last executing test programs: 3m28.649172269s ago: executing program 0 (id=40): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x22, 0x2, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0xde5f, 0x10100, 0x2, 0x33a}, &(0x7f0000002bc0)=0x0, &(0x7f0000002900)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x44054}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m28.15241924s ago: executing program 0 (id=43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m27.580024727s ago: executing program 0 (id=49): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 3m26.415229299s ago: executing program 0 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 3m26.061785385s ago: executing program 0 (id=57): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m25.712843962s ago: executing program 0 (id=60): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="0c000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 3m25.225120069s ago: executing program 32 (id=60): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="0c000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 42.357111432s ago: executing program 2 (id=709): ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 38.015735142s ago: executing program 2 (id=720): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0xaba3, {0x45}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 37.772152628s ago: executing program 2 (id=723): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000000009"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00030001"], 0x0, 0x0}, 0x0) 35.203480836s ago: executing program 2 (id=727): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) 34.503755822s ago: executing program 2 (id=729): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 33.111803822s ago: executing program 2 (id=732): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x11, 0x0, r1, 0x0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="9dec897e3f06f39f553687b373f8175bd8d140bd55e954b034655ddf8daf52702df6b37c0e50a78e571d41a14cde09ca22319f84bb1be4e1bd8fc2341a3a5d", 0x3f}, {&(0x7f0000000240)="538db8b7b973f54e255af11102316448fa6029a5b4b58114", 0x18}, {0x0}], 0x3, &(0x7f0000000580)=[{0xb0, 0x0, 0xa, "a936f64a04eefc926a8ede9a56fd7a6aa536cdf51ee91c6759a03bec7a07d1b254729a896a409985288f9641a7e290aa87ab23b46bde5f2397f74bc434c8bb238f4bdf7d1542cbde2f9d52310626c6fe9d91379f5218ab4b9d67258b96c6c17db10492111bd98b0aea07faaffcf7a46f1f55c13c57b19ae41715d2ebf33c47c279f489cac4f212837f08b4336e1409f849617e3651ee85073e6ff3db3f518c9965369b"}], 0xb0}, 0x0, 0x4000, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 32.564100016s ago: executing program 33 (id=732): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x11, 0x0, r1, 0x0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="9dec897e3f06f39f553687b373f8175bd8d140bd55e954b034655ddf8daf52702df6b37c0e50a78e571d41a14cde09ca22319f84bb1be4e1bd8fc2341a3a5d", 0x3f}, {&(0x7f0000000240)="538db8b7b973f54e255af11102316448fa6029a5b4b58114", 0x18}, {0x0}], 0x3, &(0x7f0000000580)=[{0xb0, 0x0, 0xa, "a936f64a04eefc926a8ede9a56fd7a6aa536cdf51ee91c6759a03bec7a07d1b254729a896a409985288f9641a7e290aa87ab23b46bde5f2397f74bc434c8bb238f4bdf7d1542cbde2f9d52310626c6fe9d91379f5218ab4b9d67258b96c6c17db10492111bd98b0aea07faaffcf7a46f1f55c13c57b19ae41715d2ebf33c47c279f489cac4f212837f08b4336e1409f849617e3651ee85073e6ff3db3f518c9965369b"}], 0xb0}, 0x0, 0x4000, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 11.651885598s ago: executing program 3 (id=835): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) syz_clone3(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r2 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000001c0)={0x980900, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) 11.436770969s ago: executing program 3 (id=837): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ae, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000bc0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x0, 0x0, 0x3, 0xffffffff, 0x1000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80), 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2) 10.161791517s ago: executing program 3 (id=841): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 9.662328035s ago: executing program 4 (id=844): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc010) 9.34416775s ago: executing program 4 (id=846): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.979834048s ago: executing program 5 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 8.714035186s ago: executing program 3 (id=849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20004000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55f, 0x19fffe, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x300000000006, 0x794, 0xa, 0x40, 0xc976, 0x5], 0x8080000, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.388726194s ago: executing program 3 (id=850): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 8.259906125s ago: executing program 5 (id=852): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140), 0x80) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0xc055) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) unshare(0x20000480) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xfffffffd, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0xfffffffffffffffc, 0x0, 0xffffffff, 0xffffffffffffffff, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 7.947883602s ago: executing program 5 (id=854): syz_usb_connect(0x0, 0x316, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa, 0xa, 0xbb, 0x8, 0x458, 0x7045, 0x66a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x304, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x8a, 0x0, 0xc, 0x72, 0x40, 0x9b, 0x0, [], [{{0x9, 0x5, 0x0, 0xb, 0x400, 0x4, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x2, 0x95, 0x85, [@generic={0x2, 0x25}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x7, 0x3, 0x6}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x34, 0x4, 0x8, [@generic={0xd2, 0x23, "eeb57ae8d617cc9fe79e9260730f81ea3ece2c783be3ddbe12bf77ab84a2ed91026de3ed80fe6da838f64779182f2c4fce305054f563c4a5ea7b1e0e3d14917e506912a62d25dffdaf965254910a35128ff3674e4ccb3944a99e37afb00cf140b5bb9d5be367df2fb7d6212ccd07a0bd2e23238426c054cd818f1deca0ed118b87c3a92012d8ce8af67167cf63193115bd76963761170073b691bb71fe2a3d60d0b1093690cf49b664d4455566059226676a93f619ba6a8dc4032b277b5d347497e63f64c89783b33ac0e6f5c9426e9a"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x0, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x2, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xa4, 0x7, 0x9, [@generic={0xdb, 0xc, "deed4759617f16352bafe16cfaa97f32b7df5046c1aba2ec069f349999b6284e7d0112c318fc51603ea257d6d78dd33e9391307b74ec1b8db1c426e0a6ec193e754ee4c65f67920a875a2af9ef10dc35153735d7079790325aa7b60780acfd01ab3f9f7f4ad9684ebf2ccb5a1925080d6793c914eecc9a74f96528ae9c3b39ae28dcee2113f674148aa7c9d0c9a891619a21f3c4cccb3cd20807cd2754d1e72cebf77153ce93a58c5f8b19df68a0ede8ce0939fd6804e92da15b38ef3aa25196529b0142bed4a82d3e4eccea654b8ec9775494a3424b410c7a"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x7}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x2, 0xb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x9, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0x8, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x21, 0x96}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xc, 0x3, 0x1}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x7, 0x6, 0x3, [@generic={0xad, 0xb, "00a8e49edd5bf033d16f466d32144f399d2f17236f76f2a4865f6a97d6c52e39da650a55585b67ff35c1b3a7b92912241a650ed4c72687439a578515370e6a656719ac4ca21fa5f82d7a610b9c0871ed11267aeb5400dbdbc8bad2f02d0a56d469db90f4c59d7608d26efe3e61f175ecd7e5d106b24a88ed809af1540fe69a00860f7e1a30b97760f1a97efe9a6136aa3c60226398d1457643931eac78f771f23a49be3b85ec076d91e0c8"}]}}]}}]}}]}}, 0x0) r0 = openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x4002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000140)) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f00000002c0)) write$rfkill(r0, &(0x7f0000000440)={0x6, 0x2, 0x2, 0x1, 0x1}, 0x8) socket$caif_stream(0x25, 0x1, 0x4) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) 7.832139704s ago: executing program 6 (id=855): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56549, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x80) 7.818768063s ago: executing program 1 (id=856): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a040800) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x50, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0xe0, 0x18, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x6c, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x2, 0x8001}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x0, 0xd9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x18, 0x2}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) 7.559940394s ago: executing program 6 (id=857): close(0x3) socket(0x2, 0x80805, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000002780), 0x101000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c45513, &(0x7f0000000040)={0xb, 0x3, 0x1, 0x5, '\x00', 0x6}) 7.539274143s ago: executing program 1 (id=858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) open(0x0, 0x10140, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) 7.478183811s ago: executing program 6 (id=859): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x13, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x40, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x30, 0x2, "1eba"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000280)={0x40, 0x7, 0x2, 'l\b'}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 7.347566838s ago: executing program 3 (id=860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x2100}, {r2, 0x8610}], 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 5.869914963s ago: executing program 1 (id=861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 5.868956913s ago: executing program 5 (id=871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) read(r1, 0x0, 0x0) 5.555484127s ago: executing program 4 (id=863): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$autofs(0xffffff9c, &(0x7f0000002140), 0x4000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000002100)={0x4, 0x1, 0x5}) read$FUSE(r1, &(0x7f0000002b00)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 5.124511902s ago: executing program 4 (id=864): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = syz_io_uring_setup(0x1110, &(0x7f0000000240)={0x0, 0xdb9c, 0x800, 0x10000000, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r2, 0x8000000000000001, 0x0, 0x40000, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x20, 0x0, 0x0) 3.431792234s ago: executing program 4 (id=865): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000008429a3d3fd28a14b825c9d89e397aaad569f9a182f8b0ec39e0acb2771041254f82fec4279faf6e659bd451410591418d773c8844d341cbedc969f57c7d58fa8e8abdfde44242419d7ab9f753922fc2b8c376ace36ab280ad6579ddeb993e1cf1e44db87ee48f4af0d6d1cf3ba838ee391bea022faf4cf0800be63a386fd9dd1750799"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20044060) read(r1, &(0x7f0000000180)=""/167, 0xa7) 3.406629224s ago: executing program 6 (id=866): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x78, 0x6, 0x0, 0x0, 0x10003, 0x3ff, 0x400200cc4, 0x1a1b, 0x4, 0x2, 0x0, 0x0, 0xfffffffffffffff9, 0x4000, 0x6a, 0x8b], 0xeeee8000, 0x201145}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.881678075s ago: executing program 6 (id=867): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8111}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 2.5316727s ago: executing program 5 (id=868): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40000000}) syz_open_dev$video4linux(&(0x7f0000000140), 0x400, 0x40) socket$netlink(0x10, 0x3, 0x8000000004) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) syz_usb_disconnect(r0) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x202) pselect6(0x40, &(0x7f0000000100)={0x7ff, 0xfffffffffffffffc, 0x100005, 0x0, 0x800, 0x0, 0x8000000000000001, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 1.622356558s ago: executing program 1 (id=869): socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c58, &(0x7f0000000300)={0x0, 0x4ac1, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 627.776872ms ago: executing program 1 (id=870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1d, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 620.969444ms ago: executing program 5 (id=872): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2}, 0x14) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r4, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) 258.582736ms ago: executing program 4 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f00000001c0)=""/230, 0xe6) getdents64(r3, 0x0, 0x0) statx(r3, &(0x7f0000000340)='./file0\x00', 0x4000, 0x4, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="30000004"], 0x0, 0x0, 0x0, 0x0}) 158.990528ms ago: executing program 6 (id=874): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000240)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000012c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 0s ago: executing program 1 (id=875): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x10000) kernel console output (not intermixed with test programs): ck-stop error: local softirq work is pending, handler #08!!! [ 105.043129][ T5899] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 105.071077][ T5899] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 105.100881][ T5899] usb 2-1: USB disconnect, device number 2 [ 105.275907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 105.290766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 105.301514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.324226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.340733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 105.733009][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.937098][ T5899] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 105.950682][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.001016][ T5899] usb 1-1: config 0 has no interfaces? [ 106.006574][ T5899] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 106.091812][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.122282][ T5899] usb 1-1: config 0 descriptor?? [ 106.373933][ T9] usb 1-1: USB disconnect, device number 2 [ 106.907188][ T6029] binder: 6028:6029 ioctl c0306201 80004a40 returned -22 [ 107.010734][ T5914] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.206153][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.240644][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.268815][ T6033] delete_channel: no stack [ 107.280884][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.341274][ T5914] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.380733][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.408625][ T5914] usb 4-1: config 0 descriptor?? [ 107.729477][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 108.088478][ T5914] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 108.186862][ T5914] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 108.331124][ T6057] input: syz1 as /devices/virtual/input/input7 [ 108.522063][ T9] usb 4-1: USB disconnect, device number 2 [ 108.682431][ T6064] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET) [ 108.794864][ T6062] fido_id[6062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 110.055265][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.139563][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.217525][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.292007][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.739429][ T13] bridge_slave_1: left allmulticast mode [ 110.757398][ T13] bridge_slave_1: left promiscuous mode [ 110.774219][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.822516][ T13] bridge_slave_0: left allmulticast mode [ 110.828405][ T13] bridge_slave_0: left promiscuous mode [ 110.840136][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.313344][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.322621][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.347680][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.359233][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.380457][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.240734][ T5940] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.255977][ T6146] binder: 6144:6146 ioctl c0306201 800003c0 returned -14 [ 112.400716][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.410991][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 112.420102][ T5940] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 112.432747][ T5940] usb 4-1: config 0 has no interface number 0 [ 112.439435][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.452553][ T5940] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 112.465358][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.475296][ T5940] usb 4-1: Product: syz [ 112.479637][ T5940] usb 4-1: Manufacturer: syz [ 112.485692][ T5940] usb 4-1: SerialNumber: syz [ 112.493956][ T5940] usb 4-1: config 0 descriptor?? [ 112.507931][ T5940] smsc95xx v2.0.0 [ 112.513025][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.537593][ T13] bond0 (unregistering): Released all slaves [ 112.563236][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 112.582394][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 112.640992][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 112.705591][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.820962][ T10] usb 2-1: config 0 descriptor?? [ 112.911329][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 112.991168][ T5940] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 113.017455][ T5940] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 113.116664][ T6143] input: syz0 as /devices/virtual/input/input9 [ 113.441522][ T5829] Bluetooth: hci3: command tx timeout [ 114.036037][ T13] hsr_slave_0: left promiscuous mode [ 114.061396][ T13] hsr_slave_1: left promiscuous mode [ 114.072670][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.093896][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.113460][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.132266][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.185623][ T13] veth1_macvtap: left promiscuous mode [ 114.191846][ T13] veth0_macvtap: left promiscuous mode [ 114.198292][ T13] veth1_vlan: left promiscuous mode [ 114.205273][ T13] veth0_vlan: left promiscuous mode [ 114.694811][ T5940] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 114.716694][ T5940] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 114.736030][ T5940] usb 4-1: USB disconnect, device number 3 [ 114.872855][ T13] team0 (unregistering): Port device team_slave_1 removed [ 114.923848][ T13] team0 (unregistering): Port device team_slave_0 removed [ 115.198331][ T5184] bcm5974 2-1:0.0: could not read from device [ 115.232096][ T5184] bcm5974 2-1:0.0: could not read from device [ 115.330272][ T10] usb 2-1: USB disconnect, device number 3 [ 115.363855][ T5184] bcm5974 2-1:0.0: could not read from device [ 115.520752][ T5829] Bluetooth: hci3: command tx timeout [ 116.564583][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.86'. [ 116.660841][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.683956][ T6127] chnl_net:caif_netlink_parms(): no params data found [ 116.833679][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 116.856425][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 116.894102][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.945394][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.981970][ T10] usb 4-1: Product: syz [ 117.009543][ T10] usb 4-1: Manufacturer: syz [ 117.028902][ T10] usb 4-1: SerialNumber: syz [ 117.107904][ T10] usb 4-1: config 0 descriptor?? [ 117.187187][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 117.233908][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 117.489686][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.529166][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.570983][ T6127] bridge_slave_0: entered allmulticast mode [ 117.611149][ T5829] Bluetooth: hci3: command tx timeout [ 117.676905][ T6127] bridge_slave_0: entered promiscuous mode [ 117.787593][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.830303][ T10] em28xx 4-1:0.0: chip ID is em2765 [ 117.831891][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.860827][ T6127] bridge_slave_1: entered allmulticast mode [ 117.927565][ T6127] bridge_slave_1: entered promiscuous mode [ 118.367870][ T6127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.435663][ T6127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.487982][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 118.531086][ T10] em28xx 4-1:0.0: board has no eeprom [ 118.851517][ T6127] team0: Port device team_slave_0 added [ 118.870667][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 118.897261][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 118.912859][ T6127] team0: Port device team_slave_1 added [ 118.929883][ T5940] em28xx 4-1:0.0: Binding DVB extension [ 118.975895][ T10] usb 4-1: USB disconnect, device number 4 [ 119.026495][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 119.128861][ T5940] em28xx 4-1:0.0: Registering input extension [ 119.195158][ T10] em28xx 4-1:0.0: Closing input extension [ 119.255691][ T10] em28xx 4-1:0.0: Freeing device [ 119.494956][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.524280][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.605882][ T6127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.680841][ T5829] Bluetooth: hci3: command tx timeout [ 119.813152][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.820168][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.949399][ T6127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.582919][ T6127] hsr_slave_0: entered promiscuous mode [ 120.636489][ T6127] hsr_slave_1: entered promiscuous mode [ 120.643676][ T6255] usb usb8: usbfs: process 6255 (syz.3.99) did not claim interface 0 before use [ 120.661417][ T6127] debugfs: 'hsr0' already exists in 'hsr' [ 120.712075][ T6127] Cannot create hsr debugfs directory [ 121.196432][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.297610][ T5899] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.336538][ T6268] binder: 6266:6268 ioctl c018620c 80000240 returned -22 [ 121.429977][ T6272] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.991286][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.077981][ T6127] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.143610][ T6127] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.184867][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 122.248712][ T6127] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.258885][ T5899] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 122.267467][ T5899] usb 4-1: config 0 has no interface number 0 [ 122.293526][ T6127] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.309274][ T5899] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.363048][ T5899] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.422716][ T5899] usb 4-1: config 0 interface 12 has no altsetting 0 [ 122.442606][ T5899] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 122.486973][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.519938][ T5899] usb 4-1: Product: syz [ 122.556110][ T5899] usb 4-1: Manufacturer: syz [ 122.578913][ T5899] usb 4-1: SerialNumber: syz [ 122.626069][ T5899] usb 4-1: config 0 descriptor?? [ 122.663705][ T5899] f81534 4-1:0.12: unsupported endpoint max packet size [ 122.771691][ T6127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.832852][ T6127] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.938062][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.945330][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.975716][ T5899] usb 4-1: USB disconnect, device number 5 [ 122.988840][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.996050][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.367887][ T6127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.455471][ T6127] veth0_vlan: entered promiscuous mode [ 123.471297][ T6127] veth1_vlan: entered promiscuous mode [ 123.532751][ T6127] veth0_macvtap: entered promiscuous mode [ 123.545807][ T6127] veth1_macvtap: entered promiscuous mode [ 123.576599][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.615518][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.642778][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.661331][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.699412][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.717129][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 123.718711][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.740445][ T6307] netlink: 168 bytes leftover after parsing attributes in process `syz.4.109'. [ 123.749780][ T6307] netlink: 168 bytes leftover after parsing attributes in process `syz.4.109'. [ 123.909756][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.947320][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.073146][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.095575][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.866565][ T6360] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 127.007507][ T6361] bond1: Unable to set up delay as MII monitoring is disabled [ 127.022794][ T6361] bond1 (unregistering): Released all slaves [ 127.580974][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.752022][ T6363] bond1: (slave ip6gretap1): making interface the new active one [ 127.865157][ T6363] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 128.330683][ T5892] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.490851][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 128.512183][ T5892] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 128.570656][ T5892] usb 3-1: config 0 has no interface number 0 [ 128.583610][ T5892] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 128.664148][ T5892] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 128.694207][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.742782][ T5892] usb 3-1: Product: syz [ 128.757595][ T5892] usb 3-1: Manufacturer: syz [ 128.767725][ T5892] usb 3-1: SerialNumber: syz [ 128.809414][ T5892] usb 3-1: config 0 descriptor?? [ 128.878390][ T6379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.118259][ T6379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.637622][ T6419] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.691024][ T5940] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.865169][ T5940] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 129.896843][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.940083][ T5940] usb 4-1: Product: syz [ 129.966252][ T5940] usb 4-1: Manufacturer: syz [ 130.029916][ T5940] usb 4-1: SerialNumber: syz [ 130.568456][ T5940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 130.631821][ T5940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 131.060156][ T6438] loop2: detected capacity change from 0 to 7 [ 131.084342][ T6438] loop2: [POWERTEC] p1 p2 p3 p4 [ 131.095933][ T6438] loop2: p2 start 4294967287 is beyond EOD, truncated [ 131.104358][ T6438] loop2: p3 start 1932423285 is beyond EOD, truncated [ 131.114010][ T6438] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 131.236577][ T5892] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 131.292832][ T5892] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 131.319833][ T5892] asix 3-1:0.188: probe with driver asix failed with error -71 [ 131.391392][ T5892] usb 3-1: USB disconnect, device number 3 [ 131.531684][ T5914] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.705377][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 131.950257][ T5940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 131.982254][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.035692][ T5914] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 132.049764][ T5914] usb 2-1: can't read configurations, error -71 [ 132.065441][ T6449] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.214823][ T5940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 132.251973][ T5940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 132.269258][ T5940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 132.313415][ T5940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 132.345372][ T5940] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 132.391166][ T5940] usb 4-1: USB disconnect, device number 6 [ 132.704740][ T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.741500][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 132.902465][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.935034][ T44] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 132.979217][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.028116][ T44] usb 6-1: config 0 descriptor?? [ 133.049934][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 133.457693][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 133.502022][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 133.531305][ T44] pwc: recv_control_msg error -32 req 02 val 2c00 [ 133.588210][ T44] pwc: recv_control_msg error -32 req 04 val 1000 [ 133.663752][ T44] pwc: recv_control_msg error -32 req 04 val 1300 [ 133.703278][ T44] pwc: recv_control_msg error -32 req 04 val 1400 [ 133.719869][ T44] pwc: recv_control_msg error -32 req 02 val 2000 [ 133.755861][ T44] pwc: recv_control_msg error -32 req 02 val 2100 [ 133.981803][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 134.012554][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 134.085059][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 134.116530][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 134.182790][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 134.210437][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 134.242459][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 134.303132][ T44] pwc: Registered as video103. [ 134.339700][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 134.399070][ T44] usb 6-1: USB disconnect, device number 2 [ 134.624602][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 134.664001][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 134.703737][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 134.762108][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 137.020692][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.241064][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 137.268984][ T24] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 137.285500][ T24] usb 4-1: config 0 has no interface number 0 [ 137.293113][ T24] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.324829][ T24] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 137.357050][ T24] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 137.378853][ T24] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.432611][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 137.457649][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.476070][ T24] usb 4-1: Product: syz [ 137.486211][ T24] usb 4-1: Manufacturer: syz [ 137.500632][ T24] usb 4-1: SerialNumber: syz [ 137.528144][ T24] usb 4-1: config 0 descriptor?? [ 137.840388][ T24] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 138.079128][ T10] usb 4-1: USB disconnect, device number 7 [ 138.325507][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.351724][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.031993][ T6520] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 139.090005][ T6520] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 139.111253][ T6520] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 139.398152][ T6533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.544828][ T6536] bond_slave_0: entered promiscuous mode [ 139.550813][ T6536] bond_slave_1: entered promiscuous mode [ 139.637644][ T6536] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.667300][ T6536] bond2: (slave macvlan2): making interface the new active one [ 139.685889][ T6536] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 141.261038][ T5899] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 141.459402][ T6590] Zero length message leads to an empty skb [ 141.481018][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 141.517586][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 141.559272][ T6583] syzkaller0: entered promiscuous mode [ 141.564484][ T5940] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.585450][ T5899] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.623632][ T6583] syzkaller0: entered allmulticast mode [ 141.626453][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.699601][ T5899] usb 6-1: Product: syz [ 141.715550][ T5899] usb 6-1: Manufacturer: syz [ 141.740183][ T5899] usb 6-1: SerialNumber: syz [ 141.765906][ T5899] usb 6-1: config 0 descriptor?? [ 141.796937][ T5899] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.813250][ T5940] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 141.843134][ T5899] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 141.860262][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.886479][ T5940] usb 5-1: Product: syz [ 141.899753][ T5940] usb 5-1: Manufacturer: syz [ 141.915768][ T5940] usb 5-1: SerialNumber: syz [ 142.443458][ T5899] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 142.475173][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 142.522814][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 142.949472][ T5899] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 142.994861][ T5899] em28xx 6-1:0.0: board has no eeprom [ 143.199828][ T6612] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 143.253958][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 144.150947][ T5899] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 144.159120][ T5899] em28xx 6-1:0.0: dvb set to bulk mode. [ 144.166346][ T9] em28xx 6-1:0.0: Binding DVB extension [ 144.185970][ T5899] usb 6-1: USB disconnect, device number 3 [ 144.235948][ T5899] em28xx 6-1:0.0: Disconnecting em28xx [ 144.273998][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 144.289137][ T9] em28xx 6-1:0.0: Registering input extension [ 144.300336][ T5899] em28xx 6-1:0.0: Closing input extension [ 144.314571][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 144.336030][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 144.354356][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 144.374363][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.385132][ T5899] em28xx 6-1:0.0: Freeing device [ 144.422063][ T5940] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 144.442406][ T5940] usb 5-1: USB disconnect, device number 3 [ 145.028683][ T6610] bridge_slave_0: left allmulticast mode [ 145.034456][ T6610] bridge_slave_0: left promiscuous mode [ 145.041702][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.055927][ T6610] bridge_slave_1: left allmulticast mode [ 145.062697][ T6610] bridge_slave_1: left promiscuous mode [ 145.068697][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.092511][ T6610] bond0: (slave bond_slave_0): Releasing backup interface [ 145.106646][ T6610] bond0: (slave bond_slave_1): Releasing backup interface [ 145.156576][ T6610] team0: Port device team_slave_0 removed [ 145.183065][ T6610] team0: Port device team_slave_1 removed [ 145.216091][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.244991][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.270421][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.284862][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.301737][ T6610] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.324182][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.194'. [ 145.329957][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.343248][ T6612] team0: Port device bond0 added [ 145.825646][ T6615] team0 (unregistering): Port device bond0 removed [ 148.655272][ T6698] binder: 6695:6698 ioctl c0306201 80000080 returned -14 [ 148.688270][ T6698] binder_alloc: 6695: pid 6695 spamming oneway? 1 buffers allocated for a total size of 5240 [ 149.290964][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 149.517991][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 149.597705][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.704063][ T9] usb 3-1: Product: syz [ 149.749777][ T9] usb 3-1: Manufacturer: syz [ 149.795690][ T9] usb 3-1: SerialNumber: syz [ 149.981814][ T9] usb 3-1: config 0 descriptor?? [ 150.292020][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 151.995771][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.222'. [ 152.295460][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 152.339989][ T9] usb 3-1: USB disconnect, device number 4 [ 152.502318][ T6750] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 152.847976][ T6756] binder: 6755:6756 ioctl c0306201 80000680 returned -14 [ 153.186342][ T6762] binder: 6760:6762 ioctl c0306201 80000680 returned -14 [ 155.644533][ T6803] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 156.974598][ T6815] input: syz1 as /devices/virtual/input/input13 [ 158.135536][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 158.279797][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 158.877568][ T6821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.282008][ T6855] syz_tun: entered allmulticast mode [ 160.368227][ T6854] syz_tun: left allmulticast mode [ 160.863026][ T6862] binder: 6861:6862 ioctl c0306201 800002c0 returned -14 [ 161.846557][ T6879] usb usb8: usbfs: process 6879 (syz.4.264) did not claim interface 0 before use [ 162.188271][ T6888] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 163.604285][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.612275][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.172848][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.215293][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.094709][ T1152] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.120742][ T1152] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.129704][ T1152] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.211382][ T6916] syzkaller0: entered promiscuous mode [ 165.216934][ T6916] syzkaller0: entered allmulticast mode [ 165.267176][ T1152] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.780762][ T5940] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.013682][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 166.037483][ T5940] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 166.057699][ T5940] usb 3-1: config 0 has no interface number 0 [ 166.085536][ T5940] usb 3-1: config 0 interface 184 has no altsetting 0 [ 166.116790][ T5940] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 166.147901][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.156313][ T5899] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 166.192240][ T5940] usb 3-1: Product: syz [ 166.210686][ T5940] usb 3-1: Manufacturer: syz [ 166.226389][ T5940] usb 3-1: SerialNumber: syz [ 166.256400][ T5940] usb 3-1: config 0 descriptor?? [ 166.296644][ T5940] smsc75xx v1.0.0 [ 166.361103][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 166.372139][ T5899] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 166.420092][ T5899] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 166.454529][ T5899] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.517181][ T5899] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 166.562849][ T5899] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 166.580667][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.599758][ T5899] usb 6-1: Product: syz [ 166.615321][ T5899] usb 6-1: Manufacturer: syz [ 166.630463][ T5899] usb 6-1: SerialNumber: syz [ 166.664588][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 166.683345][ T5899] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input14 [ 166.910863][ T5899] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 166.940121][ T5899] (id 0x00) [ 166.955313][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 167.048560][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 167.190761][ T5899] rc_core: IR keymap rc-imon-pad not found [ 167.197811][ T5899] Registered IR keymap rc-empty [ 167.230824][ T5899] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 167.243574][ T5899] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 167.294520][ T5899] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 167.354390][ T5899] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input15 [ 167.394179][ T5899] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:4> initialized [ 168.609416][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 168.668118][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 168.706765][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 168.749588][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 168.770402][ T5940] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 168.809269][ T5940] usb 3-1: USB disconnect, device number 5 [ 169.088593][ T6964] syzkaller0: entered promiscuous mode [ 169.095278][ T6964] syzkaller0: entered allmulticast mode [ 169.295883][ T6958] imon:send_packet: packet tx failed (-71) [ 169.319450][ T5940] usb 6-1: USB disconnect, device number 4 [ 169.327253][ T6958] imon:vfd_write: send packet #5 failed [ 170.259542][ T6984] binder: BINDER_SET_CONTEXT_MGR already set [ 170.267441][ T6984] binder: 6983:6984 ioctl 4018620d 80000100 returned -16 [ 170.285211][ T6984] binder: BINDER_SET_CONTEXT_MGR already set [ 170.292549][ T6984] binder: 6983:6984 ioctl 4018620d 800002c0 returned -16 [ 170.742224][ T6996] IPVS: length: 218 != 24 [ 171.360911][ T6986] kthread_run failed with err -4 [ 171.368416][ T6996] syz_tun: entered allmulticast mode [ 171.389862][ T6994] syz_tun: left allmulticast mode [ 171.520953][ T7001] process 'syz.2.301' launched './file1' with NULL argv: empty string added [ 173.783395][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.313'. [ 173.871862][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.313'. [ 173.884468][ T5853] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.947846][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.313'. [ 174.000225][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.313'. [ 174.141047][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 174.882595][ T5853] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.942198][ T5853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.013170][ T7050] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 175.036063][ T7050] kvm: pic: non byte read [ 175.088017][ T5853] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.105484][ T7050] kvm: pic: level sensitive irq not supported [ 175.108623][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.108741][ T7050] kvm: pic: non byte read [ 175.140673][ T5853] usb 4-1: Product: syz [ 175.145073][ T5853] usb 4-1: Manufacturer: syz [ 175.149723][ T5853] usb 4-1: SerialNumber: syz [ 175.221135][ T7050] kvm: pic: level sensitive irq not supported [ 175.221625][ T7050] kvm: pic: non byte read [ 175.234219][ T7050] kvm: pic: level sensitive irq not supported [ 175.234502][ T7050] kvm: pic: non byte read [ 175.414901][ T5853] usb 4-1: 0:2 : does not exist [ 175.446644][ T5853] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 175.499645][ T5853] usb 4-1: USB disconnect, device number 8 [ 175.695213][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.685210][ T7074] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.847180][ T7091] binder: BINDER_SET_CONTEXT_MGR already set [ 177.860424][ T7091] binder: 7090:7091 ioctl 4018620d 80000040 returned -16 [ 177.881350][ T7091] binder: 7090:7091 ioctl c018620c 80000100 returned -1 [ 178.513016][ T7102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.867853][ T7110] IPVS: length: 218 != 24 [ 178.898604][ T7110] syz_tun: entered allmulticast mode [ 178.958366][ T7109] syz_tun: left allmulticast mode [ 179.050965][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.235321][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 179.244516][ T5892] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 179.267979][ T5892] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 179.302019][ T5892] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.315282][ T5892] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 179.331033][ T7122] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 179.375917][ T5892] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 179.435119][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.469308][ T5892] usb 5-1: Product: syz [ 179.490807][ T5892] usb 5-1: Manufacturer: syz [ 179.512090][ T5892] usb 5-1: SerialNumber: syz [ 179.541960][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 179.578557][ T5892] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input16 [ 179.841712][ T5892] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 179.857482][ T5892] (id 0x00) [ 180.040475][ T5892] rc_core: IR keymap rc-imon-pad not found [ 180.106173][ T5892] Registered IR keymap rc-empty [ 180.128514][ T5892] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 180.156801][ T5892] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 180.192275][ T5892] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 180.247443][ T5892] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input17 [ 180.315757][ T5892] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:4> initialized [ 180.340674][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.530823][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 180.552603][ T7138] kvm: kvm [7137]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x3532e08e330c [ 180.575727][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 180.607930][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 180.642892][ T7138] kvm: kvm [7137]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x3532e08e330c [ 180.665913][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.713354][ T5914] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.777323][ T5914] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.809242][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.073621][ T5914] usb 3-1: GET_CAPABILITIES returned 0 [ 181.097816][ T5914] usbtmc 3-1:16.0: can't read capabilities [ 181.352432][ T7150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.705439][ T7156] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 181.791690][ T7156] kvm: pic: non byte read [ 181.797747][ T7156] kvm: pic: level sensitive irq not supported [ 181.797858][ T7156] kvm: pic: non byte read [ 181.812473][ T7156] kvm: pic: level sensitive irq not supported [ 181.812817][ T7156] kvm: pic: non byte read [ 181.825207][ T7156] kvm: pic: level sensitive irq not supported [ 181.825432][ T7156] kvm: pic: non byte read [ 181.842955][ T5853] usb 5-1: USB disconnect, device number 4 [ 181.849747][ T7147] imon:send_packet: packet tx failed (-71) [ 181.870658][ T7147] imon:vfd_write: send packet #5 failed [ 181.877204][ T7133] imon:display_open: display port is already open [ 182.162723][ T5829] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 182.172262][ T5829] Bluetooth: hci0: Injecting HCI hardware error event [ 182.180875][ T5149] Bluetooth: hci0: hardware error 0x00 [ 182.535374][ T5892] usb 3-1: USB disconnect, device number 6 [ 183.011852][ T7176] bridge_slave_0: left allmulticast mode [ 183.040708][ T7176] bridge_slave_0: left promiscuous mode [ 183.046560][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.066930][ T7183] netlink: 'syz.5.356': attribute type 10 has an invalid length. [ 183.105683][ T7176] bridge_slave_1: left allmulticast mode [ 183.116139][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.356'. [ 183.146705][ T7176] bridge_slave_1: left promiscuous mode [ 183.173656][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.222892][ T7176] bond0: (slave bond_slave_0): Releasing backup interface [ 183.237596][ T7176] bond0: (slave bond_slave_1): Releasing backup interface [ 183.295447][ T7176] team0: Port device team_slave_0 removed [ 183.403819][ T7176] team0: Port device team_slave_1 removed [ 183.428006][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.484945][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.539930][ T7176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.623269][ T7193] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 183.656454][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.705517][ T7193] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 183.715002][ T7183] team0: Port device bond0 added [ 183.755243][ T7193] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 183.796901][ T7193] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 184.251439][ T5149] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 184.438873][ T7187] team0 (unregistering): Port device bond0 removed [ 184.675943][ T7190] veth1_to_batadv: entered promiscuous mode [ 185.502393][ T7214] binder: BINDER_SET_CONTEXT_MGR already set [ 185.569327][ T7214] binder: 7213:7214 ioctl 4018620d 800000c0 returned -16 [ 185.608162][ T7216] binder: BINDER_SET_CONTEXT_MGR already set [ 185.638506][ T7216] binder: 7213:7216 ioctl 4018620d 800000c0 returned -16 [ 186.391399][ T7226] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 186.441533][ T7226] syz_tun: entered promiscuous mode [ 186.526684][ T7226] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 187.467199][ T7242] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 187.564691][ T7242] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 187.637404][ T7242] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 188.037998][ T7254] bridge_slave_0: left allmulticast mode [ 188.046486][ T7254] bridge_slave_0: left promiscuous mode [ 188.058312][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.083898][ T7257] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 188.106496][ T7254] bridge_slave_1: left allmulticast mode [ 188.130459][ T7258] binder_alloc: 7256: binder_alloc_buf size 1024 failed, no address space [ 188.133804][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 188.158685][ T7254] bridge_slave_1: left promiscuous mode [ 188.196102][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.205574][ T7258] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 188.265918][ T7254] bond0: (slave bond_slave_0): Releasing backup interface [ 188.326574][ T7254] bond0: (slave bond_slave_1): Releasing backup interface [ 188.370654][ T7254] team0: Port device team_slave_0 removed [ 188.417074][ T7254] team0: Port device team_slave_1 removed [ 188.425433][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.436618][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.455193][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.513289][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.563823][ T7254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.652495][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.672661][ T7257] team0: Port device bond0 added [ 188.931022][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 189.115442][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.189218][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 189.211305][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 189.243155][ T24] usb 3-1: Product: syz [ 189.247397][ T24] usb 3-1: Manufacturer: syz [ 189.262781][ T7260] team0 (unregistering): Port device bond0 removed [ 189.277384][ T24] usb 3-1: SerialNumber: syz [ 189.548575][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 189.690711][ T30] audit: type=1800 audit(1763614454.735:2): pid=7274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.386" name="/" dev="fuse" ino=3 res=0 errno=0 [ 189.719136][ T7286] netlink: 260 bytes leftover after parsing attributes in process `syz.5.390'. [ 189.800586][ T7286] netlink: 256 bytes leftover after parsing attributes in process `syz.5.390'. [ 189.826338][ T7286] unsupported nlmsg_type 40 [ 189.863721][ T7286] syz_tun: entered allmulticast mode [ 189.955369][ T7286] dvmrp8: entered allmulticast mode [ 189.987385][ T7285] syz_tun: left allmulticast mode [ 190.320746][ T5892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.503179][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 190.534940][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 190.599728][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.629096][ T5892] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.660237][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.696995][ T5892] usb 4-1: Product: syz [ 190.710156][ T5892] usb 4-1: Manufacturer: syz [ 190.722946][ T5892] usb 4-1: SerialNumber: syz [ 190.741459][ T5892] usb 4-1: config 0 descriptor?? [ 190.771847][ T5892] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.781300][ T5892] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 190.960843][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 191.125596][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.144587][ T9] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 191.156522][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.169390][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 191.188802][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.200115][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.209706][ T9] usb 6-1: Product: syz [ 191.214214][ T9] usb 6-1: Manufacturer: syz [ 191.229473][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 191.239586][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 191.247827][ T9] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 191.253929][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 191.372262][ C1] usblp0: nonzero write bulk status received: -71 [ 191.377959][ T9] usb 3-1: USB disconnect, device number 7 [ 191.381016][ T5892] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 191.392241][ T5892] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 191.397898][ T9] usblp0: removed [ 191.421299][ T5940] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 191.557064][ T5853] usb 6-1: USB disconnect, device number 5 [ 191.580603][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 191.588234][ T5940] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 191.602084][ T5940] usb 5-1: config 0 has no interface number 0 [ 191.608805][ T5940] usb 5-1: config 0 interface 184 has no altsetting 0 [ 191.621991][ T5940] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 191.631647][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.640031][ T5940] usb 5-1: Product: syz [ 191.644977][ T5940] usb 5-1: Manufacturer: syz [ 191.649631][ T5940] usb 5-1: SerialNumber: syz [ 191.657854][ T5940] usb 5-1: config 0 descriptor?? [ 191.666698][ T5940] smsc75xx v1.0.0 [ 192.019687][ T5892] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 192.041304][ T5892] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 192.251853][ T5892] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 192.266549][ T5892] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 192.280405][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 192.310163][ T5892] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 192.322499][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 192.338924][ T5892] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 192.381957][ T5892] usb 4-1: USB disconnect, device number 9 [ 193.253014][ T7321] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 193.285188][ T7321] syz_tun: entered promiscuous mode [ 193.297433][ T7321] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 193.560676][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 193.725724][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 193.757113][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 193.776926][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 193.799720][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 193.815268][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 193.828836][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.841384][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 193.851315][ T9] usb 6-1: Product: syz [ 193.855512][ T9] usb 6-1: Manufacturer: syz [ 193.861449][ T5940] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 193.869823][ T9] usb 6-1: SerialNumber: syz [ 193.877795][ T9] usb 6-1: config 0 descriptor?? [ 193.887290][ T5940] usb 5-1: USB disconnect, device number 5 [ 193.904691][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.939561][ T9] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 194.522398][ T9] em28xx 6-1:0.0: chip ID is em2765 [ 194.600018][ T7337] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 194.666664][ T7337] kvm: pic: non byte read [ 194.680652][ T7337] kvm: pic: level sensitive irq not supported [ 194.680744][ T7337] kvm: pic: non byte read [ 194.704671][ T7337] kvm: pic: level sensitive irq not supported [ 194.704775][ T7337] kvm: pic: non byte read [ 194.740053][ T7337] kvm: pic: level sensitive irq not supported [ 194.740182][ T7337] kvm: pic: non byte read [ 195.137327][ T9] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 195.175045][ T9] em28xx 6-1:0.0: board has no eeprom [ 195.477834][ T9] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 195.515549][ T9] em28xx 6-1:0.0: dvb set to bulk mode. [ 195.531140][ T5940] em28xx 6-1:0.0: Binding DVB extension [ 195.563071][ T9] usb 6-1: USB disconnect, device number 6 [ 195.591032][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 195.756353][ T5940] em28xx 6-1:0.0: Registering input extension [ 195.780805][ T9] em28xx 6-1:0.0: Closing input extension [ 195.823537][ T9] em28xx 6-1:0.0: Freeing device [ 196.097824][ T30] audit: type=1326 audit(1763614461.145:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.4.413" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x0 [ 196.119032][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.232493][ T7363] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 196.297106][ T7362] syzkaller0: entered allmulticast mode [ 197.469896][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 197.496199][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 197.544465][ T7381] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.617880][ T7381] kvm: pic: non byte read [ 197.631474][ T7381] kvm: pic: level sensitive irq not supported [ 197.632089][ T7381] kvm: pic: non byte read [ 197.665061][ T7381] kvm: pic: level sensitive irq not supported [ 197.665261][ T7381] kvm: pic: non byte read [ 197.702379][ T7381] kvm: pic: level sensitive irq not supported [ 197.703127][ T7381] kvm: pic: non byte read [ 198.674910][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 198.760655][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 198.780763][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.920626][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 198.951368][ T5892] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 198.961256][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.969384][ T5892] usb 3-1: Product: syz [ 198.976353][ T5892] usb 3-1: Manufacturer: syz [ 198.980797][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 198.992344][ T5892] usb 3-1: SerialNumber: syz [ 199.012037][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 199.025458][ T5892] usb 3-1: config 0 descriptor?? [ 199.137657][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 199.210237][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.286733][ T5892] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 199.288470][ T9] usb 2-1: Product: syz [ 199.346000][ T9] usb 2-1: Manufacturer: syz [ 199.376526][ T9] usb 2-1: SerialNumber: syz [ 199.500158][ T9] usb 2-1: config 0 descriptor?? [ 199.511589][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 199.545016][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 199.731112][ T7411] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 199.769360][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.776072][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 199.779286][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.943147][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.965274][ T24] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 199.998925][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.019845][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 200.050115][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.074988][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.101020][ T24] usb 4-1: Product: syz [ 200.113527][ T24] usb 4-1: Manufacturer: syz [ 200.139496][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 200.151313][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 200.163192][ T9] em28xx 2-1:0.0: chip ID is em2765 [ 200.196211][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 200.213542][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 200.695395][ T5892] gspca_sunplus: reg_r err -71 [ 200.712954][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 200.713900][ T24] usb 4-1: USB disconnect, device number 10 [ 200.720232][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 200.732036][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 200.736408][ T5892] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 200.740930][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.841167][ T5892] usb 3-1: USB disconnect, device number 8 [ 200.846147][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 200.912752][ T9] em28xx 2-1:0.0: board has no eeprom [ 201.221349][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 201.230119][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 201.248595][ T5940] em28xx 2-1:0.0: Binding DVB extension [ 201.261943][ T9] usb 2-1: USB disconnect, device number 6 [ 201.316575][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 201.538693][ T5940] em28xx 2-1:0.0: Registering input extension [ 201.592151][ T9] em28xx 2-1:0.0: Closing input extension [ 201.654439][ T9] em28xx 2-1:0.0: Freeing device [ 205.050679][ T5940] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 205.141160][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 205.203757][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 205.223175][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.236384][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.244681][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.247683][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 205.260647][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.301580][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.303473][ T5940] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 205.321835][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 205.342938][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 205.357322][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.362991][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.386799][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 205.398298][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.411552][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.421005][ T5940] usb 2-1: config 0 descriptor?? [ 205.430748][ T7478] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.456331][ T9] usb 5-1: Product: syz [ 205.457967][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.486128][ T9] usb 5-1: Manufacturer: syz [ 205.500441][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.508161][ T9] usb 5-1: SerialNumber: syz [ 205.533786][ T9] usb 5-1: config 0 descriptor?? [ 205.570403][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 205.572344][ T5892] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 205.613932][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 205.623738][ T5892] hid-generic 0002:0004:0009.0003: hidraw0: HID v0.04 Device [syz0] on syz0 [ 205.712163][ T5940] usbhid 2-1:0.0: can't add hid device: -71 [ 205.727637][ T5940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 205.798823][ T5940] usb 2-1: USB disconnect, device number 7 [ 206.037043][ T7486] fido_id[7486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.245941][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 206.330254][ T9] em28xx 5-1:0.0: chip ID is em2765 [ 206.947588][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 206.961001][ T9] em28xx 5-1:0.0: board has no eeprom [ 207.300995][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 207.319492][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 207.337578][ T5940] em28xx 5-1:0.0: Binding DVB extension [ 207.373615][ T9] usb 5-1: USB disconnect, device number 6 [ 207.434455][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 207.752404][ T5940] em28xx 5-1:0.0: Registering input extension [ 207.802701][ T9] em28xx 5-1:0.0: Closing input extension [ 207.834785][ T9] em28xx 5-1:0.0: Freeing device [ 208.790717][ T5899] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 208.962763][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 208.975765][ T5899] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 208.997680][ T5899] usb 4-1: config 0 has no interface number 0 [ 209.022085][ T5899] usb 4-1: New USB device found, idVendor=05d1, idProduct=9006, bcdDevice=48.7b [ 209.040873][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.070017][ T5899] usb 4-1: Product: syz [ 209.104464][ T5899] usb 4-1: Manufacturer: syz [ 209.113400][ T5899] usb 4-1: SerialNumber: syz [ 209.138195][ T5899] usb 4-1: config 0 descriptor?? [ 209.175260][ T5899] hub 4-1:0.96: bad descriptor, ignoring hub [ 209.197477][ T5899] hub 4-1:0.96: probe with driver hub failed with error -5 [ 209.224919][ T5899] ftdi_sio 4-1:0.96: FTDI USB Serial Device converter detected [ 209.250482][ T5899] ftdi_sio ttyUSB0: unknown device type: 0x487b [ 209.601237][ T5899] usb 4-1: USB disconnect, device number 11 [ 209.691431][ T5899] ftdi_sio 4-1:0.96: device disconnected [ 211.390614][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 211.572207][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 211.620597][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.684957][ T9] usb 4-1: config 0 descriptor?? [ 212.180017][ T7552] netlink: 160 bytes leftover after parsing attributes in process `syz.2.474'. [ 212.222742][ T7552] netlink: 160 bytes leftover after parsing attributes in process `syz.2.474'. [ 212.629529][ T7565] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.971317][ T9] usb 4-1: Cannot set autoneg [ 213.976333][ T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 214.034660][ T9] usb 4-1: USB disconnect, device number 12 [ 215.417861][ T7614] veth1_to_bond: entered allmulticast mode [ 215.477176][ T7614] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 215.560919][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 215.904958][ T7614] veth1_to_bond (unregistering): left allmulticast mode [ 216.198718][ T7617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 217.202055][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 217.208653][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 217.215081][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 218.152264][ T7625] Set syz1 is full, maxelem 6117 reached [ 219.455058][ T7654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 221.340623][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 221.511584][ T5940] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 221.558887][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 221.580132][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.607218][ T9] usb 5-1: config 0 descriptor?? [ 221.635549][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 221.683552][ T5940] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 221.757187][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.792263][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.831815][ T5940] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 221.909215][ T5940] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 221.949076][ T5940] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 222.003579][ T5940] usb 6-1: Manufacturer: syz [ 222.042378][ T5940] usb 6-1: config 0 descriptor?? [ 222.583447][ T5940] hid_parser_main: 7 callbacks suppressed [ 222.583478][ T5940] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 222.618713][ T5940] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 222.935178][ T7698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.017353][ T7700] bond1: (slave ip6gretap1): making interface the new active one [ 223.047038][ T7700] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 223.304745][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 223.360878][ T9] usb 5-1: USB disconnect, device number 7 [ 223.434794][ T44] usb 6-1: USB disconnect, device number 7 [ 224.362964][ T7725] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 224.414325][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.528'. [ 228.160604][ T7753] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 228.161358][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 228.175405][ T7753] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 228.242928][ T7782] veth1_to_bond: entered allmulticast mode [ 228.251208][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.543'. [ 228.321843][ T7782] veth1_to_bond (unregistering): left allmulticast mode [ 228.873273][ T7753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.887038][ T7753] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 228.916932][ T7753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.933425][ T7753] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 228.946344][ T7753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.963051][ T7753] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 228.988334][ T7753] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 229.481504][ T5914] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.661608][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 229.680135][ T5914] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 229.699825][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.714764][ T5914] usb 5-1: Product: syz [ 229.724973][ T5914] usb 5-1: Manufacturer: syz [ 229.735913][ T5914] usb 5-1: SerialNumber: syz [ 229.752978][ T5914] usb 5-1: config 0 descriptor?? [ 229.789102][ T5914] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 230.109428][ T30] audit: type=1326 audit(1763614495.155:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7fc00000 [ 230.242998][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 230.249225][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 230.941046][ T5899] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 230.963661][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 230.969886][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 231.107109][ T5899] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 231.116778][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.130672][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 231.130983][ T5899] usb 6-1: Product: syz [ 231.142860][ T5899] usb 6-1: Manufacturer: syz [ 231.147495][ T5899] usb 6-1: SerialNumber: syz [ 231.280957][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 231.288719][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 231.302144][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.312723][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.321240][ T24] usb 3-1: Product: syz [ 231.325470][ T24] usb 3-1: Manufacturer: syz [ 231.330122][ T24] usb 3-1: SerialNumber: syz [ 231.338260][ T24] usb 3-1: config 0 descriptor?? [ 231.351913][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 231.361843][ T24] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 231.569369][ T5899] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 231.581669][ T5899] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 231.953412][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 232.045317][ T5914] gspca_sonixj: reg_w1 err -71 [ 232.091006][ T5914] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 232.108010][ T5914] usb 5-1: USB disconnect, device number 8 [ 232.321181][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 232.378935][ T24] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 232.387476][ T24] em28xx 3-1:0.0: board has no eeprom [ 232.528823][ T7826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.962564][ T7840] binder: 7839:7840 ioctl c0306201 80000180 returned -14 [ 233.042429][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 233.049232][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.208537][ T5899] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 233.222637][ T5899] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 233.233527][ T5899] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 233.262174][ T5899] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 233.310170][ T5899] usb 6-1: USB disconnect, device number 8 [ 233.447468][ T7818] em28xx 3-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 233.500587][ T24] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 233.531695][ T24] em28xx 3-1:0.0: dvb set to bulk mode. [ 233.544468][ T44] em28xx 3-1:0.0: Binding DVB extension [ 233.588583][ T24] usb 3-1: USB disconnect, device number 9 [ 233.611986][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 233.758532][ T44] em28xx 3-1:0.0: Registering input extension [ 233.792004][ T24] em28xx 3-1:0.0: Closing input extension [ 233.812362][ T24] em28xx 3-1:0.0: Freeing device [ 235.140687][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.261738][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 235.460759][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 235.511822][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 235.535582][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 235.601415][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 235.655485][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.670790][ T24] usb 3-1: Product: syz [ 235.681930][ T24] usb 3-1: Manufacturer: syz [ 235.695666][ T24] usb 3-1: SerialNumber: syz [ 235.709712][ T24] usb 3-1: config 0 descriptor?? [ 235.732443][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 235.770600][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 236.360263][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 236.374937][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 236.532347][ T7892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.864173][ T7898] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.034604][ T24] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 237.314778][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 237.336057][ T7907] netlink: 173 bytes leftover after parsing attributes in process `syz.1.584'. [ 237.363330][ T7907] netlink: 277 bytes leftover after parsing attributes in process `syz.1.584'. [ 237.376736][ T7907] netlink: 277 bytes leftover after parsing attributes in process `syz.1.584'. [ 237.479352][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 237.486623][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 237.500005][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 237.540060][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 237.557245][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 237.581642][ T24] usb 3-1: USB disconnect, device number 10 [ 237.911377][ T7914] syzkaller0: entered promiscuous mode [ 237.918096][ T7914] syzkaller0: entered allmulticast mode [ 238.416838][ T7916] syzkaller0: entered allmulticast mode [ 239.027961][ T7926] syzkaller0: entered promiscuous mode [ 239.039943][ T7926] syzkaller0: entered allmulticast mode [ 239.810950][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 239.980671][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 239.998578][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.027315][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.107799][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.135991][ T24] usb 6-1: Product: syz [ 240.140224][ T24] usb 6-1: Manufacturer: syz [ 240.146310][ T24] usb 6-1: SerialNumber: syz [ 240.161145][ T24] usb 6-1: config 0 descriptor?? [ 240.259358][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.310634][ T24] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 240.874134][ T24] em28xx 6-1:0.0: chip ID is em2765 [ 241.481903][ T24] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 241.498033][ T24] em28xx 6-1:0.0: board has no eeprom [ 242.562816][ T7937] em28xx 6-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 242.620909][ T24] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 242.634378][ T24] em28xx 6-1:0.0: dvb set to bulk mode. [ 242.640061][ T44] em28xx 6-1:0.0: Binding DVB extension [ 242.658939][ T24] usb 6-1: USB disconnect, device number 9 [ 242.725722][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 242.753825][ T44] em28xx 6-1:0.0: Registering input extension [ 242.760791][ T24] em28xx 6-1:0.0: Closing input extension [ 242.775502][ T24] em28xx 6-1:0.0: Freeing device [ 243.342118][ T7966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.591276][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 243.770639][ T9] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 243.821791][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.859449][ T9] usb 5-1: config 0 has no interface number 0 [ 243.887256][ T9] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 243.947875][ T9] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 243.992800][ T9] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.077262][ T9] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 244.113494][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.146329][ T9] usb 5-1: Product: syz [ 244.156510][ T9] usb 5-1: Manufacturer: syz [ 244.172593][ T9] usb 5-1: SerialNumber: syz [ 244.226193][ T9] usb 5-1: config 0 descriptor?? [ 244.278424][ T9] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 244.393906][ T9] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 244.471208][ T9] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 244.587439][ T9] usb 5-1: USB disconnect, device number 9 [ 244.612184][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 244.688498][ T9] cyberjack 5-1:0.69: device disconnected [ 246.797949][ T30] audit: type=1326 audit(1763614511.835:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 246.933331][ T30] audit: type=1326 audit(1763614511.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 246.945159][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 247.021121][ T30] audit: type=1326 audit(1763614511.845:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 247.076966][ T30] audit: type=1326 audit(1763614511.885:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 247.161010][ T30] audit: type=1326 audit(1763614511.895:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 247.271548][ T30] audit: type=1326 audit(1763614511.895:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 247.512875][ T30] audit: type=1326 audit(1763614511.895:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 247.597575][ T30] audit: type=1326 audit(1763614511.895:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 247.620231][ T30] audit: type=1326 audit(1763614511.895:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 247.642863][ T30] audit: type=1326 audit(1763614511.895:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.2.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 248.400682][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 248.662783][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 248.692483][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 248.733218][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.785524][ T9] usb 4-1: Product: syz [ 248.833916][ T9] usb 4-1: Manufacturer: syz [ 248.913855][ T9] usb 4-1: SerialNumber: syz [ 248.941320][ T9] usb 4-1: config 0 descriptor?? [ 248.987330][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 249.003831][ T8046] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 249.164425][ T8051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.408788][ T9] gspca_sonixj: reg_w1 err -71 [ 251.413969][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 251.438503][ T9] usb 4-1: USB disconnect, device number 13 [ 256.217315][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 256.262347][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 256.262366][ T30] audit: type=1326 audit(1763614521.305:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 256.334687][ T30] audit: type=1326 audit(1763614521.315:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 256.378959][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 256.379601][ T30] audit: type=1326 audit(1763614521.315:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 256.393489][ T24] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 256.454883][ T30] audit: type=1326 audit(1763614521.345:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 256.460868][ T24] usb 4-1: config 0 has no interface number 0 [ 256.490863][ T30] audit: type=1326 audit(1763614521.345:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 256.548380][ T30] audit: type=1326 audit(1763614521.345:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 256.549033][ T24] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 256.618502][ T30] audit: type=1326 audit(1763614521.345:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 256.633232][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 256.670280][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.678713][ T30] audit: type=1326 audit(1763614521.355:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 256.678764][ T30] audit: type=1326 audit(1763614521.355:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 256.773619][ T24] usb 4-1: Product: syz [ 256.777851][ T24] usb 4-1: Manufacturer: syz [ 256.789390][ T30] audit: type=1326 audit(1763614521.355:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 256.812615][ T24] usb 4-1: SerialNumber: syz [ 256.842687][ T24] usb 4-1: config 0 descriptor?? [ 256.855986][ T8132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.114002][ T8132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 259.194891][ T24] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 259.211098][ T24] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 259.223969][ T24] asix 4-1:0.188: probe with driver asix failed with error -71 [ 259.248789][ T24] usb 4-1: USB disconnect, device number 14 [ 259.739195][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 259.824057][ T8159] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 259.854439][ T8159] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 259.887076][ T8159] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 259.915985][ T8159] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 259.935905][ T8159] kvm: requested 113142 ns i8254 timer period limited to 200000 ns [ 259.987286][ T8159] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 260.008812][ T8159] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 260.067012][ T8159] kvm: requested 194438 ns i8254 timer period limited to 200000 ns [ 260.108286][ T8159] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 261.248986][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.255520][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.450905][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 262.652745][ T5899] usb 5-1: config 4 has an invalid interface number: 88 but max is 0 [ 262.666485][ T5899] usb 5-1: config 4 has no interface number 0 [ 262.680908][ T5899] usb 5-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 262.695245][ T5899] usb 5-1: config 4 interface 88 has no altsetting 0 [ 262.713181][ T5899] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 262.723853][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.732257][ T5899] usb 5-1: Product: syz [ 262.736610][ T5899] usb 5-1: Manufacturer: syz [ 262.742249][ T5899] usb 5-1: SerialNumber: syz [ 263.577489][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 265.375974][ T9] usb 5-1: USB disconnect, device number 10 [ 265.460875][ T5899] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 265.613976][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.625418][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.670223][ T5899] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 265.694216][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.855518][ T5899] usb 3-1: config 0 descriptor?? [ 266.118195][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 266.126060][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 266.172662][ T5899] usb 3-1: USB disconnect, device number 11 [ 266.734439][ T8243] binder: BINDER_SET_CONTEXT_MGR already set [ 266.762973][ T8243] binder: 8242:8243 ioctl 4018620d 80000100 returned -16 [ 266.802519][ T8243] binder: BINDER_SET_CONTEXT_MGR already set [ 266.863763][ T8243] binder: 8242:8243 ioctl 4018620d 80004a80 returned -16 [ 267.220627][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 267.410925][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 267.424724][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 267.466888][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 267.526775][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 267.665202][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.756254][ T24] usb 3-1: Product: syz [ 267.805060][ T24] usb 3-1: Manufacturer: syz [ 267.830937][ T24] usb 3-1: SerialNumber: syz [ 267.870091][ T24] usb 3-1: config 0 descriptor?? [ 267.903193][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 267.935541][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 268.460940][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 268.517053][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 268.533075][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 268.610937][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 268.627851][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.656754][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 268.687633][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.718100][ T44] usb 4-1: config 0 descriptor?? [ 268.739486][ T44] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 269.556094][ T24] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 269.756885][ T24] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 269.773941][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 269.782007][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 269.788929][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 269.796530][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 269.804320][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 269.818287][ T24] usb 3-1: USB disconnect, device number 12 [ 269.854160][ T44] gspca_vc032x: reg_r err -71 [ 269.859164][ T44] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 269.875584][ T44] usb 4-1: USB disconnect, device number 15 [ 270.670273][ T8282] binder: 8280:8282 ioctl c0306201 80000180 returned -14 [ 271.880887][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 271.977647][ T8297] syzkaller0: entered promiscuous mode [ 271.983899][ T8297] syzkaller0: entered allmulticast mode [ 272.054200][ T24] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 272.073659][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.103852][ T24] usb 2-1: config 0 has no interface number 0 [ 272.126573][ T24] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 272.145831][ T24] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 272.172036][ T24] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.224509][ T24] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 272.251593][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.276455][ T24] usb 2-1: Product: syz [ 272.293682][ T24] usb 2-1: Manufacturer: syz [ 272.299788][ T24] usb 2-1: SerialNumber: syz [ 272.316658][ T24] usb 2-1: config 0 descriptor?? [ 272.351150][ T24] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 272.371368][ T24] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 272.386060][ T24] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 272.645909][ T24] usb 2-1: USB disconnect, device number 8 [ 272.696988][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 272.811296][ T24] cyberjack 2-1:0.69: device disconnected [ 273.356920][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 273.420626][ T5899] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 273.595882][ T5899] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 273.621907][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.650940][ T5899] usb 6-1: config 0 has no interface number 0 [ 273.674244][ T5899] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 273.699270][ T5899] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.759819][ T5899] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 273.788820][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.807560][ T5899] usb 6-1: Product: syz [ 273.816547][ T5899] usb 6-1: Manufacturer: syz [ 273.826905][ T5899] usb 6-1: SerialNumber: syz [ 273.845765][ T5899] usb 6-1: config 0 descriptor?? [ 274.282965][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.304285][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.335086][ T5899] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 274.421135][ T5899] usb 6-1: USB disconnect, device number 10 [ 277.381779][ T8319] bond0: (slave syz_tun): Releasing backup interface [ 277.536544][ T8340] syzkaller0: entered promiscuous mode [ 277.543644][ T8340] syzkaller0: entered allmulticast mode [ 277.624232][ T8355] netlink: 7 bytes leftover after parsing attributes in process `syz.4.719'. [ 278.151349][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 278.322951][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.358958][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.420438][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 278.475407][ T24] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 278.521436][ T24] usb 3-1: Manufacturer: syz [ 278.577719][ T24] usb 3-1: config 0 descriptor?? [ 279.038521][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.093470][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.756381][ T24] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input24 [ 279.867522][ T24] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input25 [ 279.897997][ T24] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input26 [ 279.972755][ T24] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input27 [ 280.035809][ T24] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 280.091573][ T24] usb 3-1: USB disconnect, device number 13 [ 280.349618][ T8378] fido_id[8378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 281.779537][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 283.189888][ T8405] syzkaller0: entered promiscuous mode [ 283.210151][ T8405] syzkaller0: entered allmulticast mode [ 283.371880][ T5899] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 283.574894][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.608401][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 283.613263][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 283.653727][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 283.682746][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 283.702947][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 283.752216][ T5899] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 283.774509][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 283.795379][ T5899] usb 5-1: Product: syz [ 283.803333][ T5899] usb 5-1: Manufacturer: syz [ 283.815117][ T5899] usb 5-1: SerialNumber: syz [ 283.839758][ T5899] usb 5-1: config 0 descriptor?? [ 283.957338][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.968658][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.978889][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.007169][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.021337][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.080672][ T5899] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 284.100806][ T5899] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 284.276939][ T5899] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 284.298596][ T5899] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 284.306718][ T8430] loop6: detected capacity change from 0 to 524287999 [ 284.311156][ T5899] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 284.411523][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 284.481269][ T5899] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 284.650585][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 284.662751][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.677689][ T24] usb 4-1: config 4 interface 0 has no altsetting 0 [ 284.703263][ T24] usb 4-1: string descriptor 0 read error: -22 [ 284.715145][ T24] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 284.748457][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.880143][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 285.006528][ T24] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 285.042870][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.101742][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 285.110035][ T24] usb 4-1: media controller created [ 285.142786][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.240675][ T8427] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 285.711424][ T5899] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 285.745069][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.750695][ T5899] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 285.801074][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.821966][ T8423] bridge_slave_0: entered allmulticast mode [ 285.848968][ T8423] bridge_slave_0: entered promiscuous mode [ 285.856901][ T5899] usb 5-1: USB disconnect, device number 11 [ 285.894173][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.925337][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.951437][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 285.981024][ T8423] bridge_slave_1: entered allmulticast mode [ 286.015526][ T8423] bridge_slave_1: entered promiscuous mode [ 286.080902][ T5829] Bluetooth: hci2: command tx timeout [ 286.256592][ T24] usb 4-1: USB disconnect, device number 16 [ 286.365389][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.422447][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.666640][ T8423] team0: Port device team_slave_0 added [ 286.712164][ T8423] team0: Port device team_slave_1 added [ 286.852032][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 286.945867][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.961864][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.000822][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 287.032801][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.095218][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.108765][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.220568][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 287.230989][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.248668][ T44] usb 4-1: config 0 has no interfaces? [ 287.302965][ T44] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 287.359044][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.441774][ T44] usb 4-1: config 0 descriptor?? [ 287.470653][ T8423] hsr_slave_0: entered promiscuous mode [ 287.499301][ T8423] hsr_slave_1: entered promiscuous mode [ 287.581172][ T8423] debugfs: 'hsr0' already exists in 'hsr' [ 287.599136][ T8423] Cannot create hsr debugfs directory [ 288.012240][ T8455] netlink: 'syz.1.750': attribute type 4 has an invalid length. [ 288.160776][ T5829] Bluetooth: hci2: command tx timeout [ 288.425931][ T8423] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.513417][ T8423] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 288.573460][ T8423] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 288.695077][ T8423] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 289.180131][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.216157][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.240992][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.248243][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.294748][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.302025][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.545459][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.666830][ T5940] usb 4-1: USB disconnect, device number 17 [ 289.767922][ T8423] veth0_vlan: entered promiscuous mode [ 289.810262][ T8423] veth1_vlan: entered promiscuous mode [ 289.849589][ T8495] fuse: Bad value for 'fd' [ 289.924021][ T8423] veth0_macvtap: entered promiscuous mode [ 289.958220][ T8423] veth1_macvtap: entered promiscuous mode [ 290.057566][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.093779][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.156258][ T1152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.201013][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.221207][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.230093][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.250073][ T5829] Bluetooth: hci2: command tx timeout [ 290.329051][ T8509] netlink: 'syz.3.766': attribute type 1 has an invalid length. [ 290.402016][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 290.415434][ T8509] bond1: entered promiscuous mode [ 290.436200][ T8509] bond1: entered allmulticast mode [ 290.466727][ T8512] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 290.480371][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.766'. [ 290.515323][ T8512] bond1: (slave bridge1): making interface the new active one [ 290.527563][ T8512] bridge1: entered promiscuous mode [ 290.533783][ T8512] bridge1: entered allmulticast mode [ 290.540328][ T8512] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 290.619294][ T8509] bond1: left promiscuous mode [ 290.624623][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 290.650455][ T8509] bridge1: left promiscuous mode [ 290.660061][ T8509] bond1: left allmulticast mode [ 290.666614][ T8509] bridge1: left allmulticast mode [ 290.673924][ T8509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.761651][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.788843][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.798013][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 290.809263][ T24] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 290.838933][ T24] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 290.871208][ T24] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 290.911589][ T24] usb 6-1: config 250 has no interface number 0 [ 290.918745][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.933265][ T24] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 290.951380][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.013027][ T24] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 291.065235][ T24] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.112208][ T24] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.161127][ T24] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 291.241861][ T24] usb 6-1: config 250 interface 228 has no altsetting 0 [ 291.301917][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 291.321429][ T24] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 291.341761][ T24] usb 6-1: Product: syz [ 291.345989][ T24] usb 6-1: SerialNumber: syz [ 291.376121][ T24] hub 6-1:250.228: bad descriptor, ignoring hub [ 291.390185][ T24] hub 6-1:250.228: probe with driver hub failed with error -5 [ 291.584063][ T24] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 291.678130][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 291.678149][ T30] audit: type=1804 audit(1763614556.725:160): pid=8535 uid=0 auid=0 ses=1 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.773" name="file0" dev="ramfs" ino=26340 res=1 errno=0 [ 291.713067][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 291.855465][ T24] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 291.867404][ T8537] syzkaller0: entered allmulticast mode [ 291.886022][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 291.911844][ T44] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 291.920332][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.935702][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.951803][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.962687][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.976782][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 291.986401][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.241519][ T44] usb 4-1: GET_CAPABILITIES returned 0 [ 292.257517][ T44] usbtmc 4-1:16.0: can't read capabilities [ 292.321977][ T5829] Bluetooth: hci2: command tx timeout [ 292.431027][ T5892] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 292.566559][ T9] usb 4-1: USB disconnect, device number 18 [ 292.663491][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 292.709633][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 292.765561][ T5892] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 292.806749][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.853583][ T5892] usb 2-1: config 0 descriptor?? [ 292.865488][ T8543] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 293.331106][ T9] usb 6-1: USB disconnect, device number 11 [ 293.420323][ T9] usblp0: removed [ 293.669496][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 293.679757][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 293.711379][ T5892] usb 2-1: USB disconnect, device number 9 [ 293.793461][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 293.993385][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.011466][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 294.033349][ T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 294.043290][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.062687][ T9] usb 6-1: config 0 descriptor?? [ 294.080284][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 294.112288][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 294.133477][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 294.151318][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 294.158629][ T9] usb 6-1: media controller created [ 294.166617][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.192117][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 294.208339][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 294.232111][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 294.275020][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 294.313248][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 294.323589][ T8552] dvb-usb: bulk message failed: -22 (2/0) [ 294.427678][ T5892] usb 6-1: USB disconnect, device number 12 [ 294.518430][ T8573] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 294.538622][ T5892] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 295.420604][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 295.430200][ T8589] batman_adv: batadv0: Adding interface: dummy0 [ 295.439318][ T8589] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.468716][ T8589] batman_adv: batadv0: Interface activated: dummy0 [ 295.492313][ T8589] batadv0: mtu less than device minimum [ 295.499809][ T8589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.512000][ T8589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.523597][ T8589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.535410][ T8589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.546879][ T8589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.558565][ T8589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.570117][ T8589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.581873][ T8589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.593360][ T8589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.610717][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 295.629336][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 295.641689][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.661576][ T9] usb 2-1: config 0 descriptor?? [ 295.675243][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 296.187640][ T8603] syzkaller0: entered promiscuous mode [ 296.206800][ T8603] syzkaller0: entered allmulticast mode [ 297.970579][ T9] gspca_sonixj: i2c_w8 err -71 [ 297.984674][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 298.038536][ T9] usb 2-1: USB disconnect, device number 10 [ 298.401984][ T8630] syzkaller0: entered promiscuous mode [ 298.414526][ T8630] syzkaller0: entered allmulticast mode [ 298.944664][ T8637] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 301.569933][ T30] audit: type=1326 audit(1763614566.615:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.6.821" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x0 [ 302.700586][ T8698] kvm: kvm [8696]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 303.363064][ T8710] binder_alloc: 8708: pid 8708 spamming oneway? 1 buffers allocated for a total size of 4096 [ 305.292230][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 305.330925][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 305.376923][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 305.467781][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 305.528732][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 306.671406][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 306.916821][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 306.946843][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.979770][ T24] usb 5-1: Product: syz [ 306.991254][ T8761] syzkaller0: entered promiscuous mode [ 307.005176][ T24] usb 5-1: Manufacturer: syz [ 307.011943][ T8760] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.025179][ T8761] syzkaller0: entered allmulticast mode [ 307.031158][ T24] usb 5-1: SerialNumber: syz [ 307.044489][ T8763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.477384][ T24] net_ratelimit: 10 callbacks suppressed [ 307.477411][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 307.560878][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 308.031487][ T5914] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 308.210616][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 308.218440][ T5914] usb 6-1: config 0 has an invalid interface number: 138 but max is 0 [ 308.227083][ T5914] usb 6-1: config 0 has no interface number 0 [ 308.234136][ T5914] usb 6-1: config 0 interface 138 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.245576][ T5914] usb 6-1: config 0 interface 138 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 308.259941][ T5914] usb 6-1: config 0 interface 138 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 308.274779][ T5843] bond0: (slave syz_tun): Releasing backup interface [ 308.275254][ T5914] usb 6-1: config 0 interface 138 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023 [ 308.292795][ T5914] usb 6-1: config 0 interface 138 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 308.304296][ T5914] usb 6-1: config 0 interface 138 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 308.316895][ T5914] usb 6-1: config 0 interface 138 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.327893][ T5914] usb 6-1: config 0 interface 138 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 308.338899][ T5914] usb 6-1: config 0 interface 138 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.352573][ T5914] usb 6-1: New USB device found, idVendor=0458, idProduct=7045, bcdDevice=66.a7 [ 308.362081][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.370177][ T5914] usb 6-1: Product: syz [ 308.379906][ T5914] usb 6-1: Manufacturer: syz [ 308.386457][ T5914] usb 6-1: SerialNumber: syz [ 308.395451][ T5914] usb 6-1: config 0 descriptor?? [ 308.415912][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 308.427468][ T5914] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7045 [ 308.440830][ T5892] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 308.459977][ T150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.543120][ T150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.590683][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 308.600697][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 308.608572][ T9] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 308.617863][ T9] usb 7-1: config 0 has no interface number 0 [ 308.624236][ T9] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 308.635389][ T5892] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 308.637767][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 308.654036][ T5892] usb 2-1: config 0 has no interface number 0 [ 308.661185][ T5892] usb 2-1: config 0 interface 2 has no altsetting 0 [ 308.689884][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.691377][ T5892] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 308.712800][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.718952][ T9] usb 7-1: Product: syz [ 308.725272][ T9] usb 7-1: Manufacturer: syz [ 308.725698][ T5892] usb 2-1: Product: syz [ 308.734943][ T5892] usb 2-1: Manufacturer: syz [ 308.738279][ T150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.739835][ T5892] usb 2-1: SerialNumber: syz [ 308.760392][ T9] usb 7-1: SerialNumber: syz [ 308.777277][ T9] usb 7-1: config 0 descriptor?? [ 308.788973][ T8789] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 308.790731][ T5892] usb 2-1: config 0 descriptor?? [ 308.810747][ T5914] gspca_sn9c20x: Write register 1000 failed -71 [ 308.827926][ T5892] ums-onetouch 2-1:0.2: USB Mass Storage device detected [ 308.837008][ T5914] gspca_sn9c20x: Device initialization failed [ 308.843750][ T5914] gspca_sn9c20x 6-1:0.138: probe with driver gspca_sn9c20x failed with error -71 [ 308.883053][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 308.885415][ T150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.944605][ T5914] usb 6-1: USB disconnect, device number 13 [ 309.048226][ T8789] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 309.135509][ T5899] usb 2-1: USB disconnect, device number 11 [ 309.361676][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 309.390319][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 309.403623][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 309.414481][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 309.425781][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 309.451066][ T24] usb 5-1: USB disconnect, device number 12 [ 309.613170][ T150] bond1 (unregistering): (slave bridge1): Releasing active interface [ 309.858388][ T150] bond0 (unregistering): Released all slaves [ 310.706304][ T150] bond1 (unregistering): Released all slaves [ 310.799792][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.828430][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.840963][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.860078][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.881208][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.373721][ T9] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 311.469978][ T9] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 311.540955][ T9] asix 7-1:0.188: probe with driver asix failed with error -71 [ 311.608483][ T9] usb 7-1: USB disconnect, device number 2 [ 312.367927][ T30] audit: type=1326 audit(1763614577.365:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 312.640766][ T30] audit: type=1326 audit(1763614577.365:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 312.811310][ T30] audit: type=1326 audit(1763614577.365:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 312.854599][ T8820] netlink: 180 bytes leftover after parsing attributes in process `syz.4.865'. [ 312.902998][ T8825] netlink: 180 bytes leftover after parsing attributes in process `syz.4.865'. [ 312.936515][ T30] audit: type=1326 audit(1763614577.365:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 312.976665][ T5829] Bluetooth: hci4: command tx timeout [ 313.026899][ T30] audit: type=1326 audit(1763614577.365:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 313.053815][ T150] hsr_slave_0: left promiscuous mode [ 313.088405][ T30] audit: type=1326 audit(1763614577.365:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 313.111737][ T30] audit: type=1326 audit(1763614577.365:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 313.111749][ T150] hsr_slave_1: left promiscuous mode [ 313.180864][ T30] audit: type=1326 audit(1763614577.365:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 313.257688][ T30] audit: type=1326 audit(1763614577.365:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 313.333801][ T30] audit: type=1326 audit(1763614577.365:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 313.337113][ T150] veth1_to_batadv: left promiscuous mode [ 313.408683][ T150] veth1_macvtap: left promiscuous mode [ 313.455143][ T150] veth0_macvtap: left promiscuous mode [ 313.468081][ T150] veth1_vlan: left promiscuous mode [ 313.480145][ T150] veth0_vlan: left promiscuous mode [ 313.520689][ T24] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 313.685279][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.720961][ T24] usb 6-1: config 0 has no interface number 0 [ 313.727129][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 313.781007][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 313.826467][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.856293][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.907109][ T24] usb 6-1: config 0 descriptor?? [ 313.923716][ T8839] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 313.943593][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 314.164946][ T24] usb 6-1: USB disconnect, device number 14 [ 314.171414][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 315.041331][ T5829] Bluetooth: hci4: command tx timeout [ 315.257991][ T8828] netlink: 180 bytes leftover after parsing attributes in process `syz.4.865'. [ 315.273807][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 315.470164][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.505797][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.554301][ T24] usb 6-1: Product: syz [ 315.558535][ T24] usb 6-1: Manufacturer: syz [ 315.588010][ T24] usb 6-1: SerialNumber: syz [ 315.633874][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 315.634464][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 315.750585][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 315.780126][ T5892] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 315.812278][ T150] ------------[ cut here ]------------ [ 315.818052][ T150] WARNING: CPU: 0 PID: 150 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100 [ 315.828323][ T150] Modules linked in: [ 315.832775][ T150] CPU: 0 UID: 0 PID: 150 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 315.842264][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.852406][ T150] Workqueue: netns cleanup_net [ 315.857243][ T150] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100 [ 315.863370][ T150] Code: 88 bd 17 f8 4b 83 3c 2c 00 75 19 e8 bc fb b1 f7 49 81 fd f8 07 00 00 74 1d e8 ae fb b1 f7 49 83 c5 08 eb c9 e8 a3 fb b1 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 315.883134][ T150] RSP: 0018:ffffc90002e97890 EFLAGS: 00010293 [ 315.889647][ T150] RAX: ffffffff8a0e081d RBX: ffff888031f80000 RCX: ffff888020bcdac0 [ 315.898011][ T150] RDX: 0000000000000000 RSI: ffffffff8d8f50ca RDI: ffff888031f801f8 [ 315.906152][ T150] RBP: ffffc90002e97990 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 315.914286][ T150] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffff888031f80000 [ 315.922424][ T150] R13: 00000000000001f8 R14: ffff888026b62480 R15: dffffc0000000000 [ 315.930438][ T150] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 315.939776][ T150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.946521][ T150] CR2: 00007fd430b89000 CR3: 0000000069580000 CR4: 00000000003526f0 [ 315.954604][ T150] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 315.962721][ T150] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 315.970792][ T150] Call Trace: [ 315.974110][ T150] [ 315.977095][ T150] ops_undo_list+0x49a/0x990 [ 315.981901][ T150] ? __pfx_ops_undo_list+0x10/0x10 [ 315.987060][ T150] ? do_raw_spin_unlock+0x122/0x240 [ 315.992595][ T150] cleanup_net+0x4d8/0x820 [ 315.997147][ T150] ? __pfx_cleanup_net+0x10/0x10 [ 316.002426][ T150] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.007681][ T150] ? process_scheduled_works+0x9ef/0x17b0 [ 316.013535][ T150] ? process_scheduled_works+0x9ef/0x17b0 [ 316.019301][ T150] process_scheduled_works+0xae1/0x17b0 [ 316.024991][ T150] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.031079][ T150] worker_thread+0x8a0/0xda0 [ 316.035722][ T150] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.042177][ T150] ? __kthread_parkme+0x7b/0x200 [ 316.047162][ T150] kthread+0x711/0x8a0 [ 316.051334][ T150] ? __pfx_worker_thread+0x10/0x10 [ 316.056486][ T150] ? __pfx_kthread+0x10/0x10 [ 316.061192][ T150] ? __pfx_kthread+0x10/0x10 [ 316.065830][ T150] ret_from_fork+0x4bc/0x870 [ 316.070574][ T150] ? __pfx_ret_from_fork+0x10/0x10 [ 316.075740][ T150] ? __switch_to_asm+0x39/0x70 [ 316.080667][ T150] ? __switch_to_asm+0x33/0x70 [ 316.085468][ T150] ? __pfx_kthread+0x10/0x10 [ 316.090523][ T150] ret_from_fork_asm+0x1a/0x30 [ 316.095350][ T150] [ 316.098402][ T150] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 316.105712][ T150] CPU: 0 UID: 0 PID: 150 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 316.115205][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.125295][ T150] Workqueue: netns cleanup_net [ 316.130179][ T150] Call Trace: [ 316.133507][ T150] [ 316.136452][ T150] dump_stack_lvl+0x99/0x250 [ 316.141177][ T150] ? __asan_memcpy+0x40/0x70 [ 316.145874][ T150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.151102][ T150] ? __pfx__printk+0x10/0x10 [ 316.155715][ T150] vpanic+0x237/0x6d0 [ 316.159723][ T150] ? __pfx_vpanic+0x10/0x10 [ 316.164355][ T150] panic+0xb9/0xc0 [ 316.168101][ T150] ? __pfx_panic+0x10/0x10 [ 316.172572][ T150] __warn+0x31b/0x4b0 [ 316.176571][ T150] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 316.182403][ T150] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 316.187799][ T150] report_bug+0x2be/0x4f0 [ 316.192154][ T150] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 316.197558][ T150] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 316.202953][ T150] ? xfrm6_tunnel_net_exit+0x80/0x100 [ 316.208355][ T150] handle_bug+0x84/0x160 [ 316.212615][ T150] exc_invalid_op+0x1a/0x50 [ 316.217128][ T150] asm_exc_invalid_op+0x1a/0x20 [ 316.222042][ T150] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100 [ 316.228071][ T150] Code: 88 bd 17 f8 4b 83 3c 2c 00 75 19 e8 bc fb b1 f7 49 81 fd f8 07 00 00 74 1d e8 ae fb b1 f7 49 83 c5 08 eb c9 e8 a3 fb b1 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 316.247693][ T150] RSP: 0018:ffffc90002e97890 EFLAGS: 00010293 [ 316.253784][ T150] RAX: ffffffff8a0e081d RBX: ffff888031f80000 RCX: ffff888020bcdac0 [ 316.261790][ T150] RDX: 0000000000000000 RSI: ffffffff8d8f50ca RDI: ffff888031f801f8 [ 316.269877][ T150] RBP: ffffc90002e97990 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 316.277882][ T150] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffff888031f80000 [ 316.285984][ T150] R13: 00000000000001f8 R14: ffff888026b62480 R15: dffffc0000000000 [ 316.293981][ T150] ? xfrm6_tunnel_net_exit+0x7d/0x100 [ 316.299397][ T150] ops_undo_list+0x49a/0x990 [ 316.304028][ T150] ? __pfx_ops_undo_list+0x10/0x10 [ 316.309163][ T150] ? do_raw_spin_unlock+0x122/0x240 [ 316.314401][ T150] cleanup_net+0x4d8/0x820 [ 316.318861][ T150] ? __pfx_cleanup_net+0x10/0x10 [ 316.323821][ T150] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.329072][ T150] ? process_scheduled_works+0x9ef/0x17b0 [ 316.334839][ T150] ? process_scheduled_works+0x9ef/0x17b0 [ 316.340601][ T150] process_scheduled_works+0xae1/0x17b0 [ 316.346210][ T150] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.352318][ T150] worker_thread+0x8a0/0xda0 [ 316.356951][ T150] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.363349][ T150] ? __kthread_parkme+0x7b/0x200 [ 316.368409][ T150] kthread+0x711/0x8a0 [ 316.372517][ T150] ? __pfx_worker_thread+0x10/0x10 [ 316.377748][ T150] ? __pfx_kthread+0x10/0x10 [ 316.382378][ T150] ? __pfx_kthread+0x10/0x10 [ 316.387032][ T150] ret_from_fork+0x4bc/0x870 [ 316.391654][ T150] ? __pfx_ret_from_fork+0x10/0x10 [ 316.396802][ T150] ? __switch_to_asm+0x39/0x70 [ 316.402031][ T150] ? __switch_to_asm+0x33/0x70 [ 316.406823][ T150] ? __pfx_kthread+0x10/0x10 [ 316.411456][ T150] ret_from_fork_asm+0x1a/0x30 [ 316.416271][ T150] [ 316.419612][ T150] Kernel Offset: disabled [ 316.423957][ T150] Rebooting in 86400 seconds..