.496928][ T5865] usb 1-1: Product: syz [ 302.496935][ T5865] usb 1-1: Manufacturer: syz [ 302.496942][ T5865] usb 1-1: SerialNumber: syz [ 303.859249][ T5865] usb 1-1: selecting invalid altsetting 0 [ 303.859718][ T5865] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 303.859748][ T5865] uvcvideo 1-1:220.0: No valid video chain found. [ 304.010447][ T5865] usb 1-1: selecting invalid altsetting 0 [ 304.010470][ T5865] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 304.036700][ T5865] usb 1-1: USB disconnect, device number 13 [ 304.333368][ T5945] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 305.405890][ T5945] usb 4-1: config 0 has no interfaces? [ 305.405927][ T5945] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 305.405949][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.429490][ T5945] usb 4-1: config 0 descriptor?? [ 310.700379][ T5945] usb 4-1: can't set config #0, error -110 [ 311.403402][ T7694] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 311.581505][ T10] usb 4-1: USB disconnect, device number 18 [ 312.072832][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.083674][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.084924][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.086367][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.087237][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.183485][ T61] Bluetooth: hci5: command tx timeout [ 315.000342][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.443'. [ 315.493092][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.794690][ T61] Bluetooth: hci5: command tx timeout [ 317.087151][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.087194][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.719579][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.583391][ T57] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 318.864164][ T61] Bluetooth: hci5: command tx timeout [ 318.943043][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 318.988278][ T57] usb 1-1: config 0 has no interfaces? [ 318.988313][ T57] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 318.988335][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.991277][ T57] usb 1-1: config 0 descriptor?? [ 319.741349][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.811419][ T7699] chnl_net:caif_netlink_parms(): no params data found [ 319.928807][ T7748] syz_tun: entered promiscuous mode [ 319.929106][ T7748] vlan2: entered promiscuous mode [ 320.216905][ T5811] usb 1-1: USB disconnect, device number 14 [ 320.442290][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.454'. [ 320.906629][ T61] Bluetooth: hci5: command tx timeout [ 321.020004][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.818543][ T5811] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 322.003343][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 322.035551][ T5811] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.035583][ T5811] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.035615][ T5811] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 322.035636][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.049031][ T5811] usb 4-1: config 0 descriptor?? [ 322.415956][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.416220][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.418752][ T7699] bridge_slave_0: entered allmulticast mode [ 322.428247][ T7699] bridge_slave_0: entered promiscuous mode [ 322.461332][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.461963][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.468312][ T7699] bridge_slave_1: entered allmulticast mode [ 322.656049][ T7699] bridge_slave_1: entered promiscuous mode [ 322.660268][ T5811] usbhid 4-1:0.0: can't add hid device: -71 [ 322.660347][ T5811] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 322.666511][ T5811] usb 4-1: USB disconnect, device number 19 [ 322.890934][ T7699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.901441][ T7699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.444902][ T7699] team0: Port device team_slave_0 added [ 323.511980][ T7699] team0: Port device team_slave_1 added [ 323.726032][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.726048][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.726072][ T7699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.746187][ T13] gretap0: left allmulticast mode [ 323.746213][ T13] gretap0: left promiscuous mode [ 323.750203][ T13] bridge0: port 3(gretap0) entered disabled state [ 323.891449][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 323.938533][ T13] bridge_slave_1: left allmulticast mode [ 323.938644][ T13] bridge_slave_1: left promiscuous mode [ 323.938885][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.976376][ T57] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 324.054806][ T13] bridge_slave_0: left allmulticast mode [ 324.054833][ T13] bridge_slave_0: left promiscuous mode [ 324.055068][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.169689][ T57] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 324.169723][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 324.169748][ T57] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 324.316372][ T57] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 324.316400][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.316420][ T57] usb 4-1: Product: syz [ 324.316434][ T57] usb 4-1: Manufacturer: syz [ 324.316447][ T57] usb 4-1: SerialNumber: syz [ 324.335676][ T57] usb 4-1: config 0 descriptor?? [ 324.336579][ T7804] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.648069][ T7804] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.460758][ T7840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 328.169488][ T10] usb 4-1: USB disconnect, device number 20 [ 329.597583][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.693824][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.737606][ T13] bond0 (unregistering): Released all slaves [ 329.896614][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.896626][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.896648][ T7699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.934564][ T7822] syz_tun: entered promiscuous mode [ 329.934695][ T7822] vlan2: entered promiscuous mode [ 330.451303][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 333.040908][ T7888] fuse: Invalid rootmode [ 333.561654][ T7699] hsr_slave_0: entered promiscuous mode [ 333.562836][ T7699] hsr_slave_1: entered promiscuous mode [ 333.595946][ T7699] debugfs: 'hsr0' already exists in 'hsr' [ 333.595973][ T7699] Cannot create hsr debugfs directory [ 334.085260][ T13] hsr_slave_0: left promiscuous mode [ 334.168243][ T13] hsr_slave_1: left promiscuous mode [ 334.169366][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.169523][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.266047][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.266073][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.505721][ T13] veth1_macvtap: left promiscuous mode [ 334.510142][ T13] veth0_macvtap: left promiscuous mode [ 334.510446][ T13] veth1_vlan: left promiscuous mode [ 334.510817][ T13] veth0_vlan: left promiscuous mode [ 335.077279][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.486'. [ 339.054574][ T13] team0 (unregistering): Port device team_slave_1 removed [ 339.293769][ T13] team0 (unregistering): Port device team_slave_0 removed [ 341.176577][ T7899] syz_tun: entered promiscuous mode [ 341.176652][ T7899] vlan2: entered promiscuous mode [ 341.845684][ T7939] trusted_key: syz.1.493 sent an empty control message without MSG_MORE. [ 342.118561][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 342.935222][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 343.085282][ T7699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 343.437335][ T7699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 343.554710][ T7699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 343.584903][ T7959] hub 9-0:1.0: USB hub found [ 343.586430][ T7959] hub 9-0:1.0: 1 port detected [ 343.927233][ T7699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.029349][ T13] IPVS: stop unused estimator thread 0... [ 344.539698][ T7699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.764031][ T7699] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.788620][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.791448][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.870981][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.871057][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.111407][ T7699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.111423][ T7699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.082699][ T7699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.636938][ T7699] veth0_vlan: entered promiscuous mode [ 348.666617][ T7699] veth1_vlan: entered promiscuous mode [ 349.026660][ T7699] veth0_macvtap: entered promiscuous mode [ 349.029547][ T7699] veth1_macvtap: entered promiscuous mode [ 349.112482][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.200723][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.299771][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.306678][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.320901][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.321665][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.268014][ T8064] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 351.926151][ T8073] bridge0: port 3(gretap0) entered blocking state [ 351.926220][ T8073] bridge0: port 3(gretap0) entered disabled state [ 351.926371][ T8073] gretap0: entered allmulticast mode [ 351.927674][ T8073] gretap0: entered promiscuous mode [ 351.928042][ T8073] bridge0: port 3(gretap0) entered blocking state [ 351.928106][ T8073] bridge0: port 3(gretap0) entered forwarding state [ 351.934288][ T5880] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 352.083390][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 352.091298][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.091323][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 352.091373][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 352.091399][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 352.091438][ T5880] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 352.091459][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.187974][ T5880] hub 4-1:1.0: bad descriptor, ignoring hub [ 352.188012][ T5880] hub 4-1:1.0: probe with driver hub failed with error -5 [ 352.188895][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 352.188908][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 352.226697][ T5880] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 352.226718][ T5880] cdc_wdm 4-1:1.0: Unknown control protocol [ 352.513876][ T2369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.513895][ T2369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.788288][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.788304][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.345901][ T810] IPVS: starting estimator thread 0... [ 354.433448][ T8094] IPVS: using max 9 ests per chain, 21600 per kthread [ 356.206533][ T810] usb 4-1: USB disconnect, device number 21 [ 357.361031][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 359.078062][ T8140] ip6gretap0: entered promiscuous mode [ 359.078143][ T8140] vlan2: entered promiscuous mode [ 360.260176][ T8160] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 360.771127][ T5865] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 361.467835][ T5865] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 361.467867][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.467886][ T5865] usb 6-1: Product: syz [ 361.467900][ T5865] usb 6-1: Manufacturer: syz [ 361.467915][ T5865] usb 6-1: SerialNumber: syz [ 361.506584][ T5865] r8152-cfgselector 6-1: Unknown version 0x0000 [ 361.506609][ T5865] r8152-cfgselector 6-1: config 0 descriptor?? [ 361.805370][ T5865] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 368.785489][ T8226] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 370.055290][ T5811] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 370.439219][ T5811] usb 5-1: config 0 has no interfaces? [ 370.449368][ T5811] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 370.451428][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.457441][ T5811] usb 5-1: config 0 descriptor?? [ 371.353128][ T5880] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 378.512104][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.512187][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.512618][ T5881] usb 5-1: USB disconnect, device number 15 [ 380.890524][ T5880] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 380.890562][ T5880] usb 4-1: can't read configurations, error -71 [ 381.525313][ T8293] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 383.010477][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 383.286736][ T8310] hub 9-0:1.0: USB hub found [ 383.293449][ T8310] hub 9-0:1.0: 1 port detected [ 383.749236][ T8317] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 391.557757][ T8354] binder: BINDER_SET_CONTEXT_MGR already set [ 391.557767][ T8354] binder: 8352:8354 ioctl 4018620d 200000000040 returned -16 [ 391.558062][ T8354] binder: 8352:8354 ioctl c0306201 200000000240 returned -11 [ 394.853345][ T5945] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 395.005036][ T5945] usb 5-1: config 0 has no interfaces? [ 395.005060][ T5945] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 395.005072][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.009028][ T5945] usb 5-1: config 0 descriptor?? [ 395.212603][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 395.217862][ T5945] usb 5-1: USB disconnect, device number 16 [ 395.549479][ T8387] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 399.313374][ T5881] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 399.385648][ T8409] binder: BINDER_SET_CONTEXT_MGR already set [ 399.385663][ T8409] binder: 8408:8409 ioctl 4018620d 200000000040 returned -16 [ 399.386114][ T8409] binder: 8408:8409 ioctl c0306201 200000000240 returned -11 [ 399.466070][ T5881] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 399.466099][ T5881] usb 1-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 399.466118][ T5881] usb 1-1: config 220 has no interface number 2 [ 399.466190][ T5881] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 399.466217][ T5881] usb 1-1: config 220 interface 0 has no altsetting 0 [ 399.466235][ T5881] usb 1-1: config 220 interface 76 has no altsetting 0 [ 399.466253][ T5881] usb 1-1: config 220 interface 1 has no altsetting 0 [ 399.470097][ T5881] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 399.470124][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.470143][ T5881] usb 1-1: Product: syz [ 399.470156][ T5881] usb 1-1: Manufacturer: syz [ 399.470170][ T5881] usb 1-1: SerialNumber: syz [ 399.983707][ T5881] usb 1-1: can't set config #220, error -71 [ 400.032702][ T5881] usb 1-1: USB disconnect, device number 15 [ 400.109483][ T8421] netlink: 'syz.0.581': attribute type 72 has an invalid length. [ 401.415861][ T810] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 401.463420][ T5945] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 401.578661][ T810] usb 4-1: Using ep0 maxpacket: 8 [ 401.582923][ T810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.582938][ T810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 401.582965][ T810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 401.582980][ T810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 401.583002][ T810] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 401.583014][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.596290][ T810] hub 4-1:1.0: bad descriptor, ignoring hub [ 401.596327][ T810] hub 4-1:1.0: probe with driver hub failed with error -5 [ 401.597178][ T810] cdc_wdm 4-1:1.0: skipping garbage [ 401.597192][ T810] cdc_wdm 4-1:1.0: skipping garbage [ 401.637470][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 401.652442][ T5945] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.652466][ T5945] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 401.652519][ T5945] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 401.652544][ T5945] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 401.652582][ T5945] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 401.652604][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.657919][ T810] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 401.657938][ T810] cdc_wdm 4-1:1.0: Unknown control protocol [ 401.888591][ T5945] hub 6-1:1.0: bad descriptor, ignoring hub [ 401.888614][ T5945] hub 6-1:1.0: probe with driver hub failed with error -5 [ 401.895155][ T5945] cdc_wdm 6-1:1.0: skipping garbage [ 401.895173][ T5945] cdc_wdm 6-1:1.0: skipping garbage [ 401.927804][ T5945] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 401.927823][ T5945] cdc_wdm 6-1:1.0: Unknown control protocol [ 401.997267][ T8439] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 407.663358][ T810] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 407.703582][ T5945] usb 6-1: USB disconnect, device number 3 [ 407.816113][ T810] usb 2-1: config 0 has no interfaces? [ 407.816137][ T810] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 407.816149][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.818912][ T810] usb 2-1: config 0 descriptor?? [ 407.860260][ T8461] binder: 8460:8461 ioctl c0306201 200000000240 returned -11 [ 408.022125][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 408.038200][ T810] usb 2-1: USB disconnect, device number 13 [ 409.004927][ T5945] usb 4-1: USB disconnect, device number 24 [ 412.250105][ T8488] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.595'. [ 416.493300][ T5880] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 416.643361][ T5880] usb 1-1: device descriptor read/64, error -71 [ 416.978389][ T5880] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 417.173817][ T5880] usb 1-1: device descriptor read/64, error -71 [ 417.197511][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.200148][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.201213][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.202210][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.303388][ T5880] usb usb1-port1: attempt power cycle [ 417.484454][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.653320][ T5880] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 418.891728][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 418.934739][ T8523] 9p: Bad value for 'rfdno' [ 419.066007][ T10] usb 2-1: config 0 has no interfaces? [ 419.066043][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 419.066065][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.420399][ T10] usb 2-1: config 0 descriptor?? [ 419.543461][ T61] Bluetooth: hci3: command tx timeout [ 419.692142][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 419.799545][ T8526] usb 2-1: USB disconnect, device number 14 [ 421.476100][ T5880] usb 1-1: device descriptor read/8, error -71 [ 421.631404][ T61] Bluetooth: hci3: command tx timeout [ 422.386051][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 422.464942][ T6431] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.587889][ T8548] hub 9-0:1.0: USB hub found [ 422.593422][ T8548] hub 9-0:1.0: 1 port detected [ 423.273805][ T6431] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.363306][ T5865] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 423.513358][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 423.514210][ T5865] usb 1-1: no configurations [ 423.514224][ T5865] usb 1-1: can't read configurations, error -22 [ 423.643883][ T5865] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 423.742075][ T61] Bluetooth: hci3: command tx timeout [ 423.782475][ T6431] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.903668][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 423.904619][ T5865] usb 1-1: no configurations [ 423.904634][ T5865] usb 1-1: can't read configurations, error -22 [ 423.905131][ T5865] usb usb1-port1: attempt power cycle [ 425.035416][ T8565] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 425.064790][ T5865] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 425.087805][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 425.088591][ T5865] usb 1-1: no configurations [ 425.088606][ T5865] usb 1-1: can't read configurations, error -22 [ 425.223376][ T5865] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 425.247230][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 425.249120][ T5865] usb 1-1: no configurations [ 425.249130][ T5865] usb 1-1: can't read configurations, error -22 [ 425.250164][ T5865] usb usb1-port1: unable to enumerate USB device [ 425.519037][ T6431] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.563049][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 425.713441][ T810] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 425.772170][ T8526] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 425.783366][ T61] Bluetooth: hci3: command tx timeout [ 425.842594][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.842715][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.842818][ T8508] bridge_slave_0: entered allmulticast mode [ 425.851779][ T8508] bridge_slave_0: entered promiscuous mode [ 425.955562][ T8581] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 426.591219][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.591338][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.591572][ T8508] bridge_slave_1: entered allmulticast mode [ 426.604101][ T8526] usb 6-1: config 0 has no interfaces? [ 426.604136][ T8526] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 426.604160][ T8526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.607996][ T8508] bridge_slave_1: entered promiscuous mode [ 426.615113][ T8526] usb 6-1: config 0 descriptor?? [ 426.731757][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.786051][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.816134][ T810] usb 2-1: config 0 has no interfaces? [ 426.816169][ T810] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 426.816192][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.850896][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.612'. [ 426.882337][ T810] usb 2-1: config 0 descriptor?? [ 426.973834][ T8585] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.617'. [ 427.025196][ T8526] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 427.031047][ T891] usb 6-1: USB disconnect, device number 4 [ 427.058945][ T8508] team0: Port device team_slave_0 added [ 427.069756][ T8508] team0: Port device team_slave_1 added [ 427.097953][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 427.104791][ T5880] usb 2-1: USB disconnect, device number 15 [ 427.216988][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.216999][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.217012][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.221961][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.221975][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.221998][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.243103][ T8526] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 427.243131][ T8526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.243150][ T8526] usb 1-1: Product: syz [ 427.243696][ T8526] usb 1-1: Manufacturer: syz [ 427.243711][ T8526] usb 1-1: SerialNumber: syz [ 427.275825][ T8526] r8152-cfgselector 1-1: Unknown version 0x0000 [ 427.275848][ T8526] r8152-cfgselector 1-1: config 0 descriptor?? [ 427.520061][ T8591] 9p: Bad value for 'rfdno' [ 427.570580][ T8526] r8152-cfgselector 1-1: USB disconnect, device number 24 [ 427.674746][ T8508] hsr_slave_0: entered promiscuous mode [ 427.675514][ T8508] hsr_slave_1: entered promiscuous mode [ 427.675972][ T8508] debugfs: 'hsr0' already exists in 'hsr' [ 427.675986][ T8508] Cannot create hsr debugfs directory [ 428.509238][ T6431] gretap0: left allmulticast mode [ 428.509265][ T6431] gretap0: left promiscuous mode [ 428.532893][ T6431] bridge0: port 3(gretap0) entered disabled state [ 428.926078][ T6431] bridge_slave_1: left allmulticast mode [ 428.926105][ T6431] bridge_slave_1: left promiscuous mode [ 428.926367][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.035611][ T6431] bridge_slave_0: left allmulticast mode [ 429.035641][ T6431] bridge_slave_0: left promiscuous mode [ 429.035875][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.523730][ T6431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.585463][ T6431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.628710][ T6431] bond0 (unregistering): Released all slaves [ 431.701268][ T8612] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 435.048191][ T6431] hsr_slave_0: left promiscuous mode [ 435.095175][ T6431] hsr_slave_1: left promiscuous mode [ 435.095806][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.095822][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.183966][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.183985][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.532429][ T6431] veth1_macvtap: left promiscuous mode [ 435.540650][ T6431] veth0_macvtap: left promiscuous mode [ 435.540887][ T6431] veth1_vlan: left promiscuous mode [ 435.541053][ T6431] veth0_vlan: left promiscuous mode [ 435.633365][ T5880] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 435.847657][ T5880] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 435.847684][ T5880] usb 6-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 435.847703][ T5880] usb 6-1: config 220 has no interface number 2 [ 435.847770][ T5880] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 435.847796][ T5880] usb 6-1: config 220 interface 0 has no altsetting 0 [ 435.847813][ T5880] usb 6-1: config 220 interface 76 has no altsetting 0 [ 435.847831][ T5880] usb 6-1: config 220 interface 1 has no altsetting 0 [ 435.850966][ T5880] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 435.850995][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.851012][ T5880] usb 6-1: Product: syz [ 435.851085][ T5880] usb 6-1: Manufacturer: syz [ 435.851099][ T5880] usb 6-1: SerialNumber: syz [ 436.264797][ T5880] usb 6-1: selecting invalid altsetting 0 [ 436.268428][ T5880] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 436.268459][ T5880] uvcvideo 6-1:220.0: No valid video chain found. [ 436.365943][ T5880] usb 6-1: selecting invalid altsetting 0 [ 436.365982][ T5880] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 436.413340][ T5880] usb 6-1: USB disconnect, device number 5 [ 436.918818][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 438.494298][ T6431] team0 (unregistering): Port device team_slave_1 removed [ 438.664583][ T6431] team0 (unregistering): Port device team_slave_0 removed [ 439.950363][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.950459][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.648527][ T8698] netlink: 96 bytes leftover after parsing attributes in process `syz.1.639'. [ 440.868830][ T8508] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 441.376442][ T8508] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 441.447400][ T8508] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.588337][ T8508] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.903336][ T8721] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 442.168780][ T8733] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 442.168836][ T8733] CIFS mount error: No usable UNC path provided in device string! [ 442.168836][ T8733] [ 442.169098][ T8733] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 443.393380][ T8526] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 443.455058][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.566238][ T8526] usb 4-1: Using ep0 maxpacket: 8 [ 443.568205][ T8526] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.568227][ T8526] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 443.568274][ T8526] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 443.568300][ T8526] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 443.568338][ T8526] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 443.568360][ T8526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.590776][ T8526] hub 4-1:1.0: bad descriptor, ignoring hub [ 443.590815][ T8526] hub 4-1:1.0: probe with driver hub failed with error -5 [ 443.598285][ T8526] cdc_wdm 4-1:1.0: skipping garbage [ 443.598305][ T8526] cdc_wdm 4-1:1.0: skipping garbage [ 443.611693][ T8526] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 443.611714][ T8526] cdc_wdm 4-1:1.0: Unknown control protocol [ 443.619282][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.752067][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.779245][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.809042][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.809157][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.926019][ T6431] IPVS: stop unused estimator thread 0... [ 446.542851][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.649'. [ 446.772950][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.644524][ T5857] usb 4-1: USB disconnect, device number 25 [ 448.730226][ T8508] veth0_vlan: entered promiscuous mode [ 448.795597][ T8508] veth1_vlan: entered promiscuous mode [ 448.992333][ T8508] veth0_macvtap: entered promiscuous mode [ 449.019954][ T8508] veth1_macvtap: entered promiscuous mode [ 449.087972][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.090624][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.124264][ T6430] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.125225][ T6430] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.126370][ T6430] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.164104][ T6430] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.325637][ T8795] netlink: 96 bytes leftover after parsing attributes in process `syz.1.653'. [ 449.877819][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 449.920678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.920699][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.337683][ T5975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.337702][ T5975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.513531][ T8816] fuse: Unknown parameter 'user_i00000000000000000000' [ 452.929774][ T8526] Dead loop on virtual device wlan1, fix it urgently! [ 453.268650][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.659'. [ 453.269016][ T8829] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 455.315462][ T8858] netlink: 96 bytes leftover after parsing attributes in process `syz.0.665'. [ 455.953366][ T8864] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 460.325982][ T8886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.471434][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.672'. [ 461.784632][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.6.674'. [ 461.918541][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 461.918564][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 462.057768][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 462.057783][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 462.641567][ T5880] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 462.843298][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 462.846331][ T5880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.846360][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.846411][ T5880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 462.846440][ T5880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 462.846484][ T5880] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 462.846595][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.857571][ T5880] hub 1-1:1.0: bad descriptor, ignoring hub [ 462.857607][ T5880] hub 1-1:1.0: probe with driver hub failed with error -5 [ 462.940237][ T5880] cdc_wdm 1-1:1.0: skipping garbage [ 462.940258][ T5880] cdc_wdm 1-1:1.0: skipping garbage [ 462.975861][ T5880] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 462.975874][ T5880] cdc_wdm 1-1:1.0: Unknown control protocol [ 463.108668][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 468.475420][ T5880] usb 1-1: USB disconnect, device number 25 [ 469.128165][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.686'. [ 470.984991][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 471.194936][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 471.197605][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 471.197639][ T31] usb 1-1: can't read configurations, error -61 [ 471.323414][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 471.503362][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 471.510016][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 471.510051][ T31] usb 1-1: can't read configurations, error -61 [ 471.690912][ T31] usb usb1-port1: attempt power cycle [ 472.943408][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 472.976383][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 472.980441][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 472.980478][ T31] usb 1-1: can't read configurations, error -61 [ 473.103514][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 473.133246][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 473.155627][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 473.155666][ T31] usb 1-1: can't read configurations, error -61 [ 473.156074][ T31] usb usb1-port1: unable to enumerate USB device [ 476.317423][ T9046] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 477.873702][ T57] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 478.063238][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 478.228651][ T57] usb 1-1: config 0 has no interfaces? [ 478.231129][ T57] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 478.231158][ T57] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 478.231177][ T57] usb 1-1: Manufacturer: syz [ 478.278652][ T57] usb 1-1: config 0 descriptor?? [ 480.805714][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 481.390843][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 482.057418][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 482.057457][ T31] usb 6-1: can't read configurations, error -61 [ 482.193318][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 482.942826][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 482.979258][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 482.979296][ T31] usb 6-1: can't read configurations, error -61 [ 483.002128][ T31] usb usb6-port1: attempt power cycle [ 483.044607][ T9109] 9p: Bad value for 'rfdno' [ 483.423263][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 483.443524][ T31] usb 6-1: device descriptor read/8, error -71 [ 483.702616][ T9120] 9p: Bad value for 'rfdno' [ 484.190300][ T5880] usb 1-1: USB disconnect, device number 30 [ 489.313560][ T5865] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 489.463384][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 489.503293][ T5865] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 489.503318][ T5865] usb 4-1: can't read configurations, error -61 [ 489.561587][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.720'. [ 489.644886][ T5865] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 489.803262][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 489.805465][ T5865] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 489.805487][ T5865] usb 4-1: can't read configurations, error -61 [ 489.805725][ T5865] usb usb4-port1: attempt power cycle [ 490.143429][ T5865] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 490.164382][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 490.167009][ T5865] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 490.167125][ T5865] usb 4-1: can't read configurations, error -61 [ 490.313344][ T5865] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 490.409486][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 490.411565][ T5865] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 490.411600][ T5865] usb 4-1: can't read configurations, error -61 [ 490.411919][ T5865] usb usb4-port1: unable to enumerate USB device [ 490.684925][ T9183] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 492.176925][ T9193] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 493.406697][ T10] IPVS: starting estimator thread 0... [ 493.503354][ T9201] IPVS: using max 8 ests per chain, 19200 per kthread [ 493.876542][ T9210] netlink: 52 bytes leftover after parsing attributes in process `syz.3.732'. [ 494.984095][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 495.114323][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.734'. [ 495.195218][ T10] usb 2-1: config 0 has no interfaces? [ 495.195255][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.195278][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.200165][ T10] usb 2-1: config 0 descriptor?? [ 495.296652][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.734'. [ 495.427782][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 495.512921][ T9213] dummy0: entered promiscuous mode [ 495.540396][ T9213] macvtap1: entered promiscuous mode [ 495.540680][ T9213] macvtap1: entered allmulticast mode [ 495.540690][ T9213] dummy0: entered allmulticast mode [ 495.600087][ T10] usb 2-1: USB disconnect, device number 16 [ 496.337348][ T891] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 496.403721][ T8526] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 496.483286][ T891] usb 4-1: Using ep0 maxpacket: 8 [ 496.485528][ T891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.485544][ T891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 496.485574][ T891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 496.485588][ T891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 496.485610][ T891] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 496.485622][ T891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.497499][ T891] hub 4-1:1.0: bad descriptor, ignoring hub [ 496.497534][ T891] hub 4-1:1.0: probe with driver hub failed with error -5 [ 496.498347][ T891] cdc_wdm 4-1:1.0: skipping garbage [ 496.498368][ T891] cdc_wdm 4-1:1.0: skipping garbage [ 496.525481][ T891] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 496.525502][ T891] cdc_wdm 4-1:1.0: Unknown control protocol [ 496.704837][ T8526] usb 7-1: config 0 has no interfaces? [ 496.704860][ T8526] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.704874][ T8526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.714452][ T8526] usb 7-1: config 0 descriptor?? [ 496.921880][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.737'. [ 496.974321][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.737'. [ 496.977159][ T8526] usb 7-1: USB disconnect, device number 2 [ 498.003260][ T891] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 498.327467][ T891] usb 6-1: Using ep0 maxpacket: 16 [ 498.375560][ T891] usb 6-1: config 0 has no interfaces? [ 498.389588][ T891] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 498.389606][ T891] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 498.389616][ T891] usb 6-1: Manufacturer: syz [ 498.441611][ T891] usb 6-1: config 0 descriptor?? [ 500.228988][ T891] usb 4-1: USB disconnect, device number 30 [ 501.053188][ T9272] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 501.656998][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.657067][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.103319][ T8526] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 502.300998][ T8526] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 502.301026][ T8526] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 502.301045][ T8526] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 502.301064][ T8526] usb 4-1: config 220 has no interface number 2 [ 502.301120][ T8526] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 502.301134][ T8526] usb 4-1: config 220 interface 0 has no altsetting 0 [ 502.301143][ T8526] usb 4-1: config 220 interface 76 has no altsetting 0 [ 502.301152][ T8526] usb 4-1: config 220 interface 1 has no altsetting 0 [ 502.315684][ T8526] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 502.315714][ T8526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.315733][ T8526] usb 4-1: Product: syz [ 502.315746][ T8526] usb 4-1: Manufacturer: syz [ 502.315765][ T8526] usb 4-1: SerialNumber: syz [ 502.583643][ T8526] usb 4-1: selecting invalid altsetting 0 [ 502.583954][ T8526] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 502.583972][ T8526] uvcvideo 4-1:220.0: No valid video chain found. [ 502.615048][ T8526] usb 4-1: selecting invalid altsetting 0 [ 502.615083][ T8526] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 502.696056][ T8526] usb 4-1: USB disconnect, device number 31 [ 503.043323][ T31] usb 6-1: USB disconnect, device number 10 [ 503.118382][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.748'. [ 503.693360][ T891] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 503.758032][ T9286] netlink: 52 bytes leftover after parsing attributes in process `syz.5.749'. [ 503.905442][ T891] usb 2-1: config 0 has no interfaces? [ 503.905465][ T891] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 503.905478][ T891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.909418][ T891] usb 2-1: config 0 descriptor?? [ 504.161436][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 504.213580][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 504.260690][ T10] usb 2-1: USB disconnect, device number 17 [ 505.193326][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 505.395657][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 505.428762][ T10] usb 4-1: config 0 has no interfaces? [ 505.430149][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 505.430177][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 505.430195][ T10] usb 4-1: Manufacturer: syz [ 505.435929][ T10] usb 4-1: config 0 descriptor?? [ 505.613250][ T8526] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 505.763252][ T8526] usb 2-1: Using ep0 maxpacket: 32 [ 505.764620][ T8526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.764638][ T8526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.764658][ T8526] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 505.764670][ T8526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.767447][ T8526] usb 2-1: config 0 descriptor?? [ 505.933345][ T5865] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 506.103235][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 506.105394][ T5865] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.105417][ T5865] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 506.105467][ T5865] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 506.105493][ T5865] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 506.105525][ T5865] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 506.105538][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.281323][ T8526] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 506.281363][ T8526] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 506.300157][ T5865] hub 6-1:1.0: bad descriptor, ignoring hub [ 506.300194][ T5865] hub 6-1:1.0: probe with driver hub failed with error -5 [ 506.320846][ T5865] cdc_wdm 6-1:1.0: skipping garbage [ 506.320862][ T5865] cdc_wdm 6-1:1.0: skipping garbage [ 506.346823][ T5865] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 506.346842][ T5865] cdc_wdm 6-1:1.0: Unknown control protocol [ 506.435656][ T8526] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 506.631532][ T8526] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 506.832676][ T8526] ft260 0003:0403:6030.0002: failed to retrieve status: -71, no wakeup [ 506.835475][ T8526] ft260 0003:0403:6030.0002: failed to retrieve status: -71 [ 506.836010][ T8526] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 507.722634][ T8526] usb 2-1: USB disconnect, device number 18 [ 508.732050][ T8526] usb 4-1: USB disconnect, device number 32 [ 509.379743][ T9334] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 510.138912][ T5880] usb 6-1: USB disconnect, device number 11 [ 510.752398][ T9343] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 510.880398][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 511.743312][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 511.745479][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.745509][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.745546][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 511.745569][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.799371][ T10] usb 4-1: config 0 descriptor?? [ 513.221157][ T10] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 513.221192][ T10] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 513.303362][ T5880] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 513.406557][ T10] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 513.406787][ T10] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71 [ 513.453910][ T10] usb 4-1: USB disconnect, device number 33 [ 513.479589][ T5880] usb 7-1: config 0 has no interfaces? [ 513.479623][ T5880] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 513.479646][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.524986][ T5880] usb 7-1: config 0 descriptor?? [ 513.749178][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.766'. [ 513.847776][ T9346] dummy0: entered promiscuous mode [ 513.847893][ T9346] macvtap1: entered promiscuous mode [ 513.848008][ T9346] macvtap1: entered allmulticast mode [ 513.848016][ T9346] dummy0: entered allmulticast mode [ 513.903257][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 513.919879][ T5857] usb 7-1: USB disconnect, device number 3 [ 514.053274][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 514.069806][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.069829][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 514.069859][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 514.069873][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 514.069897][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 514.069908][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.141154][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 514.153350][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 514.153963][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 514.153974][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 514.156136][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 514.156153][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 515.226528][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.773'. [ 516.708778][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.773'. [ 516.723643][ T5857] usb 1-1: USB disconnect, device number 31 [ 518.133256][ T5857] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 518.177977][ T9396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 518.304247][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 518.333384][ T891] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 518.357875][ T5857] usb 1-1: config 0 has no interfaces? [ 518.438922][ T5857] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 518.438941][ T5857] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 518.438951][ T5857] usb 1-1: Manufacturer: syz [ 518.472478][ T5857] usb 1-1: config 0 descriptor?? [ 518.493229][ T891] usb 6-1: Using ep0 maxpacket: 32 [ 518.496536][ T891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.496595][ T891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.496617][ T891] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 518.496629][ T891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.500138][ T891] usb 6-1: config 0 descriptor?? [ 518.964558][ T891] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 518.964596][ T891] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 519.161332][ T891] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 519.361918][ T891] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 519.938895][ T891] ft260 0003:0403:6030.0004: failed to retrieve status: -71, no wakeup [ 519.939310][ T891] ft260 0003:0403:6030.0004: failed to retrieve status: -71 [ 519.939640][ T891] ft260 0003:0403:6030.0004: failed to reset I2C controller: -71 [ 519.996066][ T891] usb 6-1: USB disconnect, device number 12 [ 520.223603][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 520.223626][ T9419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.787'. [ 520.223907][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 520.223921][ T9419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.787'. [ 520.747865][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.788'. [ 521.886353][ T5865] usb 1-1: USB disconnect, device number 32 [ 522.191755][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 522.383298][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 522.385819][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.385848][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 522.385899][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 522.385926][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 522.385967][ T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 522.385989][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.497196][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 522.497236][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 522.500374][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 522.500392][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 522.547824][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 522.547846][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 524.595846][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 524.595862][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'. [ 524.595993][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 524.596001][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'. [ 525.099726][ T9463] binder: BINDER_SET_CONTEXT_MGR already set [ 525.099737][ T9463] binder: 9462:9463 ioctl 4018620d 200000000040 returned -16 [ 525.100217][ T9463] binder: 9462:9463 ioctl c0306201 200000000240 returned -11 [ 525.143952][ T10] usb 6-1: USB disconnect, device number 13 [ 525.378002][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.800'. [ 526.159829][ T9480] netlink: 96 bytes leftover after parsing attributes in process `syz.0.805'. [ 526.845065][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 526.845089][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.809'. [ 526.845317][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 526.845332][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.809'. [ 527.399754][ T9497] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 528.182745][ T9492] 9p: Bad value for 'rfdno' [ 528.219934][ T9503] binder: BINDER_SET_CONTEXT_MGR already set [ 528.219944][ T9503] binder: 9495:9503 ioctl 4018620d 200000000040 returned -16 [ 528.220262][ T9503] binder: 9495:9503 ioctl c0306201 200000000240 returned -11 [ 528.636209][ T9508] netlink: 20 bytes leftover after parsing attributes in process `syz.6.814'. [ 529.063324][ T5879] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 529.250477][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 529.252097][ T5879] usb 7-1: config 0 has no interfaces? [ 529.252117][ T5879] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 529.252131][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.285834][ T5879] usb 7-1: config 0 descriptor?? [ 529.527768][ T9514] syz_tun: entered promiscuous mode [ 529.527879][ T9514] vlan2: entered promiscuous mode [ 530.088297][ T10] usb 7-1: USB disconnect, device number 4 [ 531.661421][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.821'. [ 531.883618][ T9533] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 532.896564][ T9538] binder: 9536:9538 ioctl c0306201 200000000240 returned -11 [ 533.338681][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.826'. [ 536.984173][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 537.044719][ T9575] hub 9-0:1.0: USB hub found [ 537.052237][ T9575] hub 9-0:1.0: 1 port detected [ 538.493296][ T57] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 538.713309][ T57] usb 4-1: device descriptor read/64, error -71 [ 538.777406][ T9575] syz.1.831 (9575) used greatest stack depth: 18392 bytes left [ 538.973454][ T57] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 539.113427][ T57] usb 4-1: device descriptor read/64, error -71 [ 539.228534][ T57] usb usb4-port1: attempt power cycle [ 539.443396][ T5879] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 539.573294][ T57] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 539.593034][ T5879] usb 1-1: device descriptor read/64, error -71 [ 539.600667][ T57] usb 4-1: device descriptor read/8, error -71 [ 539.645325][ T9587] binder: 9586:9587 ioctl c0306201 200000000240 returned -11 [ 539.843610][ T5879] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 539.853251][ T57] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 539.879799][ T57] usb 4-1: device descriptor read/8, error -71 [ 539.985308][ T57] usb usb4-port1: unable to enumerate USB device [ 539.993432][ T5879] usb 1-1: device descriptor read/64, error -71 [ 540.104619][ T5879] usb usb1-port1: attempt power cycle [ 540.443216][ T5879] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 540.493994][ T5879] usb 1-1: device descriptor read/8, error -71 [ 540.783322][ T5879] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 540.814122][ T5879] usb 1-1: device descriptor read/8, error -71 [ 542.007252][ T9608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 542.007271][ T5879] usb usb1-port1: unable to enumerate USB device [ 542.888585][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 543.012511][ T9621] hub 9-0:1.0: USB hub found [ 543.013289][ T9621] hub 9-0:1.0: 1 port detected [ 544.481361][ T9634] netlink: 96 bytes leftover after parsing attributes in process `syz.5.850'. [ 544.516544][ T9616] Bluetooth: hci3: command 0x0406 tx timeout [ 548.034997][ T9653] netlink: 20 bytes leftover after parsing attributes in process `syz.6.854'. [ 548.355108][ T9659] netlink: 96 bytes leftover after parsing attributes in process `syz.6.855'. [ 548.643260][ T57] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 548.793228][ T810] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 548.813229][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 548.815152][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.815181][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.815219][ T57] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 548.815242][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.820159][ T57] usb 4-1: config 0 descriptor?? [ 548.943193][ T810] usb 2-1: Using ep0 maxpacket: 16 [ 548.945604][ T810] usb 2-1: config 0 has no interfaces? [ 548.945639][ T810] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 548.945662][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.024527][ T810] usb 2-1: config 0 descriptor?? [ 549.347518][ T57] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 549.347542][ T57] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 549.361416][ T9662] vlan2: entered promiscuous mode [ 549.551541][ T57] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 549.757882][ T57] ft260 0003:0403:6030.0005: failed to retrieve system status [ 549.758109][ T57] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -32 [ 550.368107][ T57] usb 2-1: USB disconnect, device number 19 [ 551.338875][ T5865] usb 4-1: USB disconnect, device number 38 [ 552.946377][ T5879] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 553.143421][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 553.145674][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.145704][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.145738][ T5879] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 553.145761][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.150729][ T5879] usb 2-1: config 0 descriptor?? [ 553.396974][ T9701] netlink: 96 bytes leftover after parsing attributes in process `syz.3.868'. [ 553.569049][ T5879] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 553.569074][ T5879] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 553.765858][ T5879] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 554.042650][ T5879] ft260 0003:0403:6030.0006: failed to retrieve system status [ 554.043050][ T5879] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -5 [ 554.175728][ T57] usb 2-1: USB disconnect, device number 20 [ 556.464319][ T9720] 9p: Bad value for 'rfdno' [ 556.693253][ T57] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 557.140795][ T9726] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 557.603250][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 557.606231][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.606263][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.606298][ T57] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 557.606319][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.704641][ T57] usb 6-1: config 0 descriptor?? [ 558.153820][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 558.154346][ T57] usbhid 6-1:0.0: can't add hid device: -71 [ 558.154460][ T57] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 558.186456][ T5879] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 558.193981][ T57] usb 6-1: USB disconnect, device number 14 [ 558.375362][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 558.377624][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.377655][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.377692][ T5879] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 558.377715][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.382747][ T5879] usb 4-1: config 0 descriptor?? [ 558.812196][ T5879] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 558.812220][ T5879] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 558.961774][ T9741] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 559.110989][ T5879] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 559.337973][ T5879] ft260 0003:0403:6030.0007: failed to retrieve system status [ 559.338367][ T5879] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -5 [ 559.760059][ T10] usb 4-1: USB disconnect, device number 39 [ 561.891537][ T9763] 9p: Bad value for 'rfdno' [ 562.193402][ T5879] ================================================================== [ 562.193413][ T5879] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 562.193441][ T5879] Read of size 8 at addr ffffc9000d531008 by task kworker/0:4/5879 [ 562.193451][ T5879] [ 562.193468][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.193483][ T5879] Tainted: [L]=SOFTLOCKUP [ 562.193486][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 562.193493][ T5879] Workqueue: usb_hub_wq hub_event [ 562.193513][ T5879] Call Trace: [ 562.193517][ T5879] [ 562.193525][ T5879] dump_stack_lvl+0xe8/0x150 [ 562.193540][ T5879] print_report+0xba/0x230 [ 562.193552][ T5879] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 562.193562][ T5879] kasan_report+0x117/0x150 [ 562.193578][ T5879] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 562.193589][ T5879] __list_del_entry_valid_or_report+0xb5/0x190 [ 562.193605][ T5879] kcov_remote_start+0x2af/0x710 [ 562.193620][ T5879] hub_event+0x150/0x4f60 [ 562.193630][ T5879] ? __lock_acquire+0x6b5/0x2cf0 [ 562.193641][ T5879] ? __lock_acquire+0x6b5/0x2cf0 [ 562.193652][ T5879] ? __lock_acquire+0x6b5/0x2cf0 [ 562.193662][ T5879] ? look_up_lock_class+0x57/0x110 [ 562.193678][ T5879] ? __lock_acquire+0x6b5/0x2cf0 [ 562.193690][ T5879] ? finish_task_switch+0x161/0x920 [ 562.193704][ T5879] ? lock_acquire+0x106/0x330 [ 562.193715][ T5879] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 562.193731][ T5879] ? __pfx_hub_event+0x10/0x10 [ 562.193740][ T5879] ? process_scheduled_works+0xa0f/0x17a0 [ 562.193751][ T5879] ? process_scheduled_works+0xa0f/0x17a0 [ 562.193760][ T5879] ? process_scheduled_works+0xa0f/0x17a0 [ 562.193769][ T5879] process_scheduled_works+0xaec/0x17a0 [ 562.193783][ T5879] ? __pfx_process_scheduled_works+0x10/0x10 [ 562.193792][ T5879] ? do_raw_spin_lock+0x12b/0x2f0 [ 562.193807][ T5879] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 562.193821][ T5879] ? schedule+0x90/0x360 [ 562.193835][ T5879] worker_thread+0xda6/0x1360 [ 562.193848][ T5879] ? __kthread_parkme+0x19c/0x1f0 [ 562.193860][ T5879] kthread+0x726/0x8b0 [ 562.193872][ T5879] ? __pfx_worker_thread+0x10/0x10 [ 562.193881][ T5879] ? __pfx_kthread+0x10/0x10 [ 562.193892][ T5879] ? rt_spin_unlock+0x14f/0x200 [ 562.193904][ T5879] ? rt_spin_unlock+0x160/0x200 [ 562.193914][ T5879] ? __pfx_kthread+0x10/0x10 [ 562.193925][ T5879] ret_from_fork+0x51b/0xa40 [ 562.193936][ T5879] ? __pfx_ret_from_fork+0x10/0x10 [ 562.193946][ T5879] ? __switch_to+0xc82/0x1410 [ 562.193961][ T5879] ? __pfx_kthread+0x10/0x10 [ 562.193973][ T5879] ret_from_fork_asm+0x1a/0x30 [ 562.193990][ T5879] [ 562.193994][ T5879] [ 562.193996][ T5879] The buggy address belongs to a vmalloc virtual mapping [ 562.194007][ T5879] Memory state around the buggy address: [ 562.194013][ T5879] ffffc9000d530f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 562.194019][ T5879] ffffc9000d530f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 562.194025][ T5879] >ffffc9000d531000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 562.194033][ T5879] ^ [ 562.194038][ T5879] ffffc9000d531080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 562.194044][ T5879] ffffc9000d531100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 562.194049][ T5879] ================================================================== [ 562.194057][ T5879] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 562.194068][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.194082][ T5879] Tainted: [L]=SOFTLOCKUP [ 562.194085][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 562.194091][ T5879] Workqueue: usb_hub_wq hub_event [ 562.194100][ T5879] Call Trace: [ 562.194104][ T5879] [ 562.194108][ T5879] vpanic+0x1e0/0x670 [ 562.194122][ T5879] panic+0xc5/0xd0 [ 562.194135][ T5879] ? __pfx_panic+0x10/0x10 [ 562.194148][ T5879] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 562.194158][ T5879] ? rcu_is_watching+0x15/0xb0 [ 562.194173][ T5879] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 562.194182][ T5879] check_panic_on_warn+0x89/0xb0 [ 562.194196][ T5879] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 562.194205][ T5879] end_report+0x6f/0x140 [ 562.194219][ T5879] kasan_report+0x128/0x150 [ 562.194233][ T5879] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 562.194245][ T5879] __list_del_entry_valid_or_report+0xb5/0x190 [ 562.194255][ T5879] kcov_remote_start+0x2af/0x710 [ 562.194269][ T5879] hub_event+0x150/0x4f60 [ 562.194278][ T5879] ? __lock_acquire+0x6b5/0x2cf0 [ 562.194289][ T5879] ? __lock_acquire+0x6b5/0x2cf0 [ 562.194300][ T5879] ? __lock_acquire+0x6b5/0x2cf0 [ 562.194310][ T5879] ? look_up_lock_class+0x57/0x110 [ 562.194325][ T5879] ? __lock_acquire+0x6b5/0x2cf0 [ 562.194337][ T5879] ? finish_task_switch+0x161/0x920 [ 562.194352][ T5879] ? lock_acquire+0x106/0x330 [ 562.194363][ T5879] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 562.194379][ T5879] ? __pfx_hub_event+0x10/0x10 [ 562.194388][ T5879] ? process_scheduled_works+0xa0f/0x17a0 [ 562.194399][ T5879] ? process_scheduled_works+0xa0f/0x17a0 [ 562.194408][ T5879] ? process_scheduled_works+0xa0f/0x17a0 [ 562.194417][ T5879] process_scheduled_works+0xaec/0x17a0 [ 562.194431][ T5879] ? __pfx_process_scheduled_works+0x10/0x10 [ 562.194440][ T5879] ? do_raw_spin_lock+0x12b/0x2f0 [ 562.194455][ T5879] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 562.194470][ T5879] ? schedule+0x90/0x360 [ 562.194483][ T5879] worker_thread+0xda6/0x1360 [ 562.194496][ T5879] ? __kthread_parkme+0x19c/0x1f0 [ 562.194507][ T5879] kthread+0x726/0x8b0 [ 562.194520][ T5879] ? __pfx_worker_thread+0x10/0x10 [ 562.194529][ T5879] ? __pfx_kthread+0x10/0x10 [ 562.194540][ T5879] ? rt_spin_unlock+0x14f/0x200 [ 562.194553][ T5879] ? rt_spin_unlock+0x160/0x200 [ 562.194569][ T5879] ? __pfx_kthread+0x10/0x10 [ 562.194588][ T5879] ret_from_fork+0x51b/0xa40 [ 562.194611][ T5879] ? __pfx_ret_from_fork+0x10/0x10 [ 562.194627][ T5879] ? __switch_to+0xc82/0x1410 [ 562.194649][ T5879] ? __pfx_kthread+0x10/0x10 [ 562.194666][ T5879] ret_from_fork_asm+0x1a/0x30 [ 562.194693][ T5879] [ 562.195045][ T5879] Kernel Offset: disabled