last executing test programs: 1m33.581299109s ago: executing program 2 (id=459): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) pread64(r0, 0x0, 0x0, 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x140000c4) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) 1m32.329116742s ago: executing program 2 (id=463): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x2, 0x3, 0xf8) sendto$unix(r4, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001240)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[{}, {}], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0], 0x2, 0x5, 0x9}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000012c0)={r7}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x303, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x80\x8a'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r10 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r10, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$vga_arbiter(r11, &(0x7f00000000c0), 0xf) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0x9, @meta={0x54533343, 0x6504310e, 0x4c54, 0xcd18, 0x3fc22ce}}) 1m28.075209682s ago: executing program 2 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m27.826709788s ago: executing program 2 (id=481): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 1m27.707005986s ago: executing program 2 (id=483): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1m27.18526739s ago: executing program 2 (id=485): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c00028006000100fe0f000008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) 1m26.820252994s ago: executing program 32 (id=485): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c00028006000100fe0f000008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) 19.075731912s ago: executing program 5 (id=841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000107000000000000000034234c71"], 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) r5 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x7) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x9, 0x5a91c09, 0x9, 0x0, 0x1, 0xff, 0x0, 0x0, 0x10, 0x140000}}, 0x50) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 13.397059707s ago: executing program 5 (id=858): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x11) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) io_setup(0x8, &(0x7f0000004200)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) write$UHID_INPUT(r6, &(0x7f0000002080)={0x7, {"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", 0x1000}}, 0x1006) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x26b, @local, 0x626}}, 0x0, 0x0, 0x4, 0x0, "96ed5113de14a5d7e78c7babe97a2c4ee9e140cdc3029225a2b50ee4baf9addab51ae139be17ed639e72229b65f374d28e02f80a0b533b87daca7254c89b0197205e5bbb371ca634c31204c3688fc658"}, 0x21) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 13.250055556s ago: executing program 0 (id=860): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x16, 0x1, 0x5, 0x3, 0x44000, 0xffffffffffffffff, 0xfd, '\x00', 0x0, r1, 0x4, 0x1, 0x3}, 0x50) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10010, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 12.43838302s ago: executing program 1 (id=862): socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000005000000a30cff"]) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x3, 0x180, 0xff, 0xfffffffffffffffe, 0x100, 0x7cf7, 0x9, 0x7ffffffd, 0xfffffffe, 0x7000, 0x7, 0x0, 0x0, 0x3ff, 0xfffffffe}}, {0x0, 0x19}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x4d9b6eaf) 12.389186753s ago: executing program 3 (id=863): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800) r2 = syz_open_dev$vbi(&(0x7f0000001340), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000013c0)=@fd={0x7, 0xe, 0x4, 0x2000, 0x27, {0x77359400}, {0x1, 0xc, 0x0, 0xb2, 0x5, 0xf7, "230b6991"}, 0x7ff, 0x4, {}, 0x2}) socket$kcm(0x29, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x1b, 0x80, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0x1}}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 9.55495676s ago: executing program 1 (id=864): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) 9.441456868s ago: executing program 3 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 9.217063663s ago: executing program 1 (id=866): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, 0xb}, {0xa, 0x0, 0x9, @mcast1}, 0xffffffffffffffff, 0x9}}, 0x48) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x7fffffff) sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe}, 0x1c) close(r0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x40c00) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r7, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x3, 0x5, 0x4, 0x1, 0x6], 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7, 0xe, [0x2d, 0x3, 0x3, 0x11, 0x1e, 0x1c, 0x38, 0x21, 0x1, 0x40, 0x3, 0x2f, 0x28, 0x7, 0x13, 0x16], 0x2, 0x8, 0x2}}}, {{@ip={@multicast1, @local, 0xff000000, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x3a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x4, 0x6, 0x5, 0x2, 0xb], 0x3, 0x3}, {0x3, [0x4, 0x1, 0x4, 0x0, 0x5, 0x6], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 9.153078357s ago: executing program 3 (id=867): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x2, 0x3, 0xf8) sendto$unix(r4, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001240)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[{}, {}], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0], 0x2, 0x5, 0x9}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000012c0)={r7}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x303, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x80\x8a'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r9 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r9, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$vga_arbiter(r10, &(0x7f00000000c0), 0xf) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0x9, @meta={0x54533343, 0x6504310e, 0x4c54, 0xcd18, 0x3fc22ce}}) 9.001159266s ago: executing program 0 (id=868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000107000000000000000034234c71"], 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) r5 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x7) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x9, 0x5a91c09, 0x9, 0x0, 0x1, 0xff, 0x0, 0x0, 0x10, 0x140000}}, 0x50) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8.64745059s ago: executing program 4 (id=869): pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 8.528518658s ago: executing program 4 (id=870): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) rt_tgsigqueueinfo(0x0, 0x0, 0x1b, &(0x7f0000000340)={0x9, 0x6, 0x3}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000b27000/0x1000)=nil, &(0x7f0000a34000/0x13000)=nil, &(0x7f00005ba000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000d72000/0x3000)=nil, &(0x7f0000762000/0x1000)=nil, &(0x7f0000685000/0x2000)=nil, &(0x7f00000001c0)="bcd5c5a65c22a112895ae3b61cfff2583d5d5bb74de3cf6a32551f2858ba92f3ed341f090169174c4a9874851d912e49174813619affaabda71f69b7e66de95e6d34fd1423713ce9e61d5553d50d419d004075eb21d119d677747f123f5e65536f734cb9dead1efd735f8f30749ced18c230f0952ac3f282e1e9efef7e3da52d1d7542cfdf0a4bd7e9c53c6f8527a9fe234f98c9cba6b3e2", 0x98, r1}, 0x64) renameat2(r8, 0x0, r8, &(0x7f00000003c0)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="e5e77e34b239e867eac94e45e1df8998b00957adf7680f7865ea781e26af3a7484b89faca5c6d72d7df45b8d4122a6a56bb037819865519b3b5a99700771439428afa0dd71def6e8dd92b0f5ef501f6d0ba938fc6633c0dbc1995475197279feba29432cda9ebb9b4b9c962153b67a6b32664fdbbd3385662fa277cd92b61bce82d354e0503ad606e3b68efc87d00c81a9fe4300f053270a6f9d3ec7b55d5149609611046d4e0aa081db02914b1c16f9b665478f0370dfb558627dd9"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xba7cc859afa61d4a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) 7.733253871s ago: executing program 5 (id=871): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x275c, &(0x7f00000011c0)={0x0, 0x5bce, 0x100, 0xffffffff, 0x10e}, &(0x7f0000001140), &(0x7f0000001180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 7.180021197s ago: executing program 3 (id=872): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r0, &(0x7f0000000f00)="5bfd", 0x2) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, 0x0) 7.092405323s ago: executing program 3 (id=873): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x218, r9, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x218}, 0x1, 0x0, 0x0, 0x4880}, 0x44000) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"}) 6.06987965s ago: executing program 4 (id=874): socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000005000000a30cff"]) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x3, 0x180, 0xff, 0xfffffffffffffffe, 0x100, 0x7cf7, 0x9, 0x7ffffffd, 0xfffffffe, 0x7000, 0x7, 0x0, 0x0, 0x3ff, 0xfffffffe}}, {0x0, 0x19}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x4d9b6eaf) 5.957800647s ago: executing program 0 (id=875): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = fsopen(0x0, 0x1) fsmount(r0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.571697041s ago: executing program 4 (id=876): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) 2.4330179s ago: executing program 0 (id=877): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xe79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86g\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf17\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\tA\xed\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x00', 0x42, 0x4c, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.291317519s ago: executing program 1 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.176341787s ago: executing program 4 (id=879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r2, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000240)}, 0x40) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, 0x0, 0x0) listen(r4, 0x4) close_range(r3, r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) 1.885802716s ago: executing program 5 (id=880): pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 1.516993121s ago: executing program 5 (id=881): rseq(0x0, 0x0, 0x10000, 0x0) r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a000000010902"], 0x0) r2 = msgget$private(0x0, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) pipe2(&(0x7f0000000100), 0x80000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100736974001400028006000e00060000000800", @ANYRES16=r5], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010100, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@local}, {@multicast1}]}}) msgrcv(r2, 0x0, 0x0, 0x2, 0x2800) 1.347289851s ago: executing program 1 (id=882): socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.288270376s ago: executing program 0 (id=883): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r0, &(0x7f0000000f00)="5bfd", 0x2) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, 0x0) 1.249636468s ago: executing program 3 (id=884): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c478", 0x2}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I%', 0x2}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000240)="e70d83", 0x3}], 0x1}}], 0x3, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000100)='-}\x00', &(0x7f0000000180)='/dev/video#\x00']}, &(0x7f0000000440)={[&(0x7f0000000280)=']\x00']}) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x80, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.109624577s ago: executing program 1 (id=885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000107000000000000000034234c71"], 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) r5 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x7) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x9, 0x5a91c09, 0x9, 0x0, 0x1, 0xff, 0x0, 0x0, 0x10, 0x140000}}, 0x50) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.057368541s ago: executing program 0 (id=886): socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 47.750897ms ago: executing program 5 (id=887): socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000005000000a30cff"]) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x3, 0x180, 0xff, 0xfffffffffffffffe, 0x100, 0x7cf7, 0x9, 0x7ffffffd, 0xfffffffe, 0x7000, 0x7, 0x0, 0x0, 0x3ff, 0xfffffffe}}, {0x0, 0x19}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x4d9b6eaf) 0s ago: executing program 4 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x5, 0x4}, 0x50) socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000004c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x17, 0xb5}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): y recommended to keep mac addresses unique to avoid problems! [ 70.241232][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.265039][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.278929][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.287293][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.300576][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.310460][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.318540][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.327382][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.352262][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.355725][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.365148][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.378845][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.395587][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.407135][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.420702][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.443939][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.453800][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.463517][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.472369][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.481621][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.496825][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.507352][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.517509][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.525845][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.527931][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.543238][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.571338][ T4267] device veth0_macvtap entered promiscuous mode [ 70.580382][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.584259][ T4269] device veth0_macvtap entered promiscuous mode [ 70.588335][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.613862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.624926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.633497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.643861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.652551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.663930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.697200][ T4267] device veth1_macvtap entered promiscuous mode [ 70.715093][ T4269] device veth1_macvtap entered promiscuous mode [ 70.734899][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.758089][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.773025][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.787119][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.797614][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.808524][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.820597][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.831688][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.851180][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.870657][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.882576][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.891359][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.901229][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.931078][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.943709][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.958555][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.975525][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.986420][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.997630][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.015881][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.040894][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.060149][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.070659][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.083094][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.093779][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.104489][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.114798][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.130620][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.151563][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.166311][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.169879][ T4359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.182474][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.203089][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.211908][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.223775][ T4267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.233350][ T4267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.242986][ T4267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.255720][ T4267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.284243][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.307091][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.317792][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.351232][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.376048][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.401859][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.413459][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.420261][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.422313][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.467791][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.490679][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.519584][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.528267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.565049][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.581107][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.591189][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.607636][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.652915][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.710844][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.737125][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.747981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.789502][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.855282][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.893835][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.907017][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.928247][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.937020][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.962905][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.971396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.984983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.993557][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.029126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.048932][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 72.119463][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 72.119703][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 72.125756][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 72.132253][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 72.188230][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.232390][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.255564][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.372068][ T4374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 72.519816][ T4369] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.727712][ T4369] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 72.739169][ T4369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.771522][ T4369] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 72.798871][ T4369] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 72.814899][ T4369] usb 2-1: Manufacturer: syz [ 72.889921][ T4369] usb 2-1: config 0 descriptor?? [ 72.958296][ T4369] igorplugusb 2-1:0.0: incorrect number of endpoints [ 73.573230][ T22] usb 2-1: USB disconnect, device number 2 [ 76.008916][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.076926][ T4439] kvm [4438]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 76.113861][ T4439] kvm [4438]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 76.205345][ T22] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 76.224274][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.255726][ T22] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 76.304012][ T22] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 76.324515][ T22] usb 5-1: Manufacturer: syz [ 76.336146][ T22] usb 5-1: config 0 descriptor?? [ 76.349195][ T4450] device vlan2 entered promiscuous mode [ 76.354555][ T22] igorplugusb 5-1:0.0: incorrect number of endpoints [ 76.366912][ T4450] device veth0_virt_wifi entered promiscuous mode [ 76.379197][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 76.388341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 76.520434][ T14] cfg80211: failed to load regulatory.db [ 77.510068][ T4316] usb 5-1: USB disconnect, device number 2 [ 77.650263][ T4491] device vlan2 entered promiscuous mode [ 77.657522][ T4491] device veth0_virt_wifi entered promiscuous mode [ 77.718171][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 77.726279][ T4490] kvm [4489]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 77.754459][ T4490] kvm [4489]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 77.776607][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 79.701041][ T4532] kvm [4531]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 79.733380][ T4532] kvm [4531]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 80.068923][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.250951][ T4316] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 80.260392][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.277125][ T4316] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 80.287532][ T4316] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 80.297868][ T4316] usb 5-1: Manufacturer: syz [ 80.313247][ T4316] usb 5-1: config 0 descriptor?? [ 80.322536][ T4316] igorplugusb 5-1:0.0: incorrect number of endpoints [ 80.735482][ T4312] usb 5-1: USB disconnect, device number 3 [ 80.778975][ T22] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 80.914261][ T4562] syz.2.69 uses obsolete (PF_INET,SOCK_PACKET) [ 80.960636][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.982799][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.019729][ T22] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 81.039200][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.073095][ T22] usb 1-1: config 0 descriptor?? [ 81.489210][ T22] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 81.516363][ T22] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 81.573893][ T22] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 81.605007][ T22] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 81.615812][ T22] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 81.648566][ T22] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 81.714941][ T22] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 81.849132][ T22] usb 1-1: USB disconnect, device number 2 [ 82.144760][ T4583] fido_id[4583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 82.698222][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 82.801771][ T4606] device hsr_slave_0 left promiscuous mode [ 83.053751][ T4323] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.269028][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 83.278535][ T4323] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.278952][ T4614] binder: BINDER_SET_CONTEXT_MGR already set [ 83.359515][ T4614] binder: 4610:4614 ioctl 4018620d 200000000040 returned -16 [ 83.375718][ T4621] fuse: Bad value for 'fd' [ 83.399070][ T4323] usb 5-1: config 179 has no interface number 0 [ 83.408448][ T4323] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 83.485397][ T4323] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 83.531660][ T4323] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.565412][ T4323] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 83.619777][ T4323] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.685772][ T4323] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 83.728321][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.738858][ T4316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.772462][ T4608] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.929094][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.941583][ T4316] usb 2-1: config 0 has no interfaces? [ 83.957734][ T4316] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 84.008081][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.028325][ T4316] usb 2-1: Product: syz [ 84.031121][ T4323] usb 5-1: USB disconnect, device number 4 [ 84.032797][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 84.032831][ T4316] usb 2-1: Manufacturer: syz [ 84.032850][ T4316] usb 2-1: SerialNumber: syz [ 84.032861][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 84.100162][ T4316] usb 2-1: config 0 descriptor?? [ 84.182811][ T22] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 84.208877][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.233410][ T22] usb 1-1: Product: syz [ 84.248947][ T22] usb 1-1: Manufacturer: syz [ 84.253796][ T22] usb 1-1: SerialNumber: syz [ 84.313444][ T22] usb 1-1: config 0 descriptor?? [ 84.353257][ T22] hub 1-1:0.0: bad descriptor, ignoring hub [ 84.374020][ T22] hub: probe of 1-1:0.0 failed with error -5 [ 84.432103][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.443628][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.465690][ T4314] usb 2-1: USB disconnect, device number 3 [ 84.482150][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.551128][ T22] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 84.582815][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 84.663043][ T22] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 84.771549][ T22] usb 1-1: media controller created [ 84.817842][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.921322][ T4632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.91'. [ 85.094863][ T22] DVB: Unable to find symbol dib7000p_attach() [ 85.123264][ T22] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 85.132429][ T4312] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.341630][ T4312] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 85.365258][ T4312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.376025][ T4312] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.421726][ T4312] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 85.468804][ T22] rc_core: IR keymap rc-dib0700-rc5 not found [ 85.475114][ T22] Registered IR keymap rc-empty [ 85.487557][ T4312] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 85.536382][ T22] dvb-usb: could not initialize remote control. [ 85.553166][ T4312] usb 5-1: Manufacturer: syz [ 85.568513][ T22] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 85.596021][ T4312] usb 5-1: config 0 descriptor?? [ 85.739133][ T4312] igorplugusb 5-1:0.0: incorrect number of endpoints [ 85.882379][ T4652] fuse: Bad value for 'user_id' [ 86.748824][ T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.792386][ T4312] usb 5-1: USB disconnect, device number 5 [ 86.938822][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 86.945697][ T22] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.954757][ T22] usb 2-1: config 179 has no interface number 0 [ 86.961754][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 86.973515][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 86.985963][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.997579][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 87.010271][ T22] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.024272][ T22] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.036904][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.055916][ T4663] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 87.309394][ T4353] usb 2-1: USB disconnect, device number 4 [ 87.315312][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 87.315341][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 87.604838][ T4688] fuse: Bad value for 'fd' [ 87.674652][ T4353] usb 1-1: USB disconnect, device number 3 [ 87.752602][ T4353] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 89.035876][ T4721] fuse: Bad value for 'fd' [ 89.213081][ T4722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.115'. [ 89.458984][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.652424][ T14] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 89.665711][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.694804][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.740099][ T14] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 89.754955][ T14] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 89.759056][ T4353] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.763720][ T14] usb 2-1: Manufacturer: syz [ 89.788067][ T14] usb 2-1: config 0 descriptor?? [ 89.818419][ T14] igorplugusb 2-1:0.0: incorrect number of endpoints [ 89.998833][ T4353] usb 3-1: Using ep0 maxpacket: 8 [ 90.005812][ T4353] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 90.038652][ T4353] usb 3-1: config 179 has no interface number 0 [ 90.058923][ T4353] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 90.086720][ T4353] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 90.121254][ T4353] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.148934][ T4353] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 90.180776][ T4353] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 90.222277][ T4353] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 90.247913][ T4353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.276252][ T4729] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.505727][ T4353] usb 3-1: USB disconnect, device number 2 [ 90.511786][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 90.511834][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 90.678011][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 90.722226][ T4736] device batadv0 entered promiscuous mode [ 90.745649][ T4736] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.756814][ T4736] device batadv0 left promiscuous mode [ 90.805640][ T4369] usb 2-1: USB disconnect, device number 5 [ 91.170068][ T4749] device syzkaller0 entered promiscuous mode [ 91.279990][ T4751] fuse: Bad value for 'fd' [ 91.388566][ T4753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.133'. [ 91.487462][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 91.772314][ T4767] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 91.801920][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 91.816715][ T4767] process 'syz.0.136' launched './file0' with NULL argv: empty string added [ 91.846230][ T4770] device erspan0 entered promiscuous mode [ 91.875373][ T4770] device erspan0 left promiscuous mode [ 91.891737][ T4767] Zero length message leads to an empty skb [ 92.157925][ T4779] device syzkaller0 entered promiscuous mode [ 92.360826][ T4784] fuse: Bad value for 'fd' [ 92.368862][ T4369] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.433752][ T4785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.137'. [ 92.560665][ T4369] usb 1-1: Using ep0 maxpacket: 8 [ 92.582994][ T4369] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.601713][ T4369] usb 1-1: config 179 has no interface number 0 [ 92.633377][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 92.667549][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 92.696250][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.727694][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 92.751157][ T4369] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.804427][ T4369] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 92.835014][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.873835][ T4777] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.132233][ T4369] usb 1-1: USB disconnect, device number 4 [ 93.138138][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 93.138185][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 93.813146][ T4806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'. [ 93.925630][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 94.188862][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.392031][ T14] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 94.409231][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.453242][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.507086][ T4820] device syzkaller0 entered promiscuous mode [ 94.508495][ T14] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 94.551324][ T14] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 94.567079][ T14] usb 3-1: Manufacturer: syz [ 94.583117][ T14] usb 3-1: config 0 descriptor?? [ 94.603874][ T14] igorplugusb 3-1:0.0: incorrect number of endpoints [ 95.054691][ T4840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.161'. [ 95.372268][ T14] usb 3-1: USB disconnect, device number 3 [ 95.976181][ T4859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.162'. [ 97.251297][ T4874] device syzkaller0 entered promiscuous mode [ 97.809347][ T4888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'. [ 98.150031][ T4323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.184432][ T4902] netlink: 'syz.0.179': attribute type 1 has an invalid length. [ 98.225423][ T4902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.244165][ T4906] fuse: Bad value for 'fd' [ 98.253825][ T4902] bond1: (slave gretap1): making interface the new active one [ 98.267436][ T4902] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 98.289162][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 98.355444][ T4323] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 98.370315][ T4323] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.395434][ T4323] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 98.414727][ T4323] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 98.429030][ T4902] syz.0.179 (4902) used greatest stack depth: 20528 bytes left [ 98.477366][ T4323] usb 4-1: Manufacturer: syz [ 98.498072][ T4323] usb 4-1: config 0 descriptor?? [ 98.514537][ T4323] igorplugusb 4-1:0.0: incorrect number of endpoints [ 98.538871][ T4312] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.750775][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.788657][ T4312] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.858360][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.869853][ T4918] device syzkaller0 entered promiscuous mode [ 98.952333][ T4312] usb 3-1: config 0 descriptor?? [ 99.157591][ T4323] usb 4-1: USB disconnect, device number 2 [ 99.373033][ T4312] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 99.410653][ T4312] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input6 [ 99.604676][ T4312] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 99.781825][ T4312] usb 3-1: USB disconnect, device number 4 [ 99.981605][ T4931] fido_id[4931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 100.294208][ T4938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.187'. [ 100.365398][ T4945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.191'. [ 100.996193][ T4966] capability: warning: `syz.1.197' uses deprecated v2 capabilities in a way that may be insecure [ 101.119501][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 101.490941][ T4312] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.684122][ T4312] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 101.814716][ T4312] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.851464][ T4312] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 101.877047][ T4312] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 101.903739][ T4312] usb 5-1: Manufacturer: syz [ 101.923921][ T4312] usb 5-1: config 0 descriptor?? [ 101.947222][ T4312] igorplugusb 5-1:0.0: incorrect number of endpoints [ 102.258882][ T4313] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 102.428895][ T4313] usb 1-1: device descriptor read/64, error -71 [ 102.547272][ T4316] usb 5-1: USB disconnect, device number 6 [ 102.708804][ T4313] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 102.868954][ T4313] usb 1-1: device descriptor read/64, error -71 [ 102.989135][ T4313] usb usb1-port1: attempt power cycle [ 103.399986][ T4313] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 103.439921][ T4313] usb 1-1: device descriptor read/8, error -71 [ 103.489439][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.718937][ T4313] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 103.753258][ T4313] usb 1-1: device descriptor read/8, error -71 [ 103.879841][ T4313] usb usb1-port1: unable to enumerate USB device [ 105.158215][ T5031] device vlan2 entered promiscuous mode [ 105.182872][ T5031] device veth0_virt_wifi entered promiscuous mode [ 105.195673][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 105.353892][ T5033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.217'. [ 105.589648][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 106.522912][ T5070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.227'. [ 107.219201][ T4314] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 107.314366][ T5075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 107.443252][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.474692][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.489248][ T4314] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 107.503657][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.518422][ T4314] usb 4-1: config 0 descriptor?? [ 107.798825][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.934133][ T4314] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 107.945700][ T4314] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 107.963184][ T4314] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 107.983649][ T4314] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 108.000227][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.013643][ T4314] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 108.020982][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.033193][ T4314] elan 0003:04F3:0755.0003: failed to start in urb: -90 [ 108.044774][ T14] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 108.054692][ T4314] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 108.066091][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.079800][ T14] usb 1-1: config 0 descriptor?? [ 108.134214][ T4314] usb 4-1: USB disconnect, device number 4 [ 108.207572][ T5080] fido_id[5080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 108.490817][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.510635][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.532531][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 108.542362][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 108.579008][ T14] usb 1-1: USB disconnect, device number 9 [ 109.780073][ T14] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 109.897754][ T5129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 109.970397][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.995871][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.018839][ T14] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 110.028183][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.039119][ T14] usb 5-1: config 0 descriptor?? [ 110.276388][ T5144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'. [ 110.307628][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 110.434163][ T4316] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.452229][ T14] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 110.464763][ T14] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 110.498646][ T14] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 110.516605][ T14] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 110.523745][ T14] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 110.533480][ T14] elan 0003:04F3:0755.0004: failed to start in urb: -90 [ 110.542860][ T14] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 110.644933][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.671334][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.695746][ T4316] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 110.705254][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.716359][ T22] usb 5-1: USB disconnect, device number 7 [ 110.724887][ T4316] usb 2-1: config 0 descriptor?? [ 110.936303][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.946596][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.961452][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.970262][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.170566][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 111.184996][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.195078][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.414818][ T4316] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 111.428629][ T4316] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 111.677704][ T4316] cp2112 0003:10C4:EA90.0005: error requesting version [ 111.882659][ T4316] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32 [ 112.098340][ T14] usb 2-1: USB disconnect, device number 6 [ 112.251460][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 112.365097][ T4316] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 112.444189][ T48] Bluetooth: Frame is too long (len 22, expected len 4) [ 112.560681][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.571990][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.582178][ T4316] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 112.591479][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.602025][ T4316] usb 5-1: config 0 descriptor?? [ 113.011882][ T4316] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 113.019404][ T4316] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 113.043490][ T4316] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 113.057373][ T4316] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 113.075289][ T4316] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 113.085124][ T4316] elan 0003:04F3:0755.0006: failed to start in urb: -90 [ 113.095021][ T4316] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 113.266344][ T4316] usb 5-1: USB disconnect, device number 8 [ 114.708882][ T4316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.878513][ T5276] device batadv0 entered promiscuous mode [ 114.922483][ T4316] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 114.936514][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.953765][ T4316] usb 4-1: Product: syz [ 114.964199][ T4316] usb 4-1: Manufacturer: syz [ 114.974841][ T4316] usb 4-1: SerialNumber: syz [ 115.128994][ T4353] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 115.191262][ T5285] device syzkaller0 entered promiscuous mode [ 115.224167][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 115.249896][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 115.277084][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 115.303287][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 115.322292][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 115.334827][ T4353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.352060][ T4353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.370968][ T4353] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 115.380658][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.393235][ T4353] usb 1-1: config 0 descriptor?? [ 115.401486][ T4316] lan78xx: probe of 4-1:1.0 failed with error -71 [ 115.428017][ T4316] usb 4-1: USB disconnect, device number 5 [ 115.812958][ T4353] usbhid 1-1:0.0: can't add hid device: -71 [ 115.828912][ T4353] usbhid: probe of 1-1:0.0 failed with error -71 [ 115.845811][ T4353] usb 1-1: USB disconnect, device number 10 [ 115.958637][ T5297] kvm [5296]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 115.977338][ T5297] kvm [5296]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 117.836660][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 117.954526][ T5332] device syzkaller0 entered promiscuous mode [ 118.079030][ T4353] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.238860][ T4316] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.268855][ T4353] usb 2-1: Using ep0 maxpacket: 16 [ 118.276970][ T4353] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 118.302774][ T4353] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.325392][ T4353] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.357355][ T4353] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.379611][ T4353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.388469][ T4353] usb 2-1: Product: syz [ 118.393075][ T4353] usb 2-1: Manufacturer: syz [ 118.397893][ T4353] usb 2-1: SerialNumber: syz [ 118.429225][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 118.437267][ T4316] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 118.453346][ T4316] usb 3-1: config 0 has no interface number 0 [ 118.471007][ T4316] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 118.484440][ T4316] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 118.494394][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.507671][ T4316] usb 3-1: Product: syz [ 118.512233][ T4316] usb 3-1: Manufacturer: syz [ 118.518153][ T4316] usb 3-1: SerialNumber: syz [ 118.553022][ T4316] usb 3-1: config 0 descriptor?? [ 118.560750][ T5334] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.766120][ T5351] binder: BINDER_SET_CONTEXT_MGR already set [ 118.776169][ T5351] binder: 5350:5351 ioctl 4018620d 200000004a80 returned -16 [ 118.780219][ T5334] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.819344][ T4353] usb 2-1: 0:2 : does not exist [ 118.888865][ T4315] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.113905][ T4315] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 119.123849][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.143715][ T4315] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 119.153814][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.162337][ T4315] usb 5-1: Product: syz [ 119.175915][ T4315] usb 5-1: Manufacturer: syz [ 119.198966][ T14] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 119.215257][ T4315] usb 5-1: SerialNumber: syz [ 119.234053][ T4315] usb 5-1: config 0 descriptor?? [ 119.256075][ T4315] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 119.282787][ T4315] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 119.401785][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.423694][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.475093][ T14] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 119.498912][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.508928][ T14] usb 4-1: config 0 descriptor?? [ 119.644238][ T4323] usb 2-1: USB disconnect, device number 7 [ 119.923852][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 119.935282][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 119.965783][ T14] usb 4-1: USB disconnect, device number 6 [ 120.309884][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 120.560827][ T5361] device syzkaller0 entered promiscuous mode [ 121.786930][ T4314] usb 5-1: USB disconnect, device number 9 [ 121.845406][ T4316] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 121.868180][ T4316] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 121.889982][ T4316] asix: probe of 3-1:0.188 failed with error -71 [ 121.917393][ T4316] usb 3-1: USB disconnect, device number 5 [ 123.855998][ T5375] device syzkaller0 entered promiscuous mode [ 123.873006][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 124.378792][ T4323] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 124.580558][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.617587][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.694713][ T4323] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 124.813702][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.835500][ T5428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.348'. [ 124.867203][ T4323] usb 5-1: config 0 descriptor?? [ 125.246104][ T5423] syz.3.348 (5423) used greatest stack depth: 19856 bytes left [ 125.305474][ T4323] usbhid 5-1:0.0: can't add hid device: -71 [ 125.319016][ T4323] usbhid: probe of 5-1:0.0 failed with error -71 [ 125.355734][ T4323] usb 5-1: USB disconnect, device number 10 [ 126.025002][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 126.148239][ T5444] device syzkaller0 entered promiscuous mode [ 126.400920][ T5453] tipc: Started in network mode [ 126.424171][ T5453] tipc: Node identity 1a0814e9c951, cluster identity 4711 [ 126.457982][ T5453] tipc: Enabled bearer , priority 0 [ 126.484632][ T5455] device syzkaller0 entered promiscuous mode [ 126.593137][ T5455] tipc: Resetting bearer [ 126.634163][ T5452] tipc: Resetting bearer [ 126.665623][ T5452] tipc: Disabling bearer [ 127.328987][ T4323] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 127.492374][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 127.531763][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.558031][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.623856][ T4323] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 127.675686][ T5492] loop7: detected capacity change from 0 to 7 [ 127.690707][ T4437] Dev loop7: unable to read RDB block 7 [ 127.698046][ T4437] loop7: unable to read partition table [ 127.698042][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.716269][ T4437] loop7: partition table beyond EOD, truncated [ 127.727109][ T4323] usb 1-1: config 0 descriptor?? [ 127.743835][ T5492] Dev loop7: unable to read RDB block 7 [ 127.845954][ T5492] loop7: unable to read partition table [ 127.877126][ T5492] loop7: partition table beyond EOD, truncated [ 127.928462][ T5492] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 128.033509][ T3637] Dev loop7: unable to read RDB block 7 [ 128.045331][ T3637] loop7: unable to read partition table [ 128.079074][ T3637] loop7: partition table beyond EOD, truncated [ 128.095111][ T5499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 128.172583][ T4323] usbhid 1-1:0.0: can't add hid device: -71 [ 128.182081][ T4323] usbhid: probe of 1-1:0.0 failed with error -71 [ 128.221295][ T4323] usb 1-1: USB disconnect, device number 11 [ 129.192968][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 129.202775][ T4315] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.400689][ T4315] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.428342][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.466636][ T4315] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.477971][ T5519] fuse: Unknown parameter 'user_id00000000000000000000' [ 129.488223][ T4315] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.518275][ T4315] usb 4-1: Manufacturer: syz [ 129.545412][ T4315] usb 4-1: config 0 descriptor?? [ 129.769823][ T4315] rc_core: IR keymap rc-hauppauge not found [ 129.778086][ T4315] Registered IR keymap rc-empty [ 129.814177][ T4315] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 129.868674][ T4315] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 130.477431][ T5548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'. [ 130.538808][ T4315] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 130.717821][ T4369] usb 4-1: USB disconnect, device number 7 [ 130.780511][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.823186][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.868263][ T4315] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 130.906662][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.947563][ T4315] usb 2-1: config 0 descriptor?? [ 130.989428][ T5555] fuse: Bad value for 'fd' [ 131.320067][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 131.360805][ T4315] usbhid 2-1:0.0: can't add hid device: -71 [ 131.366875][ T4315] usbhid: probe of 2-1:0.0 failed with error -71 [ 131.420269][ T4315] usb 2-1: USB disconnect, device number 8 [ 131.622449][ T5562] fuse: Unknown parameter 'user_id00000000000000000000' [ 131.703335][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 132.105668][ T5589] fuse: Bad value for 'fd' [ 132.151602][ T5588] binder: BINDER_SET_CONTEXT_MGR already set [ 132.157637][ T5588] binder: 5586:5588 ioctl 4018620d 200000004a80 returned -16 [ 132.226452][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 132.388956][ T4315] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.455480][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 132.598057][ T4315] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 132.607224][ T5612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.413'. [ 132.626247][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.654692][ T4315] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 132.685430][ T4315] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 132.707550][ T4315] usb 5-1: Manufacturer: syz [ 132.735878][ T4315] usb 5-1: config 0 descriptor?? [ 132.759130][ T4353] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.842497][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848938][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.919100][ T4315] rc_core: IR keymap rc-hauppauge not found [ 132.925587][ T4315] Registered IR keymap rc-empty [ 132.939749][ T4315] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 132.968864][ T4353] usb 2-1: Using ep0 maxpacket: 32 [ 132.976341][ T4353] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.996288][ T4315] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 133.009055][ T4353] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 133.038779][ T4353] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 133.057424][ T4353] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 133.075987][ T4316] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 133.110000][ T4353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.138535][ T4353] usb 2-1: Product: syz [ 133.144943][ T4353] usb 2-1: Manufacturer: syz [ 133.154833][ T4353] usb 2-1: SerialNumber: syz [ 133.240336][ T5630] fuse: Bad value for 'fd' [ 133.271167][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.295343][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.324905][ T4316] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 133.351712][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.403118][ T4316] usb 4-1: config 0 descriptor?? [ 133.422633][ T5608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.459097][ T5608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.516068][ T5608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.535780][ T5608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.559663][ T5635] binder: BINDER_SET_CONTEXT_MGR already set [ 133.597348][ T5635] binder: 5633:5635 ioctl 4018620d 200000004a80 returned -16 [ 133.638117][ T4323] usb 5-1: USB disconnect, device number 11 [ 133.667879][ T4353] usb 2-1: USB disconnect, device number 9 [ 133.845363][ T4316] usbhid 4-1:0.0: can't add hid device: -71 [ 133.854385][ T4316] usbhid: probe of 4-1:0.0 failed with error -71 [ 133.888182][ T4316] usb 4-1: USB disconnect, device number 8 [ 134.267800][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 134.313996][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 134.518188][ T5654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.430'. [ 135.326530][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 135.973952][ T5698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.443'. [ 136.467078][ T5710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 136.741670][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 136.757755][ T5726] program syz.4.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.779937][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 136.798324][ T5722] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.807611][ T5722] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.816564][ T5722] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.825747][ T5722] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.906731][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 138.725713][ T5726] sched: RT throttling activated [ 138.762480][ T5729] binder: BINDER_SET_CONTEXT_MGR already set [ 139.750049][ T5729] binder: 5728:5729 ioctl 4018620d 200000004a80 returned -16 [ 140.279541][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 140.898465][ T5766] program syz.1.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.367824][ T5776] binder: BINDER_SET_CONTEXT_MGR already set [ 143.374399][ T5776] binder: 5775:5776 ioctl 4018620d 200000004a80 returned -16 [ 143.719144][ T4369] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.892200][ T4369] usb 4-1: device descriptor read/64, error -71 [ 144.178960][ T4369] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.348927][ T4369] usb 4-1: device descriptor read/64, error -71 [ 144.404723][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 144.481876][ T4369] usb usb4-port1: attempt power cycle [ 144.510300][ T5802] device bridge1 entered promiscuous mode [ 144.852262][ T5808] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 144.898819][ T4369] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.955472][ T4369] usb 4-1: device descriptor read/8, error -71 [ 144.982498][ T5810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.484'. [ 145.067735][ T5810] bond1: (slave bridge2): making interface the new active one [ 145.096488][ T5810] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 145.107085][ T5808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 145.171692][ T5808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.228788][ T4369] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.296691][ T4369] usb 4-1: device descriptor read/8, error -71 [ 145.431151][ T4369] usb usb4-port1: unable to enumerate USB device [ 146.116100][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 146.306633][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.309082][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.317075][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.318632][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.319624][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.320976][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.335879][ T5831] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.712450][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 146.933749][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.003079][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.093869][ T5828] device bridge_slave_0 entered promiscuous mode [ 147.156360][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.194128][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.221356][ T5828] device bridge_slave_1 entered promiscuous mode [ 147.357523][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.416129][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.487442][ T5828] team0: Port device team_slave_0 added [ 147.515822][ T5828] team0: Port device team_slave_1 added [ 147.571541][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.596017][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.656920][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.722189][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.754550][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.872510][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.003385][ T5828] device hsr_slave_0 entered promiscuous mode [ 148.064285][ T5828] device hsr_slave_1 entered promiscuous mode [ 148.152065][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.176144][ T5828] Cannot create hsr debugfs directory [ 148.359135][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 148.522368][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 148.698894][ T14] usb 4-1: device descriptor read/64, error -71 [ 148.732917][ T5828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.816361][ T5828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.857969][ T5828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.906649][ T5828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.978823][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 149.108156][ T5866] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 149.149100][ T14] usb 4-1: device descriptor read/64, error -71 [ 149.181759][ T5866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 149.206835][ T5866] bond1: (slave bridge1): making interface the new active one [ 149.267725][ T5866] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 149.268999][ T14] usb usb4-port1: attempt power cycle [ 149.326225][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.350669][ T5866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.499'. [ 149.363119][ T5866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.379872][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.398370][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.421398][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.451863][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.502339][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.539363][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.546791][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.578290][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.618637][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.636920][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.656987][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.664175][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.709386][ T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 149.726625][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.747277][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.761418][ T14] usb 4-1: device descriptor read/8, error -71 [ 149.786985][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.823776][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.866179][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.902025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.922632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.967869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.996797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.021717][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.035369][ T5828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.045958][ T14] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 150.057696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.073897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.090016][ T14] usb 4-1: device descriptor read/8, error -71 [ 150.230446][ T14] usb usb4-port1: unable to enumerate USB device [ 150.426801][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.438850][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 150.441066][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.468289][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.745289][ T5889] vivid-003: ================= START STATUS ================= [ 150.818914][ T5889] vivid-003: Radio HW Seek Mode: Bounded [ 150.840059][ T5889] vivid-003: Radio Programmable HW Seek: false [ 150.846605][ T5889] vivid-003: RDS Rx I/O Mode: Block I/O [ 150.877672][ T5889] vivid-003: Generate RBDS Instead of RDS: false [ 150.917780][ T5889] vivid-003: RDS Reception: true [ 150.929696][ T5889] vivid-003: RDS Program Type: 0 inactive [ 150.940977][ T5889] vivid-003: RDS PS Name: inactive [ 150.947931][ T5889] vivid-003: RDS Radio Text: inactive [ 150.959789][ T5889] vivid-003: RDS Traffic Announcement: false inactive [ 150.977050][ T5889] vivid-003: RDS Traffic Program: false inactive [ 150.989803][ T5889] vivid-003: RDS Music: false inactive [ 150.997735][ T5889] vivid-003: ================== END STATUS ================== [ 151.405625][ T5912] IPVS: sed: FWM 3 0x00000003 - no destination available [ 151.686596][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.705676][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.773625][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.826661][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.867203][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.916774][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.959117][ T5828] device veth0_vlan entered promiscuous mode [ 152.021891][ T5828] device veth1_vlan entered promiscuous mode [ 152.155641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.187445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.218251][ T5828] device veth0_macvtap entered promiscuous mode [ 152.241102][ T5828] device veth1_macvtap entered promiscuous mode [ 152.276334][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.307804][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.351269][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.372313][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.394900][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.414799][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.425791][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.436613][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.446738][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.463015][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.496315][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.524069][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 152.539193][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.547517][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.579474][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.622917][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.665090][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.683521][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.708768][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.721340][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.731859][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.743414][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.753832][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.771514][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.786306][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.798904][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.811358][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.859936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.869766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.879521][ T14] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 152.890039][ T5828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.912823][ T5828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.950372][ T5952] vivid-001: ================= START STATUS ================= [ 152.958206][ T5952] vivid-001: Radio HW Seek Mode: Bounded [ 152.966030][ T5828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.975117][ T5952] vivid-001: Radio Programmable HW Seek: [ 152.982960][ T5828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.049319][ T14] usb 5-1: device descriptor read/64, error -71 [ 153.068101][ T5952] false [ 153.075531][ T5952] vivid-001: RDS Rx I/O Mode: Block I/O [ 153.147953][ T5952] vivid-001: Generate RBDS Instead of RDS: false [ 153.172848][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.186585][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.199382][ T5952] vivid-001: RDS Reception: true [ 153.206077][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.262622][ T5952] vivid-001: RDS Program Type: 0 inactive [ 153.288115][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.304551][ T5952] vivid-001: RDS PS Name: inactive [ 153.311320][ T5952] vivid-001: RDS Radio Text: inactive [ 153.319507][ T5952] vivid-001: RDS Traffic Announcement: false inactive [ 153.328727][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.329959][ T14] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 153.356805][ T5952] vivid-001: RDS Traffic Program: false inactive [ 153.361894][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.404847][ T5952] vivid-001: RDS Music: false inactive [ 153.441411][ T5952] vivid-001: ================== END STATUS ================== [ 153.549073][ T14] usb 5-1: device descriptor read/64, error -71 [ 153.679043][ T14] usb usb5-port1: attempt power cycle [ 153.803708][ T5974] fuse: Unknown parameter '0x0000000000000004' [ 154.047795][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'. [ 154.100006][ T14] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 154.160652][ T14] usb 5-1: device descriptor read/8, error -71 [ 154.196467][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.530'. [ 154.428836][ T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 154.459012][ T4312] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.469406][ T14] usb 5-1: device descriptor read/8, error -71 [ 154.588965][ T14] usb usb5-port1: unable to enumerate USB device [ 154.599238][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 154.669007][ T4312] usb 1-1: Using ep0 maxpacket: 32 [ 154.677283][ T4312] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 154.688307][ T4312] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 154.700470][ T4312] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 154.719983][ T4312] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 154.726443][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 154.747709][ T4312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.780667][ T4312] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 154.800043][ T4312] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 154.820070][ T4312] usb 1-1: Product: syz [ 154.828979][ T4312] usb 1-1: Manufacturer: syz [ 154.838130][ T4312] usb 1-1: SerialNumber: syz [ 154.855660][ T4312] usb 1-1: config 0 descriptor?? [ 154.890683][ T4312] ldusb 1-1:0.0: Interrupt in endpoint not found [ 155.129280][ T6009] fuse: Unknown parameter '0x0000000000000004' [ 155.239267][ T26] audit: type=1326 audit(1775817280.076:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.292611][ T26] audit: type=1326 audit(1775817280.116:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.330699][ T6015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.542'. [ 155.384383][ T26] audit: type=1326 audit(1775817280.116:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.455256][ T26] audit: type=1326 audit(1775817280.116:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.552193][ T26] audit: type=1326 audit(1775817280.116:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.606214][ T26] audit: type=1326 audit(1775817280.116:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.628966][ T26] audit: type=1326 audit(1775817280.446:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.678552][ T26] audit: type=1326 audit(1775817280.446:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.706920][ T26] audit: type=1326 audit(1775817280.506:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.739417][ T26] audit: type=1326 audit(1775817280.506:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601e39c819 code=0x7ffc0000 [ 155.877817][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 157.826907][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 158.041621][ T4323] usb 1-1: USB disconnect, device number 12 [ 158.211006][ T6049] fuse: Unknown parameter 'fd0x0000000000000004' [ 158.708860][ T4353] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.888788][ T4353] usb 2-1: device descriptor read/64, error -71 [ 159.158814][ T4353] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.319277][ T4353] usb 2-1: device descriptor read/64, error -71 [ 159.349421][ T6074] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 159.398416][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.561'. [ 159.439187][ T4353] usb usb2-port1: attempt power cycle [ 159.470456][ T6074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.560'. [ 159.691142][ T6074] bond1: (slave bridge1): making interface the new active one [ 159.730815][ T6074] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 159.757993][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 159.848789][ T4353] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.892668][ T4353] usb 2-1: device descriptor read/8, error -71 [ 159.928840][ T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 159.974638][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.566'. [ 160.020888][ T4316] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.130541][ T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 160.155901][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.172958][ T22] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.184140][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.193812][ T4353] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 160.214625][ T22] usb 5-1: config 0 descriptor?? [ 160.229560][ T4353] usb 2-1: device descriptor read/8, error -71 [ 160.236860][ T6083] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 160.245160][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.256550][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.271028][ T22] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 160.291992][ T4316] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 160.329492][ T4316] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 160.337546][ T4316] usb 6-1: Manufacturer: syz [ 160.349006][ T4353] usb usb2-port1: unable to enumerate USB device [ 160.370432][ T4316] usb 6-1: config 0 descriptor?? [ 160.414459][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 160.658886][ T4353] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 160.840601][ T4353] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.858917][ T4353] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.874236][ T4353] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.893803][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.902554][ T4353] usb 1-1: SerialNumber: syz [ 161.130509][ T4353] usb 1-1: 0:2 : does not exist [ 161.135505][ T4353] usb 1-1: unit 255 not found! [ 161.146986][ T4353] usb 1-1: 5:0: cannot get min/max values for control 16 (id 5) [ 161.160091][ T4353] usb 1-1: 5:0: cannot get min/max values for control 17 (id 5) [ 161.189566][ T4316] uclogic 0003:256C:006D.0007: interface is invalid, ignoring [ 161.215882][ T4316] usb 6-1: USB disconnect, device number 2 [ 161.233448][ T4353] usb 1-1: USB disconnect, device number 13 [ 161.260694][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.535761][ T6116] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 161.578511][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.576'. [ 161.599648][ T6116] bond2: (slave bridge3): making interface the new active one [ 161.608484][ T6116] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 161.636036][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'. [ 161.791448][ T6120] netlink: 104 bytes leftover after parsing attributes in process `syz.0.578'. [ 161.846322][ T6122] netlink: 16 bytes leftover after parsing attributes in process `syz.5.577'. [ 162.346913][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 162.486619][ T6147] vivid-001: ================= START STATUS ================= [ 162.560461][ T6147] vivid-001: Radio HW Seek Mode: Bounded [ 162.572560][ T6147] vivid-001: Radio Programmable HW Seek: false [ 162.594842][ T6147] vivid-001: RDS Rx I/O Mode: Block I/O [ 162.610063][ T22] usb 5-1: USB disconnect, device number 16 [ 162.658898][ T4316] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 162.692944][ T6147] vivid-001: Generate RBDS Instead of RDS: false [ 162.727490][ T6153] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 162.776002][ T6153] bond2: (slave bridge2): making interface the new active one [ 162.787942][ T6153] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 162.797018][ T6147] vivid-001: RDS Reception: true [ 162.819948][ T6147] vivid-001: RDS Program Type: 0 inactive [ 162.832703][ T6147] vivid-001: RDS PS Name: inactive [ 162.849800][ T4316] usb 2-1: no configurations [ 162.854474][ T4316] usb 2-1: can't read configurations, error -22 [ 162.879120][ T6147] vivid-001: RDS Radio Text: inactive [ 162.951666][ T6147] vivid-001: RDS Traffic Announcement: false inactive [ 162.991120][ T6147] vivid-001: RDS Traffic Program: false inactive [ 162.998079][ T6147] vivid-001: RDS Music: false inactive [ 163.007710][ T6147] vivid-001: ================== END STATUS ================== [ 163.018827][ T4316] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 163.209561][ T4316] usb 2-1: no configurations [ 163.214283][ T4316] usb 2-1: can't read configurations, error -22 [ 163.249692][ T4316] usb usb2-port1: attempt power cycle [ 163.698791][ T4316] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 163.752493][ T4316] usb 2-1: no configurations [ 163.757248][ T4316] usb 2-1: can't read configurations, error -22 [ 163.924013][ T6184] netlink: 'syz.5.601': attribute type 1 has an invalid length. [ 163.928855][ T4316] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 163.999780][ T4316] usb 2-1: no configurations [ 164.013734][ T4316] usb 2-1: can't read configurations, error -22 [ 164.040604][ T4316] usb usb2-port1: unable to enumerate USB device [ 164.197203][ T6190] netlink: 'syz.5.603': attribute type 1 has an invalid length. [ 164.214411][ T6190] device syzkaller0 entered promiscuous mode [ 164.428791][ T4316] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 164.476966][ T6195] __nla_validate_parse: 5 callbacks suppressed [ 164.476985][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.5.604'. [ 164.618910][ T4316] usb 1-1: Using ep0 maxpacket: 32 [ 164.625840][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 164.677568][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 164.709419][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 164.774848][ T4316] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 164.818530][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.845775][ T4316] usb 1-1: Product: syz [ 164.858795][ T4316] usb 1-1: Manufacturer: syz [ 164.878033][ T4316] usb 1-1: SerialNumber: syz [ 164.908583][ T4316] usb 1-1: config 0 descriptor?? [ 165.535869][ T6221] input: syz0 as /devices/virtual/input/input9 [ 165.759634][ T6224] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 165.844363][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.614'. [ 165.865566][ T6224] bond3: (slave bridge4): making interface the new active one [ 165.875394][ T6224] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 165.927338][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 166.098980][ T4323] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 166.112151][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.616'. [ 166.305528][ T4323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.333956][ T4323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.380286][ T4323] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 166.418382][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.462499][ T4323] usb 6-1: config 0 descriptor?? [ 166.779753][ T6258] vivid-003: ================= START STATUS ================= [ 166.806175][ T6258] vivid-003: Radio HW Seek Mode: Bounded [ 166.816784][ T6258] vivid-003: Radio Programmable HW Seek: false [ 166.826584][ T6258] vivid-003: RDS Rx I/O Mode: Block I/O [ 166.837941][ T6258] vivid-003: Generate RBDS Instead of RDS: false [ 166.845879][ T6258] vivid-003: RDS Reception: true [ 166.851622][ T6258] vivid-003: RDS Program Type: 0 inactive [ 166.857602][ T6258] vivid-003: RDS PS Name: inactive [ 166.863690][ T6258] vivid-003: RDS Radio Text: inactive [ 166.869742][ T6258] vivid-003: RDS Traffic Announcement: false inactive [ 166.877175][ T6258] vivid-003: RDS Traffic Program: false inactive [ 166.884346][ T6258] vivid-003: RDS Music: false inactive [ 166.890915][ T6258] vivid-003: ================== END STATUS ================== [ 166.905784][ T4323] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 166.915503][ T4323] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 166.928830][ T4323] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 166.946029][ T4323] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 166.956129][ T4323] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 166.982642][ T4323] elan 0003:04F3:0755.0008: failed to start in urb: -90 [ 167.003989][ T4323] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 167.110788][ T4315] usb 6-1: USB disconnect, device number 3 [ 167.154908][ T6267] fido_id[6267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 167.219181][ T4312] usb 1-1: USB disconnect, device number 14 [ 168.195126][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.626'. [ 168.606250][ T6310] vivid-000: ================= START STATUS ================= [ 168.705967][ T6310] vivid-000: Radio HW Seek Mode: Bounded [ 168.788140][ T6310] vivid-000: Radio Programmable HW Seek: false [ 168.815992][ T6310] vivid-000: RDS Rx I/O Mode: Block I/O [ 168.842994][ T6310] vivid-000: Generate RBDS Instead of RDS: false [ 168.876285][ T6310] vivid-000: RDS Reception: true [ 168.894433][ T6310] vivid-000: RDS Program Type: 0 inactive [ 168.914628][ T6310] vivid-000: RDS PS Name: inactive [ 168.970528][ T6310] vivid-000: RDS Radio Text: inactive [ 168.986911][ T6310] vivid-000: RDS Traffic Announcement: false inactive [ 169.023937][ T6310] vivid-000: RDS Traffic Program: false inactive [ 169.056116][ T6310] vivid-000: RDS Music: false inactive [ 169.084436][ T6310] vivid-000: ================== END STATUS ================== [ 169.468969][ T4313] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 169.662413][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.738847][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.798917][ T4313] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 169.843355][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.887434][ T4313] usb 4-1: config 0 descriptor?? [ 170.321450][ T4313] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 170.351222][ T4313] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 170.410596][ T4313] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 170.458402][ T4313] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 170.497764][ T4313] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 170.528271][ T4313] elan 0003:04F3:0755.0009: failed to start in urb: -90 [ 170.578630][ T4313] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 170.676991][ T4313] usb 4-1: USB disconnect, device number 17 [ 170.906374][ T6355] fido_id[6355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 171.141559][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'. [ 171.231319][ T6369] binder: 6368:6369 ioctl 4018620d 0 returned -22 [ 171.520481][ T6374] IPv6: sit1: Disabled Multicast RS [ 171.734529][ T6381] dlm: plock device version mismatch: kernel (1.2.0), user (1684632162.1935631719.1702257004) [ 172.068909][ T4312] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 172.278889][ T4312] usb 6-1: Using ep0 maxpacket: 32 [ 172.290589][ T4312] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 172.299304][ T4312] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 172.317318][ T4312] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 172.384214][ T4312] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 172.422116][ T4312] usb 6-1: config 0 interface 0 has no altsetting 0 [ 172.468909][ T4312] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 172.498268][ T4312] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 172.529057][ T4312] usb 6-1: Product: syz [ 172.552199][ T4312] usb 6-1: Manufacturer: syz [ 172.570828][ T4312] usb 6-1: SerialNumber: syz [ 172.598195][ T4312] usb 6-1: config 0 descriptor?? [ 172.622792][ T4312] ldusb 6-1:0.0: Interrupt in endpoint not found [ 172.730776][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 172.748805][ T4314] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 172.881794][ T6416] binder: 6414:6416 ioctl 4018620d 0 returned -22 [ 172.950512][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.987451][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.006981][ T4314] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 173.017644][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.042809][ T4314] usb 4-1: config 0 descriptor?? [ 173.072829][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 173.072849][ T26] audit: type=1326 audit(1775817297.916:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 173.276159][ T26] audit: type=1326 audit(1775817297.966:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 173.453269][ T4314] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 173.460948][ T26] audit: type=1326 audit(1775817297.966:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 173.493705][ T4314] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 173.509350][ T4314] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 173.530396][ T4314] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 173.569022][ T4314] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 173.575202][ T26] audit: type=1326 audit(1775817297.976:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 173.589267][ T4314] elan 0003:04F3:0755.000A: failed to start in urb: -90 [ 173.622658][ T4314] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 173.699847][ T4314] usb 4-1: USB disconnect, device number 18 [ 173.859740][ T26] audit: type=1326 audit(1775817298.016:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 174.053198][ T4330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.067424][ T26] audit: type=1326 audit(1775817298.056:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 174.146947][ T26] audit: type=1326 audit(1775817298.876:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 174.174677][ T6438] fido_id[6438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 174.246975][ T4330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.322401][ T26] audit: type=1326 audit(1775817298.936:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 174.501455][ T26] audit: type=1326 audit(1775817299.206:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 174.519649][ T4330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.565739][ T4330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.643396][ T26] audit: type=1326 audit(1775817299.206:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c939c819 code=0x7ffc0000 [ 174.699065][ T4316] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 174.856963][ T4330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.938655][ T4330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.961076][ T4316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.994797][ T4316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.030041][ T4316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 175.071070][ T6461] dlm: plock device version mismatch: kernel (1.2.0), user (1684632162.1935631719.1702257004) [ 175.098148][ T4316] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 175.167768][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.200589][ T4330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.228169][ T4330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.246351][ T6449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.268976][ T4316] hub 4-1:1.0: bad descriptor, ignoring hub [ 175.288928][ T4316] hub: probe of 4-1:1.0 failed with error -5 [ 175.315141][ T4316] cdc_wdm 4-1:1.0: skipping garbage [ 175.333982][ T4316] cdc_wdm 4-1:1.0: skipping garbage [ 175.387251][ T4316] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 175.440255][ T4316] cdc_wdm 4-1:1.0: Unknown control protocol [ 175.800772][ T4316] usb 4-1: USB disconnect, device number 19 [ 176.182438][ T6471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.666'. [ 176.562613][ T6490] binder: 6489:6490 ioctl 4018620d 0 returned -22 [ 177.132244][ T4314] usb 6-1: USB disconnect, device number 4 [ 177.257241][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 177.368908][ T22] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 177.521163][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'. [ 177.567298][ T22] usb 2-1: no configurations [ 177.572485][ T22] usb 2-1: can't read configurations, error -22 [ 177.749019][ T22] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 177.868838][ T4315] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 177.939361][ T22] usb 2-1: no configurations [ 177.944112][ T22] usb 2-1: can't read configurations, error -22 [ 177.978882][ T22] usb usb2-port1: attempt power cycle [ 178.048744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 178.068746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 178.078731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 178.088724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 178.098725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 178.108729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 178.118720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 178.128723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 178.138720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 178.148721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 178.166001][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.205466][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.284012][ T4315] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 178.306256][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.334276][ T4315] usb 5-1: config 0 descriptor?? [ 178.396566][ T6528] netlink: 132 bytes leftover after parsing attributes in process `syz.5.678'. [ 178.448862][ T22] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 178.520215][ T22] usb 2-1: no configurations [ 178.524906][ T22] usb 2-1: can't read configurations, error -22 [ 178.563999][ T4330] device hsr_slave_0 left promiscuous mode [ 178.572905][ T4330] device hsr_slave_1 left promiscuous mode [ 178.591996][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.614429][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.629839][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.644214][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.688301][ T4330] device bridge_slave_1 left promiscuous mode [ 178.694695][ T22] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 178.722658][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.741966][ T22] usb 2-1: no configurations [ 178.754235][ T22] usb 2-1: can't read configurations, error -22 [ 178.780153][ T22] usb usb2-port1: unable to enumerate USB device [ 178.789898][ T4315] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 178.810423][ T4315] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 178.837684][ T4315] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 178.844974][ T4315] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 178.858942][ T4315] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 178.886739][ T4315] elan 0003:04F3:0755.000B: failed to start in urb: -90 [ 178.916970][ T4315] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 178.968598][ T4330] device bridge_slave_0 left promiscuous mode [ 178.992432][ T4315] usb 5-1: USB disconnect, device number 17 [ 178.993305][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.143908][ T4330] device veth1_macvtap left promiscuous mode [ 179.166497][ T4330] device veth0_macvtap left promiscuous mode [ 179.199217][ T4330] device veth1_vlan left promiscuous mode [ 179.205508][ T6538] fido_id[6538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 179.220615][ T4330] device veth0_vlan left promiscuous mode [ 179.404149][ T6540] binder: BINDER_SET_CONTEXT_MGR already set [ 179.417008][ T6540] binder: 6539:6540 ioctl 4018620d 200000004a80 returned -16 [ 180.320481][ T4316] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 180.545171][ T4316] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 180.553448][ T4316] usb 5-1: config 1 has no interface number 0 [ 180.563787][ T4316] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 180.584378][ T4316] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x24, skipping [ 180.710745][ T4316] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.738344][ T4316] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 180.748035][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.757005][ T4316] usb 5-1: Product: syz [ 180.757184][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 180.769461][ T4316] usb 5-1: Manufacturer: syz [ 180.774489][ T4316] usb 5-1: SerialNumber: syz [ 180.808992][ T6555] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 180.851237][ T6555] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 180.886619][ T4316] usb 5-1: Expected 3 endpoints, found: 2 [ 180.916188][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 181.110623][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.206041][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.620478][ T4330] bond0 (unregistering): Released all slaves [ 181.776203][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 181.794179][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 181.805448][ T6570] netlink: 132 bytes leftover after parsing attributes in process `syz.1.689'. [ 182.106804][ T6579] binder: BINDER_SET_CONTEXT_MGR already set [ 182.134529][ T6579] binder: 6577:6579 ioctl 4018620d 200000004a80 returned -16 [ 182.568769][ T4313] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 182.781486][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.832780][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.889607][ T4313] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 182.945535][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.996013][ T4313] usb 1-1: config 0 descriptor?? [ 183.239160][ T14] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 183.429635][ T14] usb 2-1: no configurations [ 183.435195][ T14] usb 2-1: can't read configurations, error -22 [ 183.454439][ T4313] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 183.503885][ T4313] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 183.536873][ T4313] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 183.592038][ T4313] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 183.627170][ T4313] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 183.655725][ T4313] elan 0003:04F3:0755.000C: failed to start in urb: -90 [ 183.668742][ T14] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 183.682504][ T4323] usb 5-1: USB disconnect, device number 18 [ 183.704290][ T4313] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 183.727059][ T6617] fuse: Bad value for 'fd' [ 183.757337][ T4313] usb 1-1: USB disconnect, device number 15 [ 183.837325][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 183.860016][ T14] usb 2-1: no configurations [ 183.864951][ T14] usb 2-1: can't read configurations, error -22 [ 183.888053][ T14] usb usb2-port1: attempt power cycle [ 183.973607][ T6619] fido_id[6619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 184.001495][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 184.338982][ T14] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 184.389943][ T14] usb 2-1: no configurations [ 184.398814][ T14] usb 2-1: can't read configurations, error -22 [ 184.403821][ T6636] binder: BINDER_SET_CONTEXT_MGR already set [ 184.454482][ T6636] binder: 6635:6636 ioctl 4018620d 200000004a80 returned -16 [ 184.558877][ T14] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 184.614909][ T14] usb 2-1: no configurations [ 184.639561][ T14] usb 2-1: can't read configurations, error -22 [ 184.668900][ T14] usb usb2-port1: unable to enumerate USB device [ 184.806505][ T6653] tipc: Started in network mode [ 184.817785][ T6653] tipc: Node identity feae0a1c84c3, cluster identity 4711 [ 184.836910][ T6653] tipc: Enabled bearer , priority 0 [ 184.869836][ T6655] device syzkaller0 entered promiscuous mode [ 184.904666][ T6653] tipc: Resetting bearer [ 184.945109][ T6651] tipc: Resetting bearer [ 185.049538][ T6651] tipc: Disabling bearer [ 185.274565][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.714'. [ 185.300140][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 186.318919][ T4316] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 186.452068][ T6695] binder: 6694:6695 ioctl c0306201 0 returned -14 [ 186.550189][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.609280][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.680996][ T4316] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 186.734340][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.759664][ T4316] usb 6-1: config 0 descriptor?? [ 187.178606][ T4316] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 187.231223][ T4316] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 187.238071][ T4316] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 187.248808][ T4316] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 187.256716][ T4316] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 187.264728][ T4316] elan 0003:04F3:0755.000D: failed to start in urb: -90 [ 187.283423][ T4316] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 187.381638][ T4323] usb 6-1: USB disconnect, device number 5 [ 187.596510][ T6714] fido_id[6714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 187.751798][ T6717] tipc: Started in network mode [ 187.793824][ T6717] tipc: Node identity 3a9ac8b2dabb, cluster identity 4711 [ 187.834870][ T6717] tipc: Enabled bearer , priority 0 [ 187.867423][ T6722] device syzkaller0 entered promiscuous mode [ 187.965795][ T6717] tipc: Resetting bearer [ 187.998578][ T6716] tipc: Resetting bearer [ 188.070726][ T6716] tipc: Disabling bearer [ 188.140242][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.5.725'. [ 188.212026][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.725'. [ 188.316686][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 188.739019][ T6752] binder: 6746:6752 ioctl c0306201 0 returned -14 [ 189.202660][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.737'. [ 189.268939][ T4323] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 189.540604][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.572205][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.595514][ T4323] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 189.607824][ T6775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.738'. [ 189.687136][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.739'. [ 189.689617][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.722879][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.739'. [ 189.787645][ T4323] usb 5-1: config 0 descriptor?? [ 190.030538][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.740'. [ 190.219458][ T4323] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 190.250395][ T4323] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 190.270952][ T4323] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 190.300848][ T4323] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 190.313706][ T4323] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 190.345438][ T4323] elan 0003:04F3:0755.000E: failed to start in urb: -90 [ 190.424018][ T4323] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 190.527873][ T4323] usb 5-1: USB disconnect, device number 19 [ 190.909410][ T6800] fido_id[6800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 191.549715][ T6820] binder: 6819:6820 ioctl c0306201 0 returned -14 [ 191.733211][ T4316] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 191.950158][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.000078][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.042423][ T4316] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 192.079704][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.141884][ T4316] usb 5-1: config 0 descriptor?? [ 192.378171][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.413835][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.553021][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.574438][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.698829][ T4312] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 192.748330][ T6851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.752'. [ 192.787667][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.809025][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.963041][ T4312] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.035356][ T4312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.050589][ T4312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.068716][ T4316] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 193.084790][ T4316] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 193.096327][ T4312] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.140246][ T4312] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.154558][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.163327][ T4312] usb 2-1: Product: syz [ 193.167753][ T4312] usb 2-1: Manufacturer: syz [ 193.184397][ T4312] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 193.323290][ T4316] cp2112 0003:10C4:EA90.000F: error requesting version [ 193.532080][ T4353] usb 2-1: USB disconnect, device number 26 [ 193.588821][ T4312] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 193.602229][ T4316] cp2112: probe of 0003:10C4:EA90.000F failed with error -32 [ 193.832319][ T4312] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 193.902854][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.932758][ T4312] usb 1-1: Product: syz [ 193.937834][ T4312] usb 1-1: Manufacturer: syz [ 193.967583][ T4312] usb 1-1: SerialNumber: syz [ 193.986130][ T4353] usb 5-1: USB disconnect, device number 20 [ 194.071472][ T6870] fido_id[6870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 194.223912][ T4312] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 194.261145][ T4312] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 194.284775][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.291255][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.354301][ T4312] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 194.468330][ T4312] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 194.553441][ T4312] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 194.745163][ T4312] lan78xx: probe of 1-1:1.0 failed with error -71 [ 194.827920][ T4312] usb 1-1: USB disconnect, device number 16 [ 195.723656][ T6918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.767'. [ 196.454519][ T6927] device syzkaller0 entered promiscuous mode [ 196.510364][ T6930] device bridge0 entered promiscuous mode [ 196.545643][ T6930] device vlan3 entered promiscuous mode [ 197.771166][ T6957] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 197.863457][ T6957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.775'. [ 197.964241][ T6957] bond2: (slave bridge1): making interface the new active one [ 198.121086][ T6957] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 198.418804][ T4323] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 198.427016][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.778'. [ 198.611164][ T4323] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 198.632514][ T4323] usb 6-1: can't read configurations, error -61 [ 198.788751][ T4323] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 199.030483][ T4323] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 199.048249][ T4323] usb 6-1: can't read configurations, error -61 [ 199.140560][ T4323] usb usb6-port1: attempt power cycle [ 199.588821][ T4323] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 199.631995][ T4323] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 199.663323][ T4323] usb 6-1: can't read configurations, error -61 [ 199.868846][ T4323] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 199.933028][ T4323] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 199.958864][ T4323] usb 6-1: can't read configurations, error -61 [ 199.998904][ T4323] usb usb6-port1: unable to enumerate USB device [ 200.302987][ T7013] binder: BINDER_SET_CONTEXT_MGR already set [ 200.372269][ T7013] binder: 7012:7013 ioctl 4018620d 200000004a80 returned -16 [ 200.452958][ T7016] netlink: 'syz.1.791': attribute type 1 has an invalid length. [ 200.566008][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 200.677781][ T7018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.048887][ T4323] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 202.107561][ T7064] netlink: 132 bytes leftover after parsing attributes in process `syz.4.801'. [ 202.238987][ T4323] usb 4-1: Using ep0 maxpacket: 16 [ 202.249013][ T4323] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 202.305655][ T4323] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 202.341646][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.362806][ T4323] usb 4-1: Product: syz [ 202.367076][ T4323] usb 4-1: Manufacturer: syz [ 202.388855][ T4323] usb 4-1: SerialNumber: syz [ 202.416393][ T4323] usb 4-1: config 0 descriptor?? [ 203.918906][ T4323] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 204.121679][ T4323] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 204.139950][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.148887][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.162673][ T4323] usb 1-1: can't read configurations, error -61 [ 204.378797][ T4323] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 204.580831][ T4323] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 204.631802][ T4323] usb 1-1: can't read configurations, error -61 [ 204.697264][ T4323] usb usb1-port1: attempt power cycle [ 204.751926][ T4314] usb 4-1: USB disconnect, device number 20 [ 204.917350][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.943345][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.158966][ T4323] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 205.231316][ T4323] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 205.257693][ T4323] usb 1-1: can't read configurations, error -61 [ 205.418857][ T4323] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 205.461635][ T4323] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 205.485009][ T4323] usb 1-1: can't read configurations, error -61 [ 205.514662][ T4323] usb usb1-port1: unable to enumerate USB device [ 206.298762][ T7078] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.308765][ T7078] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.317786][ T7078] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.328855][ T7078] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.548637][ T7132] netlink: 132 bytes leftover after parsing attributes in process `syz.4.815'. [ 206.802498][ T7141] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 207.272659][ T7155] netlink: 'syz.5.821': attribute type 1 has an invalid length. [ 207.412056][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.821'. [ 207.493377][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.821'. [ 207.569822][ T7155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.808767][ T22] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 209.020578][ T22] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 209.033903][ T22] usb 6-1: can't read configurations, error -61 [ 209.173031][ T7204] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 209.218801][ T22] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 209.480752][ T22] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 209.495158][ T22] usb 6-1: can't read configurations, error -61 [ 209.556957][ T22] usb usb6-port1: attempt power cycle [ 209.771194][ T7212] netlink: 'syz.3.832': attribute type 58 has an invalid length. [ 209.811168][ T7212] netlink: 'syz.3.832': attribute type 58 has an invalid length. [ 209.998855][ T22] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 210.051585][ T22] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 210.075554][ T22] usb 6-1: can't read configurations, error -61 [ 210.248830][ T22] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 210.311472][ T7225] program syz.4.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.416197][ T22] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 210.448370][ T22] usb 6-1: can't read configurations, error -61 [ 210.458979][ T22] usb usb6-port1: unable to enumerate USB device [ 213.012073][ T7236] tipc: Enabled bearer , priority 0 [ 213.034878][ T7236] device syzkaller0 entered promiscuous mode [ 213.098239][ T7236] tipc: Resetting bearer [ 213.113775][ T7235] tipc: Resetting bearer [ 213.178130][ T7235] tipc: Disabling bearer [ 213.209751][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 214.168324][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 214.417516][ T7270] program syz.3.848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.503996][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 217.946378][ T7306] vivid-003: ================= START STATUS ================= [ 218.050150][ T7306] vivid-003: Radio HW Seek Mode: Bounded [ 218.124965][ T7306] vivid-003: Radio Programmable HW Seek: false [ 218.178849][ T7306] vivid-003: RDS Rx I/O Mode: Block I/O [ 218.197136][ T7306] vivid-003: Generate RBDS Instead of RDS: false [ 218.286826][ T7306] vivid-003: RDS Reception: true [ 218.308888][ T7306] vivid-003: RDS Program Type: 0 inactive [ 218.326616][ T7306] vivid-003: RDS PS Name: inactive [ 218.404602][ T7306] vivid-003: RDS Radio Text: inactive [ 218.435930][ T7306] vivid-003: RDS Traffic Announcement: false inactive [ 218.482057][ T7306] vivid-003: RDS Traffic Program: false inactive [ 218.514968][ T7306] vivid-003: RDS Music: false inactive [ 218.546101][ T7306] vivid-003: ================== END STATUS ================== [ 219.341872][ T7119] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 219.552576][ T7119] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.552603][ T7119] usb 5-1: config 0 has no interfaces? [ 219.589369][ T7119] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 219.589391][ T7119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.589403][ T7119] usb 5-1: Product: syz [ 219.589411][ T7119] usb 5-1: Manufacturer: syz [ 219.589420][ T7119] usb 5-1: SerialNumber: syz [ 219.590537][ T7119] usb 5-1: config 0 descriptor?? [ 220.058840][ T7341] program syz.1.862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.083928][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.865'. [ 223.085067][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 223.715193][ T4315] usb 5-1: USB disconnect, device number 21 [ 226.396953][ T7419] program syz.4.874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.009161][ T7427] binder: 7426:7427 ioctl 4018620d 0 returned -22 [ 230.314530][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.878'. [ 230.417845][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 231.121103][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 231.248865][ T4313] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 231.470289][ T4313] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.495140][ T4313] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.515115][ T4313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 231.556701][ T4313] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 231.584017][ T4313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.631746][ T7454] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.649927][ T4313] hub 6-1:1.0: bad descriptor, ignoring hub [ 231.671705][ T4313] hub: probe of 6-1:1.0 failed with error -5 [ 231.742830][ T4313] cdc_wdm 6-1:1.0: skipping garbage [ 231.758815][ T7115] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 231.803731][ T4313] cdc_wdm 6-1:1.0: skipping garbage [ 231.836181][ T4313] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 231.871662][ T4313] cdc_wdm 6-1:1.0: Unknown control protocol [ 231.999017][ T7115] usb 1-1: Using ep0 maxpacket: 32 [ 232.006676][ T7115] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 232.050628][ T7115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.130560][ T7115] usb 1-1: config 0 descriptor?? [ 232.182124][ T7115] as10x_usb: device has been detected [ 232.213986][ T7115] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 232.293790][ T4313] usb 6-1: USB disconnect, device number 14 [ 232.360650][ T7469] ------------[ cut here ]------------ [ 232.366229][ T7469] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 232.376558][ T7115] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 232.398916][ T7469] WARNING: CPU: 0 PID: 7469 at kernel/locking/mutex.c:582 __mutex_lock+0xa32/0xaf0 [ 232.408425][ T7469] Modules linked in: [ 232.412609][ T7469] CPU: 0 PID: 7469 Comm: syz.0.886 Not tainted syzkaller #0 [ 232.419920][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 232.430018][ T7469] RIP: 0010:__mutex_lock+0xa32/0xaf0 [ 232.435304][ T7469] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d 9f 4b e9 03 00 0f 85 df f6 ff ff 48 c7 c7 20 fb 8b 8a 48 c7 c6 c0 fb 8b 8a e8 0e 1d 17 f7 <0f> 0b e9 c5 f6 ff ff 0f 0b e9 6b f9 ff ff 48 c7 c1 40 e1 bf 96 80 [ 232.455013][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.461071][ T7469] RSP: 0018:ffffc90003d17aa0 EFLAGS: 00010246 [ 232.467132][ T7469] RAX: aab3b65a617a5f00 RBX: ffff888051d54ce0 RCX: 0000000000080000 [ 232.475219][ T7469] RDX: ffffc90005a41000 RSI: 00000000000030d6 RDI: 00000000000030d7 [ 232.483230][ T7469] RBP: ffffc90003d17bf8 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 232.491243][ T7469] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 0000000000000000 [ 232.499228][ T7469] R13: dffffc0000000000 R14: ffff888051d54000 R15: 0000000000000000 [ 232.507221][ T7469] FS: 00007f601c5f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 232.516186][ T7469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.522805][ T7469] CR2: 00007f2b36e12d58 CR3: 000000007a29a000 CR4: 00000000003526f0 [ 232.530985][ T7469] Call Trace: [ 232.534271][ T7469] [ 232.537229][ T7469] ? trace_contention_end+0x5f/0x170 [ 232.542546][ T7469] ? __mutex_lock+0x1ab/0xaf0 [ 232.547246][ T7469] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 232.552889][ T7469] ? mutex_lock_nested+0x10/0x10 [ 232.557925][ T7469] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 232.563570][ T7469] ? dmx_section_feed_start_filtering+0x51/0x690 [ 232.569928][ T7469] ? mutex_lock_nested+0x10/0x10 [ 232.574899][ T7469] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 232.581002][ T7469] ? lock_chain_count+0x20/0x20 [ 232.585961][ T7469] ? _raw_spin_lock_irq+0xb7/0xf0 [ 232.591078][ T7469] as102_dvb_dmx_start_feed+0x6c/0x280 [ 232.596654][ T7469] dmx_section_feed_start_filtering+0x4f1/0x690 [ 232.603064][ T7469] dvb_dmxdev_filter_start+0xc87/0x1090 [ 232.608696][ T7469] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 232.614266][ T7469] dvb_demux_do_ioctl+0x463/0x530 [ 232.619326][ T7469] dvb_usercopy+0x191/0x2b0 [ 232.624147][ T7469] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 232.629847][ T7469] ? dvb_generic_ioctl+0xb0/0xb0 [ 232.634801][ T7469] ? dvb_demux_poll+0x210/0x210 [ 232.639700][ T7469] dvb_demux_ioctl+0x25/0x30 [ 232.644300][ T7469] __se_sys_ioctl+0xfa/0x170 [ 232.648929][ T7469] do_syscall_64+0x4c/0xa0 [ 232.653364][ T7469] ? clear_bhb_loop+0x60/0xb0 [ 232.658062][ T7469] ? clear_bhb_loop+0x60/0xb0 [ 232.662810][ T7469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.668838][ T7469] RIP: 0033:0x7f601e39c819 [ 232.673271][ T7469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.693017][ T7469] RSP: 002b:00007f601c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.701466][ T7469] RAX: ffffffffffffffda RBX: 00007f601e615fa0 RCX: 00007f601e39c819 [ 232.709791][ T7469] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 232.718128][ T7469] RBP: 00007f601e432c91 R08: 0000000000000000 R09: 0000000000000000 [ 232.726252][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.734295][ T7469] R13: 00007f601e616038 R14: 00007f601e615fa0 R15: 00007ffcbb6e0a78 [ 232.742325][ T7469] [ 232.745353][ T7469] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.752614][ T7469] CPU: 0 PID: 7469 Comm: syz.0.886 Not tainted syzkaller #0 [ 232.759966][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 232.770007][ T7469] Call Trace: [ 232.773382][ T7469] [ 232.776297][ T7469] dump_stack_lvl+0x188/0x24e [ 232.780980][ T7469] ? memcpy+0x3c/0x60 [ 232.784942][ T7469] ? show_regs_print_info+0x12/0x12 [ 232.790124][ T7469] ? load_image+0x400/0x400 [ 232.794626][ T7469] panic+0x2e5/0x730 [ 232.798858][ T7469] ? bpf_jit_dump+0xd0/0xd0 [ 232.803347][ T7469] __warn+0x2f8/0x4f0 [ 232.807308][ T7469] ? __mutex_lock+0xa32/0xaf0 [ 232.811998][ T7469] ? __mutex_lock+0xa32/0xaf0 [ 232.816676][ T7469] report_bug+0x2ba/0x4f0 [ 232.821011][ T7469] ? __mutex_lock+0xa32/0xaf0 [ 232.825694][ T7469] handle_bug+0x3a/0x70 [ 232.829846][ T7469] exc_invalid_op+0x16/0x40 [ 232.834348][ T7469] asm_exc_invalid_op+0x16/0x20 [ 232.839212][ T7469] RIP: 0010:__mutex_lock+0xa32/0xaf0 [ 232.844494][ T7469] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d 9f 4b e9 03 00 0f 85 df f6 ff ff 48 c7 c7 20 fb 8b 8a 48 c7 c6 c0 fb 8b 8a e8 0e 1d 17 f7 <0f> 0b e9 c5 f6 ff ff 0f 0b e9 6b f9 ff ff 48 c7 c1 40 e1 bf 96 80 [ 232.864363][ T7469] RSP: 0018:ffffc90003d17aa0 EFLAGS: 00010246 [ 232.870506][ T7469] RAX: aab3b65a617a5f00 RBX: ffff888051d54ce0 RCX: 0000000000080000 [ 232.878778][ T7469] RDX: ffffc90005a41000 RSI: 00000000000030d6 RDI: 00000000000030d7 [ 232.886759][ T7469] RBP: ffffc90003d17bf8 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 232.894729][ T7469] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 0000000000000000 [ 232.902761][ T7469] R13: dffffc0000000000 R14: ffff888051d54000 R15: 0000000000000000 [ 232.910726][ T7469] ? trace_contention_end+0x5f/0x170 [ 232.916098][ T7469] ? __mutex_lock+0x1ab/0xaf0 [ 232.920791][ T7469] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 232.926433][ T7469] ? mutex_lock_nested+0x10/0x10 [ 232.931466][ T7469] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 232.937131][ T7469] ? dmx_section_feed_start_filtering+0x51/0x690 [ 232.943550][ T7469] ? mutex_lock_nested+0x10/0x10 [ 232.948587][ T7469] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 232.954652][ T7469] ? lock_chain_count+0x20/0x20 [ 232.959584][ T7469] ? _raw_spin_lock_irq+0xb7/0xf0 [ 232.964599][ T7469] as102_dvb_dmx_start_feed+0x6c/0x280 [ 232.970053][ T7469] dmx_section_feed_start_filtering+0x4f1/0x690 [ 232.976320][ T7469] dvb_dmxdev_filter_start+0xc87/0x1090 [ 232.981859][ T7469] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 232.987302][ T7469] dvb_demux_do_ioctl+0x463/0x530 [ 232.992328][ T7469] dvb_usercopy+0x191/0x2b0 [ 232.996826][ T7469] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 233.002367][ T7469] ? dvb_generic_ioctl+0xb0/0xb0 [ 233.007298][ T7469] ? dvb_demux_poll+0x210/0x210 [ 233.012140][ T7469] dvb_demux_ioctl+0x25/0x30 [ 233.016716][ T7469] __se_sys_ioctl+0xfa/0x170 [ 233.021307][ T7469] do_syscall_64+0x4c/0xa0 [ 233.025725][ T7469] ? clear_bhb_loop+0x60/0xb0 [ 233.030406][ T7469] ? clear_bhb_loop+0x60/0xb0 [ 233.035075][ T7469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.040963][ T7469] RIP: 0033:0x7f601e39c819 [ 233.045381][ T7469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.064977][ T7469] RSP: 002b:00007f601c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.073477][ T7469] RAX: ffffffffffffffda RBX: 00007f601e615fa0 RCX: 00007f601e39c819 [ 233.081449][ T7469] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 233.089410][ T7469] RBP: 00007f601e432c91 R08: 0000000000000000 R09: 0000000000000000 [ 233.097368][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.105327][ T7469] R13: 00007f601e616038 R14: 00007f601e615fa0 R15: 00007ffcbb6e0a78 [ 233.113324][ T7469] [ 233.116739][ T7469] Kernel Offset: disabled [ 233.121059][ T7469] Rebooting in 86400 seconds..