last executing test programs: 1m25.756635659s ago: executing program 0 (id=636): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2, {0x3, 0x1, 0x4}, 0x1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {0x1, 0x0, 0x6}}, 0x18) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r1, 0x3, {0x2, 0xf0, 0x1}, 0x1}, 0x18) 1m25.621842037s ago: executing program 0 (id=638): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a000000"], 0x14}}, 0x20008000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x121440, 0x10) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff004}]}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x100000001, 0x4, 0x5, 0x5, 0x9, 0x36, 0xa4, 0x129e, 0x4, 0x10, 0x401, 0x0, 0x4, 0x4a, 0x80], 0x80a0000, 0x2a884}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1m24.374698141s ago: executing program 0 (id=646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {}, {0xa, 0x17}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x81}, {{0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x6}, {0x95, 0x1, 0x5, 0x1}}}]}]}]}}]}, 0x74}}, 0x40040) 1m24.035210096s ago: executing program 0 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 1m23.839399157s ago: executing program 0 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x0, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m23.440941838s ago: executing program 0 (id=653): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) close(0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$unix(0x1, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa401020301090224000100000000090400000243"], 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0xfffffffc, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x4000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz0\x00', {0x8, 0x9, 0x1, 0xecb2}, 0x48, [0x8, 0x10000, 0x8, 0xc69f, 0x5d, 0x5, 0x4, 0x1, 0xa618, 0x7f, 0x1, 0xba, 0x5, 0x4000, 0xd, 0x2, 0x8, 0xd08c, 0x1, 0x4, 0x91, 0x4a, 0xfe000000, 0x7, 0x7, 0x5, 0x3, 0x3, 0x4e, 0x1ff, 0x2d8, 0xe, 0x5, 0x8, 0x9, 0x8, 0x2, 0x8, 0xd, 0xfffffff2, 0x0, 0x7fff, 0x3569, 0xc68, 0x5041, 0x5, 0xffff, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x5, 0x9, 0x5c8c5db, 0x8f16, 0x7fffffff, 0x101, 0x4, 0x2, 0x8000, 0x1, 0x1, 0x6], [0x9, 0x4d78, 0x6, 0x66c, 0x7, 0x1, 0x2, 0x7ff, 0x1, 0x3, 0x80000001, 0x1, 0x3, 0x36, 0x5, 0x4, 0x10000, 0x8, 0x28, 0xfff, 0x6, 0x6, 0x4, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0x66c0, 0xffff, 0x401, 0xbfab, 0x10000, 0x5, 0xfffffd9e, 0x8, 0x7, 0x10001, 0x10000, 0x7, 0x8001, 0x8, 0x80, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x2a2, 0xc9, 0x100, 0x7, 0x7fff, 0x401, 0x822, 0x86f8, 0x100, 0x1d3, 0x10000, 0x48b3, 0x0, 0x8], [0x2, 0x6, 0x200, 0x2, 0xfffffffd, 0x4, 0x9, 0x2, 0x401, 0x10000, 0x3ff, 0xc, 0x2, 0x5, 0x4, 0x8, 0xf, 0x4, 0x6, 0xff, 0x2, 0x5, 0x9, 0x2, 0x101, 0x8, 0x5, 0xc3bcf961, 0xffffffff, 0x6, 0x9fdb, 0x4, 0x3, 0x7, 0xffffffff, 0xfffffff7, 0x3, 0x1, 0xffff8dc0, 0x6, 0x2, 0x6, 0xf, 0x0, 0x5, 0x0, 0x6, 0xd, 0x7, 0xf61d, 0x0, 0x4, 0x6, 0x3, 0x8001, 0xb, 0x3, 0xe99, 0x9, 0x8, 0x400, 0xff, 0x80000001, 0x73], [0x7f, 0x4, 0x4989, 0x4, 0x7, 0x7, 0x9, 0x9, 0x401, 0x3, 0xfffffff9, 0x401, 0x401, 0x7f, 0x80, 0x401, 0x7, 0x3, 0x401, 0x10000000, 0x0, 0x6, 0x5, 0x4, 0x6, 0x5, 0x1000, 0x40007f77, 0x3, 0x6, 0x147f, 0x80000000, 0x4770, 0xefe, 0xff, 0x8, 0x3ff, 0x8738, 0x9, 0x800, 0x800, 0x3, 0x0, 0x80000000, 0x9, 0x7, 0xd7, 0x732f, 0x5, 0x1, 0xfffffffd, 0x8001, 0x5, 0xffff, 0x7, 0x0, 0x1ba38052, 0x8, 0x7, 0x84a, 0x4d0b, 0x8, 0x7, 0x4]}, 0x45c) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xc8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.970705559s ago: executing program 32 (id=653): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) close(0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$unix(0x1, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa401020301090224000100000000090400000243"], 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0xfffffffc, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x4000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz0\x00', {0x8, 0x9, 0x1, 0xecb2}, 0x48, [0x8, 0x10000, 0x8, 0xc69f, 0x5d, 0x5, 0x4, 0x1, 0xa618, 0x7f, 0x1, 0xba, 0x5, 0x4000, 0xd, 0x2, 0x8, 0xd08c, 0x1, 0x4, 0x91, 0x4a, 0xfe000000, 0x7, 0x7, 0x5, 0x3, 0x3, 0x4e, 0x1ff, 0x2d8, 0xe, 0x5, 0x8, 0x9, 0x8, 0x2, 0x8, 0xd, 0xfffffff2, 0x0, 0x7fff, 0x3569, 0xc68, 0x5041, 0x5, 0xffff, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x5, 0x9, 0x5c8c5db, 0x8f16, 0x7fffffff, 0x101, 0x4, 0x2, 0x8000, 0x1, 0x1, 0x6], [0x9, 0x4d78, 0x6, 0x66c, 0x7, 0x1, 0x2, 0x7ff, 0x1, 0x3, 0x80000001, 0x1, 0x3, 0x36, 0x5, 0x4, 0x10000, 0x8, 0x28, 0xfff, 0x6, 0x6, 0x4, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0x66c0, 0xffff, 0x401, 0xbfab, 0x10000, 0x5, 0xfffffd9e, 0x8, 0x7, 0x10001, 0x10000, 0x7, 0x8001, 0x8, 0x80, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x2a2, 0xc9, 0x100, 0x7, 0x7fff, 0x401, 0x822, 0x86f8, 0x100, 0x1d3, 0x10000, 0x48b3, 0x0, 0x8], [0x2, 0x6, 0x200, 0x2, 0xfffffffd, 0x4, 0x9, 0x2, 0x401, 0x10000, 0x3ff, 0xc, 0x2, 0x5, 0x4, 0x8, 0xf, 0x4, 0x6, 0xff, 0x2, 0x5, 0x9, 0x2, 0x101, 0x8, 0x5, 0xc3bcf961, 0xffffffff, 0x6, 0x9fdb, 0x4, 0x3, 0x7, 0xffffffff, 0xfffffff7, 0x3, 0x1, 0xffff8dc0, 0x6, 0x2, 0x6, 0xf, 0x0, 0x5, 0x0, 0x6, 0xd, 0x7, 0xf61d, 0x0, 0x4, 0x6, 0x3, 0x8001, 0xb, 0x3, 0xe99, 0x9, 0x8, 0x400, 0xff, 0x80000001, 0x73], [0x7f, 0x4, 0x4989, 0x4, 0x7, 0x7, 0x9, 0x9, 0x401, 0x3, 0xfffffff9, 0x401, 0x401, 0x7f, 0x80, 0x401, 0x7, 0x3, 0x401, 0x10000000, 0x0, 0x6, 0x5, 0x4, 0x6, 0x5, 0x1000, 0x40007f77, 0x3, 0x6, 0x147f, 0x80000000, 0x4770, 0xefe, 0xff, 0x8, 0x3ff, 0x8738, 0x9, 0x800, 0x800, 0x3, 0x0, 0x80000000, 0x9, 0x7, 0xd7, 0x732f, 0x5, 0x1, 0xfffffffd, 0x8001, 0x5, 0xffff, 0x7, 0x0, 0x1ba38052, 0x8, 0x7, 0x84a, 0x4d0b, 0x8, 0x7, 0x4]}, 0x45c) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xc8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.70752944s ago: executing program 2 (id=1146): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a000000"], 0x14}}, 0x20008000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x121440, 0x10) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff004}]}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x100000001, 0x4, 0x5, 0x5, 0x9, 0x36, 0xa4, 0x129e, 0x4, 0x10, 0x401, 0x0, 0x4, 0x4a, 0x80], 0x80a0000, 0x2a884}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 8.719981237s ago: executing program 2 (id=1149): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a000000"], 0x14}}, 0x20008000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x121440, 0x10) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff004}]}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x100000001, 0x4, 0x5, 0x5, 0x9, 0x36, 0xa4, 0x129e, 0x4, 0x10, 0x401, 0x0, 0x4, 0x4a, 0x80], 0x80a0000, 0x2a884}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 8.445308316s ago: executing program 4 (id=1150): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0xffffff79}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x2005, 0x6, 0x800, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x9, 0x8}}}}, 0xa0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) ioprio_set$pid(0x3, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x4d9b6eaf) 7.581303837s ago: executing program 2 (id=1152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x20000100) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0xfff2, 0xe}, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x40040) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 7.231547281s ago: executing program 2 (id=1154): socket$inet_smc(0x2b, 0x1, 0x0) r0 = io_uring_setup(0x7b8b, &(0x7f0000000280)={0x0, 0x22bd, 0x1000, 0x1, 0x31a}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000700300801280102d52a000000010902", @ANYRES32, @ANYRES16=r2, @ANYRESDEC=r1], 0x0) unshare(0x26020480) syz_open_dev$vim2m(&(0x7f0000000100), 0x47b, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 6.743786753s ago: executing program 1 (id=1156): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f0000000200)=@generic, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/237}], 0x0, &(0x7f00000004c0)=""/108}, 0xf29d}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r5, @broadcast, @local}, 0xc) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 6.539230909s ago: executing program 1 (id=1157): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000408c"], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x803, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 6.377399433s ago: executing program 4 (id=1158): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf1a210081aedc2334e65d45f9c589ccfc55f5000008000300", @ANYRES32=0x0, @ANYBLOB="0c002c8008000000008000001b002a007e15cf0340080211000001090000000700000040"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x36}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x30}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e"]) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 6.233105229s ago: executing program 3 (id=1160): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x2}, @enter_looper], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x8000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x34, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc2c}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4002000}, 0x80) 6.074590065s ago: executing program 3 (id=1162): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x24040000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5.371469548s ago: executing program 1 (id=1164): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = open(0x0, 0x18d03e, 0x0) r1 = open(0x0, 0xc2802, 0x100) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000), 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x121201, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r7, 0x2, 0x13, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.334968267s ago: executing program 2 (id=1165): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x48) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x24d81, 0x2) unshare(0x2c020400) unshare(0x18040080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x140, 0x0) fadvise64(r2, 0x81, 0x4, 0x5) unshare(0x20100) syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) recvmmsg(r5, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 4.559453598s ago: executing program 3 (id=1167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 4.312454282s ago: executing program 3 (id=1168): unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}]}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x905}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$kcm(r4, 0x0, 0x20048020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00200000000000001c0012800b00010067726574617000002c00028008000700000000000a000100aa"], 0x48}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x25c, 0x0, 0x7, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'dvmrp0\x00'}, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff], [0xff000000, 0xff000000, 0xffffff00, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x1, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x20000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 4.151832943s ago: executing program 5 (id=1169): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @empty, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x3ff, 0x7}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x3, 0x1, 0x0, &(0x7f0000000140), 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe62077891e54f027}]}}}]}, 0x70}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.117527543s ago: executing program 1 (id=1170): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) fchdir(0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x10000, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmmsg$inet(r1, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r1, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r3, r4, 0x0, 0x201f00) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180c75, 0x7, 0x104, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r6 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2) 3.983585067s ago: executing program 4 (id=1171): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = dup(r0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = fsopen(0x0, 0x1) fsmount(r3, 0x1, 0x0) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 3.931498883s ago: executing program 5 (id=1172): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000180), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r3, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.801690327s ago: executing program 3 (id=1173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3.67831249s ago: executing program 1 (id=1174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe8c, 0x86d, 0x1, 0x2, 0xd59f80, 0x19f2, 0x80000000, 0x8001, 0x3, 0x7, 0x2800, 0x9, 0x440, 0x1, 0xb, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) syz_open_dev$video(&(0x7f00000000c0), 0x80000002, 0x48a82) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A\xedxUL\xe8\xd8*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000680)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f00000011c0)='\x7f\xb7\xc3\x7f\x97\x1e\x90\xa5a\xd6A*c\x9b\xd8R\xf0\x02\x00\x00\x00|uiWb\x8d\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1\x00\x00\x00\x00\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\xd1\xb5\x97\x8d\b\xef#\xc8x\xdeg\x00\n\t\xa3\x0fY\xe3\xdeK0\xd5\x00:\xe0,\xf1\xa7M\xf4k\xc3dG\xa98\x8f:\xad\x91\xa3\x911\xf61v\x89\xdce\xdb\x12\x9f\x1e4\xe8\xfd\xbaQa\v\xae\xc5\x00\xea\xd0\xf7zU\xe6\xefA\xed\xca\x9e\xd6V\x06\xfc\xe60\x8f\xefk\xc5\xd5\x18\xb6\"\xeav\x90\x9dO[\xe2\xfb\"\x11\xf8\xe8[\xc24>\xfc\x17\x1a\x8b\v\x96\xc4l1\x1e\xd3\xbf\xd6k\xb0\xec\xd3\xa1\"\xe9]\x93\x05\x87f\f\xd7\xe1\xeb\x19\x88\xe2,C<\xa7\xfb\xbf:\xb4\xd9\xc0\xff{\x8d[\xd0\xd6c\xcf\x8c\xc9_\xb2\xf2\xb97\xf4\xd8\xd4\xfd\x94\xabY\xc2 \x9d\xf40\xbaps\x8a\xee\x8bp\xd5xU\xe1\xcc\xee\xa2\b>\x8b\xfc\x82\xa5M\x0f\xf91\xf3\x95\xda\xce\x94\x1dA\xd0E\xeeX\xc58\xae\x01\x83A\x13>A\x9a-\x01\xcc\xd9bPv\xad\x18\xba\xb4f\xd81\x92\x11\xc2lO\xb9\x88\'N\x95P\xb7\xf6\xb1\x01\x82\x7f\xd5\xf5\x97\xb9\r\xd1\xec]\xde^P\xf1*\x01\\\xe4\x95%w\xe0+CW1\xdd\x93e\x83\xd4\x85\x82C{\xd9\xe8l\xed\xc0o\x82y\xc9t\xc1\xf1\xc6\xd3\xf1\x99\xa4\xf5\xfe\x8c\xf2iB\xbbI\xbf\xa0Shg\x8a\x86\xd9\xd9\rM\xa4\xb6\xad\xb5\xe7O\xf0\xf0B\x82!\xf6w\xaa\x11\x8f\xf0i\xf1\xaf\x80\xe9\xfb+}Q\xc9Fc\xef\xd5\xc1\xc8EB#\xb1by@9\x0eG\xb8~\xa8km\xeb\x19\xe9\xac\x13\xecb\xa4\x8cF\x90\xef\x82\x8f\xcf\xab[\xe0\xf0W\n\xae\xad\xa7R\x96\x11\xad\xbc\xf8\xf5\x82\xea\xda\xf8%\x84\x9c\xfdg\'9\xe1\x80kV\x97\x9f\x92\xf3\xdc\x9ei6\xb3\xd5\xb4\xca\xfe\xdd\xb7\xaf\x97\xb2\xda\x19\xcb\xc0\x84\xb7n\x15\x1df\x85\xdf\xb8{\xcb\xd6\r!gg\xf5\xcc\xc4\xaf\xc69\xaf75\xa8\x13\x96\xfc\x9a\x1ex\x99%\x9f\x00\x00\x00\x00\x00\x00\x00\x00\xef\xc7d\x0f=I\x18\xfa\b>\xee\x94\x00\x00\x00\x00\x00\x00', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f0000001700)='\x00\re\xb0\xf7\xf1\xe2~\xf1\xfe\xff\xc5\xe6\xe5\xe1\xb1\x8d\xdfvN\x03\xe8T5\xbc\xce\xa8D\x96\xd3\x1c\xacM~F\xf5hdL\x16A\x04\x95s\x91\xbeUc\nF\xe9\'\xcc\xc6\xf9\xa2\xbf\xa7oW\xaf\xcd\xdb\xb1\x96\x19\xf6\xe4\x1dC`\x8d\x81)-\x8641\xf7w\xcd\x14\x05W\xf0\xe8\x92', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000080)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000001d00)='\x05 \x00\x90\xe6)Wa\xeb\xbeF\xbct\x00\x00\x02\x00\x002\x00O\x8a\x81\v\x90\x80b\xc0>\an\xcb\xb4\xf4c~\xba\xde\xf6\f\\OvK\x14@{\xed\x11\x8d~\x1c\xea\xef\xc5\xc5\b\xea\xf7i\xdd\xaa\xcc\xdc\xbb\x89%\xd5\xac\xee4\x1f\xd1u]\x13-\xa2\xff8Wu\xb7B3\xe4\a\x9f\xd51\xd2\xa1Yl\xff\xf3\xfd\x90\x0fr\xc08\xd4\x8ah\xb6jo\x12\v\xeb\xf2\x05\xf8\xf7\xe7\xdcI\xbc\vd\xd5\xdb\x87ln\"\xfap\xc1\x82e\xf54x\x86\vq(\xce\x12E\v\xf5\xfe:\xdfK\xd5\xcfs0q\b\xf0<\x11\x9e\x85UY`$<\v\x9d\x8b\xb5t\x99W\xa6\xe3_\xf2\xba\xf5\x94P<)\xcf\x98`\x1b!\x83{\xc6\x92n\xcd\xf4\x83\xf0+\xbe\xa6a\x8a\xa2\xde\xac\x9d;3\xfb\v\xceVh\xdb\x98!\xce.l\x19U\xe8\x1e\xce\xdc\xc8\xb7@\rS\x91N\xc8/\xc3\x06\xed]\xeb\x88\x84\xaf\xec$$\xfe\x80\xb4\xa3\xa3d3\xa3\x88\xfe\xe75\x87un\xf7\xf8\x16\xbc\x18Zd%\xb6a\xb6\xc9\xf4\xe6q\'\x8d\x11\xae_/(Q|v@7\xfdZ\xd3\xce\xe1\xab\xf8i\x01\x93\x9aj\xa3j\xd4\xa1\xa6\xfaJ\xcb\xf8\xbc\\b\xee\x10ea\xb8yE\xe7\xbb\a\xc3\xddp\x82ar\t\xbc\rn`\xc6\xe4s\x8e\xd1x8\xb7\x16|Z)L\xf6\xd8\xaf\\\xb3\xb3\xaac\xaa\xe5@v\xd5\x00\x00\xb7H\x03\x03]\x1a\x01\x17I\xcb`C\xcesQ7s\xd5\xf1M1\x80\xb7\x8c\xd9\x14K\xff\x86\xcd\xe4\x11\xe7\xf3\x9dL\xbc\xe53\x8d\xd7\x1b\xe7\x11h\x8a\x8cm*I\xc2\xeb(]\x10!\xc6#\xdd\x97^\xff\xd1\xe9\xd0dR\x83~\xa0\xbfN\xb2\xba.\x9bRcvdN\xdd0\xeck\x87$\xaa\x8e\x18\xcb0\xd8\xd1^\xe5\x19;.H\x871R\xa9WuV!o\x9d\x7f)\x02P\xa0\x1b!&\x89\xf7\x1c\x14\t\xb0\xc7\xb5\xba\x19\'b\x143\xc1\xe2\x99}\xf9 0\x9b\x01\xfc],\xd0\xab\n!k\x8e9\xe3D\x99*,\x14\x95\xce\xb1y\x1b\xed\x99\xd2v\xf0e\xf6\xe6\xff\xca\x02@\xc20@\x16\xd2v\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000001000)='\x7f\xb7\xc3\x7f\xa6\x7f\xdb\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xa95\xf9\xaba9k+\xdeG\'e\xdfQ\xa8\xfc\xeb\xc1\xfb\x91\x15d\rL\xe1\xae0\x89!\xe4\xdf\x91\xa9\x82\x99\xe3wGgS\xd7\x8b\xf3j\xd7\xe1\xea\xff\x87\xa6\x90U\xe9\\\xdc\xddk$9X\xc9\xa1\x0e w\xd7\x8b`4\xc2\xd3L+\xf6\xcd\x8a\x16)?\x88\xef3}+\x87\xab\xabO\xb5\am\xd2;\xb2U\x86\x82\aD\xba\x17\xe82\xc8O=C\x9ae\x8c\xea\xab\xcb\xa5chD\xe4\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x0f\xb3s\n.H\xf6\xe4\x80\x1f\xdb\x1d\xc2Wp\x9e\xb1\xc1s\x83\xb0\x98\xc1\xc9\x03\xc8-s\xe9\xe9\xf8\f\xe7\x1b\a\x00\x00\x00\x00\x00\x00\x00E\xbe\xcfq\xe4D\x12\xc7Aq\xcd\x90k\x1eb|\xe9\xfd\xbbY\x1bB', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-${]6:\x05\x00']}, &(0x7f0000000640)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) close(r2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x6}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/38, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/93, 0x5d}, {&(0x7f0000001c40)=""/171, 0xab}], 0x7, &(0x7f0000001b80)=""/177, 0xb1}}], 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) sendmsg$FOU_CMD_GET(r3, 0x0, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) 3.103608158s ago: executing program 4 (id=1175): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x3084, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000002b00)={0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) 2.989637524s ago: executing program 5 (id=1176): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a000000"], 0x14}}, 0x20008000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x121440, 0x10) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff004}]}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x100000001, 0x4, 0x5, 0x5, 0x9, 0x36, 0xa4, 0x129e, 0x4, 0x10, 0x401, 0x0, 0x4, 0x4a, 0x80], 0x80a0000, 0x2a884}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.903808531s ago: executing program 5 (id=1177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.633608398s ago: executing program 1 (id=1178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_netfilter(0x10, 0x3, 0xc) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="1400000052000000fdffffff0000000000000000000000000000000094307fbdb622a29af706abfe8df5fde42dd622298011c60aea9be9040702e6147ccb17ecf88823d57898b27634c426b7490ea1bf1728d40e29b7a689c1631a3ec636a780dc75adbcd61415bb873cf861b01b17d8dd24f14ac012362014b0b1b9d7c3e2bd26ec184d30d0e0235b3f591f"], &(0x7f0000001300), 0x600) 1.419147702s ago: executing program 5 (id=1179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000000061626364"], 0x18, 0xfffffffffffffffd) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008800) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r5 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.270497426s ago: executing program 4 (id=1180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000500)="0a00000100249eed0100000000000000cc1f14f62790590dd25bed76fe8c907eae11aa87414a9b03360fa8bf09000000ae82bf01ff90cac78e9654e6b5e0e7f0e4cb1d78001cb9b5ab73ffcf5ad07693"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.206573165s ago: executing program 3 (id=1181): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000140)={0x0, "c42e68848c23f06c24533283c4761272f298e3e99dc1450727d16a1d245b6d11", 0x0, 0x0, 0x1000, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1381, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r3, 0x540b, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x92, 0x3, 0xb, 0x7ffffff9}, 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 850.260886ms ago: executing program 5 (id=1182): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x7, 0xfffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365d20fc7700066b8502466ef", 0x50}], 0x1, 0x11, 0x0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) socket(0xa, 0x80001, 0x2) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x1, 0xa000, 0x0, 0x0}, {0x6, 0x1811, 0x0, 0x0}, {0xdf8e, 0x4000, 0x0, 0x0}], 0x3}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000100)) pread64(r3, &(0x7f0000000400)=""/229, 0xe5, 0xb1) pidfd_send_signal(r3, 0x3f, &(0x7f0000000080)={0x4003b, 0x8000, 0x7}, 0x0) syz_emit_ethernet(0x1eb, &(0x7f0000000200)=ANY=[@ANYBLOB="49a188da23acd5d460bdee3c88a81200810021000800441301d5006500009f0690787f000001ac1414bb441c2560000007e5000003ff000000090000248c800000017fffffff94040000440ef72ff643fe38fd478d7a92ff070ba3ffffffff7f00000100071b6e7f000001ac1414bbac1414bb000000007f000001ac1414bb0044245f030000000000000003ac1414bb000000017f00000100000006e00000010000000200004e214e24", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="6010000790780f4a00fe03831312b8d8d54a3bc232187e076e7ff2cb8bb51312c55e6d22e5a58a57a5d587b258f51cd5fe0cf989c32539ed05ae3b0300000ef7a6a0b7eef61566bddd869500ddf4d450274981f481d3a1c9dcef937b928a7d01c8fdced5ea14066223301dfeacdaf35ef4d349c20b21065bf0723cce537c349221ca0afea29ab1786eb7174c19715ce50e7931a3f9cccdcbbafbeac086cfeb44433bd7eda4571d2796cf631332c7ba2b081d688baa88f3c9f6711924d730e60ef2a8932ab1ef66272b1d211b60b2a0850d0a492a3434834ec4bd2048254a6cec1dda6f432e68b60ab178b991b328397bf9cf11e90fff003becfa45e8fd02d5ad0234ec7f4396cc0b0539df5122a05436410aa3f8a0f9ec638ef820495f556d2b5a2c0115d59d8d03fef94096f94504d67e097db856d876cca7b11668dea1f6c5138a3710cf512489"], 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 829.023034ms ago: executing program 4 (id=1183): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8000}, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002082053b0040000102030109027e0003efff6003080b0001010520020904000000010120000924010700001e00170924070501000603000c2403010003070205"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r4 = epoll_create(0xd751) epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2d4, 0x26, 0x20, 0x70bd28, 0x25dfdbff, {0x12}, [@nested={0x10, 0xdc, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x9c}]}, @generic="0f3fdb4a06e40ae9db0c839854ad7a77b737779f071797fc8faa5e8f8e3c45541679724e5d1237ca901ad37baeac81358f6489effb03ba9a4c6170128d0c09c6d15e383d159f2da2fcfd8f4acbb03dbd5d947ba8982dc58d137b66f7a2ef338bfba461acbd808719d8c57769341f04fb70cdb6231d303934d2c11abd142c03b01e7fa86d4d48101311b37892f3340952e7", @generic="f06bad720711329f99704c52cdd83985a9e3f73f8e041f1744014042ade8e7dc6dae272a0a03ad9716af9c1402845b324c1fd1fa54448552b46514509b76c48567e81e2adbbda8c5fc19e937409ae136e429a00e4b5327f37f278dcde1db63b8432f11bf9a8c5d2858e7d95684a351f0c93cb318af3335af8449c1", @nested={0x109, 0x0, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0x2}, @generic="aaea3b8ddd6aaa708b257751d4", @nested={0x4, 0x107}, @typed={0xe5, 0x133, 0x0, 0x0, @binary="72977571f817d214cecfcadf84a0a42799d3b30eea44fd974c1c561006c7d29d48d5df83f1dab557f6c01db0eb985c07e64f153b236556aa9ce3573104e4d08586acc0a6f57f12354347a1ace1100c3049db63d1220964459a216b3a8d0147dde138f0dd4a50dac8a17b6f1f6de39dd86ad11e561d9480e38243bd600a61de74b55d6f5e1a191c5e0a960f1eb93fc453ecbd876557ecd7912d8fe9bfdad879e753ae3f58a9bf985ea5906b73d61d253ef654a3b8cfbf0a57d91107da4b5ee9e37de2be7859ab739c408984ca550dd2eb1b83db50870f4c4b8638cdff44455501fa"}]}, @generic="72fcc37c52b6a1a7f2e050afc00d10a3445ea549f3a029ff392ad3e8758a47faa3c977422820cb4da4f9094cc44c8b8606417e8bb83b23297d119d788043ec6296c95f64d90a68d8f0b3ffa086368c8525a6a0e69b16a132b1864db1725f716d428f6f1984fd2782aa50f1c13050f2a0db1c54793dd1be5d57cac8c5f897d196c6cce74a81cef7b9fe67467f6fdfc4124825438a13"]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ppoll(&(0x7f0000000080)=[{r4, 0xa1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0x1}) r6 = fsopen(&(0x7f0000000300)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000340)='./binderfs/binder1\x00', &(0x7f0000000380)="24e3fa68234484bc7027e1b35f6feec1d9a15279535043cb4c680058514fe66ea66cdc95620c977dbaded12744ca0e1087eddbff494fbcf5f115f741841684283683c7d3af36286ff60f458a233d8969393a2e70d6b407ab63753c3350", 0x5d) sendmmsg$inet(r2, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef) fstatfs(r3, &(0x7f0000000400)=""/217) 0s ago: executing program 2 (id=1184): unshare(0x26020480) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2b, 0x801, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48000) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) kernel console output (not intermixed with test programs): C1] usbtmc 3-1:16.0: invalid notification: 0 [ 151.948239][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 151.954334][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 151.960443][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 151.968519][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 151.974695][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 151.981088][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 151.987161][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 151.993232][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 151.999366][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.005441][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.011519][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.017607][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.023662][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.029742][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.035841][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.041941][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.049428][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.055512][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.061619][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.067651][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.073721][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.080455][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.087016][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.092453][ T7517] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 152.093144][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.112948][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.119022][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.125168][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.131266][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.137311][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.144878][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.152685][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.158807][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.164860][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.170960][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.177071][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.183145][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.189392][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.195455][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.201593][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.207626][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.215403][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.221506][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.227550][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.233591][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.239634][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.245684][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.251735][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.257807][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.263853][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.269923][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.275974][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.282028][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.288177][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.294255][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.300796][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.307211][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.313275][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.319375][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.325445][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.331524][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.337725][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.343739][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.349787][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.355869][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.361949][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.368060][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.374305][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.380469][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.386667][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.392749][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.398962][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.405071][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.411057][ T5689] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.411145][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.428091][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.434666][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.441025][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.447068][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.453009][ T5689] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 152.462172][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.468138][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.474114][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.480073][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.486014][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.491907][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.497906][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.503807][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.509734][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.515643][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.521525][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.527473][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.534144][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.540128][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.546048][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.551935][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.558071][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.563968][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.569921][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.575852][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.581789][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.588091][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.594107][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.600055][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.605996][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.611910][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.617913][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.623839][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.629830][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.635870][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.641784][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.647745][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.653684][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.659777][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.665729][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.671658][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.679074][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.685073][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.691002][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.696968][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.702884][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.708862][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.714859][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 152.721210][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.739674][ T5689] usb 1-1: config 0 descriptor?? [ 152.752472][ T5689] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 152.786385][ T5716] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 152.905778][ T5716] usb 4-1: USB disconnect, device number 14 [ 153.041486][ T42] usb 3-1: USB disconnect, device number 17 [ 153.559011][ T7537] Cannot find set identified by id 0 to match [ 153.589804][ T7540] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.588'. [ 153.929494][ T7552] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 154.003837][ T5689] gspca_vc032x: reg_w err -71 [ 154.018642][ T5689] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 154.042367][ T5689] usb 1-1: USB disconnect, device number 14 [ 154.058960][ T7556] netlink: 88 bytes leftover after parsing attributes in process `syz.4.595'. [ 154.071545][ T7556] netlink: 88 bytes leftover after parsing attributes in process `syz.4.595'. [ 154.116548][ T5716] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.274648][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 154.283768][ T5716] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.294608][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 154.313889][ T5716] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 154.334302][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.357875][ T5716] usb 2-1: Product: syz [ 154.368690][ T5716] usb 2-1: Manufacturer: syz [ 154.383738][ T5716] usb 2-1: SerialNumber: syz [ 154.398900][ T5716] usb 2-1: config 0 descriptor?? [ 154.407525][ T5716] hub 2-1:0.0: bad descriptor, ignoring hub [ 154.417629][ T5716] hub 2-1:0.0: probe with driver hub failed with error -5 [ 154.433183][ T5716] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 154.450259][ T6425] usb 2-1: Failed to submit usb control message: -71 [ 154.458617][ T6425] usb 2-1: unable to send the bmi data to the device: -71 [ 154.466684][ T6425] usb 2-1: unable to get target info from device [ 154.475411][ T6425] usb 2-1: could not get target info (-71) [ 154.481413][ T6425] usb 2-1: could not probe fw (-71) [ 154.621486][ T7569] netlink: 'syz.0.599': attribute type 3 has an invalid length. [ 154.644668][ T5689] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 154.740692][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 154.818682][ T5689] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 154.833842][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.844734][ T5689] usb 4-1: Product: syz [ 154.849399][ T5689] usb 4-1: Manufacturer: syz [ 154.854378][ T5689] usb 4-1: SerialNumber: syz [ 154.857366][ T7572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.867382][ T5689] usb 4-1: config 0 descriptor?? [ 154.878489][ T5689] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 154.892504][ T7574] bond1: entered promiscuous mode [ 154.916285][ T5716] usb 2-1: USB disconnect, device number 8 [ 155.406987][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 155.439129][ T3279] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.439474][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 155.457591][ T808] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 155.467736][ T3279] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.480697][ T3279] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.499803][ T3279] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.512265][ T7589] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 155.599858][ T7591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.624651][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 155.634294][ T808] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 155.652527][ T808] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.664288][ T808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.674930][ T808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.685317][ T808] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.700553][ T808] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.730850][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.878806][ T7593] Cannot find set identified by id 0 to match [ 155.959846][ T808] usb 5-1: usb_control_msg returned -32 [ 155.970085][ T808] usbtmc 5-1:16.0: can't read capabilities [ 156.102490][ T5689] gspca_stk1135: reg_w 0xd err -71 [ 156.110157][ T5689] gspca_stk1135: serial bus timeout: status=0x00 [ 156.121666][ T5689] gspca_stk1135: Sensor write failed [ 156.128515][ T5689] gspca_stk1135: serial bus timeout: status=0x00 [ 156.138289][ T5689] gspca_stk1135: Sensor write failed [ 156.143712][ T5689] gspca_stk1135: serial bus timeout: status=0x00 [ 156.152100][ T5689] gspca_stk1135: Sensor read failed [ 156.157471][ T5689] gspca_stk1135: serial bus timeout: status=0x00 [ 156.164120][ T5689] gspca_stk1135: Sensor read failed [ 156.170140][ T5689] gspca_stk1135: Detected sensor type unknown (0x0) [ 156.181311][ T5689] gspca_stk1135: serial bus timeout: status=0x00 [ 156.182513][ T10] usb 5-1: USB disconnect, device number 11 [ 156.188019][ T5689] gspca_stk1135: Sensor read failed [ 156.188050][ T5689] gspca_stk1135: serial bus timeout: status=0x00 [ 156.188063][ T5689] gspca_stk1135: Sensor read failed [ 156.188085][ T5689] gspca_stk1135: serial bus timeout: status=0x00 [ 156.188095][ T5689] gspca_stk1135: Sensor write failed [ 156.188116][ T5689] gspca_stk1135: serial bus timeout: status=0x00 [ 156.188126][ T5689] gspca_stk1135: Sensor write failed [ 156.188210][ T5689] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 156.249116][ T7605] kvm: apic: phys broadcast and lowest prio [ 156.251595][ T5689] usb 4-1: USB disconnect, device number 15 [ 157.075379][ T7620] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.107994][ T7627] Failed to get privilege flags for destination (handle=0x0:0x0) [ 157.468533][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'. [ 157.508110][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'. [ 157.534626][ T5689] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 157.545411][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.624'. [ 157.717556][ T5689] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.754046][ T5689] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.795190][ T5689] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.827267][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.853695][ T7631] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.886902][ T5689] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.048325][ T7652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.229018][ T5689] usb 5-1: USB disconnect, device number 12 [ 158.528656][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 158.644618][ T808] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 158.679601][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.634'. [ 158.698714][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.634'. [ 158.815427][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 158.841790][ T808] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.871499][ T808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.906791][ T808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.948388][ T808] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.993200][ T7666] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 159.006164][ T808] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.038932][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.295218][ T808] usb 3-1: GET_CAPABILITIES returned 0 [ 159.311528][ T808] usbtmc 3-1:16.0: can't read capabilities [ 159.334743][ T5716] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 159.506296][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.518373][ T5716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.535662][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.542375][ T5716] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.544834][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.544885][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.586196][ T5716] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 159.606967][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.631594][ T5716] usb 5-1: Product: syz [ 159.639320][ T5716] usb 5-1: Manufacturer: syz [ 159.649074][ T5716] usb 5-1: SerialNumber: syz [ 159.662601][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.671753][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.675158][ T5716] usb 5-1: config 0 descriptor?? [ 159.680889][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.695316][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.742536][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.751707][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.760839][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.769954][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.785106][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.794286][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.803405][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.812524][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.876436][ T5689] usb 3-1: USB disconnect, device number 18 [ 159.983148][ T7670] input: syz0 as /devices/virtual/input/input23 [ 160.064647][ T7670] qrtr: Invalid version 127 [ 160.193799][ T7694] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 160.200662][ T7694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.215950][ T7697] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 160.222519][ T7697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.267765][ T7697] vhci_hcd vhci_hcd.0: Device attached [ 160.277408][ T7694] vhci_hcd vhci_hcd.0: Device attached [ 160.288612][ T7702] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 160.295174][ T7702] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 160.338597][ T7702] vhci_hcd vhci_hcd.0: Device attached [ 160.386287][ T7694] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5) [ 160.392850][ T7694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.416223][ T7694] vhci_hcd vhci_hcd.0: Device attached [ 160.434047][ T7694] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 160.440670][ T7694] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.474270][ T7694] vhci_hcd vhci_hcd.0: Device attached [ 160.505748][ T5716] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 160.531381][ T7708] vhci_hcd: connection closed [ 160.531595][ T7698] vhci_hcd: connection closed [ 160.532268][ T7695] vhci_hcd: connection reset by peer [ 160.542870][ T7704] vhci_hcd: connection closed [ 160.551977][ T13] vhci_hcd vhci_hcd.1: stop threads [ 160.563506][ T7706] vhci_hcd: connection closed [ 160.588052][ T13] vhci_hcd vhci_hcd.1: release socket [ 160.626771][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 160.639129][ T13] vhci_hcd vhci_hcd.1: stop threads [ 160.653807][ T13] vhci_hcd vhci_hcd.1: release socket [ 160.664079][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 160.678775][ T13] vhci_hcd vhci_hcd.1: stop threads [ 160.692291][ T13] vhci_hcd vhci_hcd.1: release socket [ 160.712832][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 160.726081][ T13] vhci_hcd vhci_hcd.1: stop threads [ 160.738353][ T13] vhci_hcd vhci_hcd.1: release socket [ 160.754089][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 160.788622][ T13] vhci_hcd vhci_hcd.1: stop threads [ 160.803688][ T13] vhci_hcd vhci_hcd.1: release socket [ 160.832480][ T7716] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 160.837250][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 160.896797][ T5689] usb 5-1: USB disconnect, device number 13 [ 161.246400][ T6421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.513111][ T6421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.700593][ T6421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.802745][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.819563][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.833674][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.848471][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.856910][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.965629][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.978864][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.993631][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.009330][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.036361][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.124125][ T6421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.289384][ T7755] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 162.390902][ T7747] input: syz0 as /devices/virtual/input/input24 [ 162.410051][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 162.435202][ T7747] qrtr: Invalid version 127 [ 162.574574][ T5689] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.748248][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.783209][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.812278][ T5689] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.860689][ T5689] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.871783][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.897086][ T5689] usb 2-1: config 0 descriptor?? [ 162.998237][ T6421] bridge_slave_1: left allmulticast mode [ 163.013025][ T6421] bridge_slave_1: left promiscuous mode [ 163.030374][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.053391][ T6421] bridge_slave_0: left allmulticast mode [ 163.068587][ T6421] bridge_slave_0: left promiscuous mode [ 163.097414][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.421023][ T5689] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 163.635114][ T5730] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 163.755034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 163.806734][ T5730] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.835328][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.863608][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.885006][ T5730] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.900169][ T5730] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.918288][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.942687][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.961853][ T5730] usb 5-1: config 0 descriptor?? [ 164.010346][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.046063][ T6421] bond0 (unregistering): Released all slaves [ 164.074715][ T5639] Bluetooth: hci1: command tx timeout [ 164.112077][ T6421] bond1 (unregistering): Released all slaves [ 164.527214][ T5730] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 164.664893][ C1] plantronics 0003:047F:FFFF.000E: usb_submit_urb(ctrl) failed: -1 [ 164.700709][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 164.771800][ T7810] sctp: [Deprecated]: syz.2.672 (pid 7810) Use of int in max_burst socket option. [ 164.771800][ T7810] Use struct sctp_assoc_value instead [ 165.099964][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.108425][ T7822] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 165.121134][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.121326][ T7750] bridge_slave_0: entered allmulticast mode [ 165.123099][ T7750] bridge_slave_0: entered promiscuous mode [ 165.163340][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.182509][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.213954][ T7750] bridge_slave_1: entered allmulticast mode [ 165.246836][ T7750] bridge_slave_1: entered promiscuous mode [ 165.313206][ T6421] hsr_slave_0: left promiscuous mode [ 165.331208][ T6421] hsr_slave_1: left promiscuous mode [ 165.348146][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.366519][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.378628][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.387652][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.408680][ T6421] veth1_macvtap: left promiscuous mode [ 165.415827][ T6421] veth0_macvtap: left promiscuous mode [ 165.421560][ T6421] veth1_vlan: left promiscuous mode [ 165.427137][ T6421] veth0_vlan: left promiscuous mode [ 165.452647][ T5689] usb 2-1: USB disconnect, device number 9 [ 165.664937][ T5716] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 165.897650][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 165.919214][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 165.988587][ T7845] input: syz0 as /devices/virtual/input/input26 [ 166.000897][ T7845] qrtr: Invalid version 127 [ 166.026269][ T5730] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 166.156042][ T5639] Bluetooth: hci1: command tx timeout [ 166.229016][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 166.256579][ T7750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.283963][ T7750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.434145][ T7750] team0: Port device team_slave_0 added [ 166.453048][ T7750] team0: Port device team_slave_1 added [ 166.486493][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.493550][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.523653][ T7750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.537715][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.545711][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.571870][ T7750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.624164][ T5731] usb 5-1: USB disconnect, device number 14 [ 166.816345][ T7750] hsr_slave_0: entered promiscuous mode [ 166.848930][ T7750] hsr_slave_1: entered promiscuous mode [ 166.945454][ T7868] netlink: 'syz.4.683': attribute type 5 has an invalid length. [ 166.965023][ T9] usb usb36-port1: attempt power cycle [ 167.143051][ T7877] binder: 7876:7877 ioctl c018620c 200000000000 returned -22 [ 167.244864][ T7879] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 167.285819][ T5731] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.477589][ T5731] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.504573][ T5731] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.536517][ T5731] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.554581][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.581111][ T7875] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.590029][ T9] usb usb36-port1: unable to enumerate USB device [ 167.609773][ T5731] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.839788][ T5731] usb 2-1: USB disconnect, device number 10 [ 168.062775][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 168.139721][ T7750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.173811][ T7750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.193125][ T7750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.222294][ T7750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.230841][ T7750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.236087][ T5639] Bluetooth: hci1: command tx timeout [ 168.252740][ T7750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.288160][ T7750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.356121][ T7750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.380592][ T7900] tun0: tun_chr_ioctl cmd 2147767506 [ 168.587083][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.652763][ T7750] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.717638][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.724867][ T6421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.812680][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.819887][ T6421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.136208][ T7750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.330626][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 169.927134][ T7750] veth0_vlan: entered promiscuous mode [ 169.996198][ T7750] veth1_vlan: entered promiscuous mode [ 170.221635][ T7750] veth0_macvtap: entered promiscuous mode [ 170.270301][ T7750] veth1_macvtap: entered promiscuous mode [ 170.315411][ T5639] Bluetooth: hci1: command tx timeout [ 170.348206][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 170.363909][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.390042][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.410271][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.420249][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.433201][ T7957] fuse: root generation should be zero [ 170.443250][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.472385][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.634864][ T5689] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 170.674922][ T6423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.683652][ T6423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.779543][ T7969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.795618][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 170.803338][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.816479][ T5689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.830822][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.832365][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.866181][ T5689] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.897498][ T5689] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 170.913380][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.935091][ T5689] usb 4-1: Product: syz [ 170.940662][ T5689] usb 4-1: Manufacturer: syz [ 170.957908][ T5689] usb 4-1: SerialNumber: syz [ 171.141349][ T5716] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 171.178883][ T5716] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.222818][ T5689] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 171.252987][ T5689] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 171.289613][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 171.313302][ T7987] fido_id[7987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.586390][ T5689] usb 4-1: 2:1 : bogus bTerminalLink 6 [ 171.618990][ T8000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.714'. [ 172.036668][ T5689] usb 4-1: USB disconnect, device number 17 [ 172.163787][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.434653][ T5716] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 172.548158][ T8021] kvm_intel: kvm [8020]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x26fe [ 172.583382][ T8021] kvm: kvm [8020]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x901b [ 172.598648][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 172.627937][ T8021] kvm: kvm [8020]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xabd4 [ 172.653136][ T5716] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 172.669160][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.679499][ T8021] kvm: kvm [8020]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x8ce [ 172.695732][ T5716] usb 2-1: Product: syz [ 172.703409][ T5716] usb 2-1: Manufacturer: syz [ 172.712315][ T5716] usb 2-1: SerialNumber: syz [ 172.739393][ T5716] usb 2-1: config 0 descriptor?? [ 172.764700][ T5716] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 174.002033][ T5716] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 174.301155][ T5716] usb 2-1: USB disconnect, device number 11 [ 174.924072][ T8122] KVM: debugfs: duplicate directory 8122-4 [ 175.264431][ T8136] syzkaller1: entered promiscuous mode [ 175.280028][ T8136] syzkaller1: entered allmulticast mode [ 175.841893][ T8160] netlink: 'syz.1.757': attribute type 4 has an invalid length. [ 175.893478][ T8163] netlink: 'syz.1.757': attribute type 4 has an invalid length. [ 177.972646][ T5716] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 178.069771][ T8227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.134670][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 178.153577][ T5716] usb 6-1: config 108 has an invalid interface number: 53 but max is 0 [ 178.173862][ T5716] usb 6-1: config 108 has no interface number 0 [ 178.193273][ T5716] usb 6-1: config 108 interface 53 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 178.224108][ T5716] usb 6-1: config 108 interface 53 has no altsetting 0 [ 178.246956][ T5716] usb 6-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=be.51 [ 178.270074][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.290030][ T5716] usb 6-1: Product: syz [ 178.299167][ T5716] usb 6-1: Manufacturer: syz [ 178.308917][ T5716] usb 6-1: SerialNumber: syz [ 178.522181][ T8238] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.782'. [ 178.560395][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.583028][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.612444][ T5716] asix 6-1:108.53: probe with driver asix failed with error -22 [ 178.663370][ T5716] usb 6-1: USB disconnect, device number 2 [ 179.408338][ T8260] gretap0: entered promiscuous mode [ 179.887363][ T8271] loop2: detected capacity change from 0 to 7 [ 179.927665][ T8271] Dev loop2: unable to read RDB block 7 [ 179.947636][ T8271] loop2: unable to read partition table [ 179.975020][ T8271] loop2: partition table beyond EOD, truncated [ 180.003128][ T8271] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.825715][ T8303] futex_wake_op: syz.3.801 tries to shift op by -1; fix this program [ 180.888715][ T8303] kernel profiling enabled (shift: 5) [ 180.949143][ T8306] program syz.5.802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.383162][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 181.447154][ T8323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.477161][ T8323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.915125][ T5689] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 182.074998][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 182.097567][ T5689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.124246][ T5689] usb 4-1: config 0 has no interfaces? [ 182.149480][ T5689] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 182.166977][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.228495][ T5689] usb 4-1: config 0 descriptor?? [ 182.547254][ T5689] usb 4-1: USB disconnect, device number 18 [ 182.614613][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 182.794701][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 182.816213][ T9] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 182.860092][ T9] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 182.914703][ T9] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.925960][ T9] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 182.974462][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 183.005805][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.014429][ T9] usb 2-1: Product: syz [ 183.019707][ T9] usb 2-1: Manufacturer: syz [ 183.024341][ T9] usb 2-1: SerialNumber: syz [ 183.050263][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 183.107986][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input28 [ 183.261238][ T8383] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 183.273685][ T9] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 183.294753][ T5689] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 183.295739][ T8383] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.313220][ T9] (id 0x00) [ 183.497029][ T9] rc_core: IR keymap rc-imon-pad not found [ 183.513843][ T9] Registered IR keymap rc-empty [ 183.517117][ T5689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.530575][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 183.553733][ T5689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 183.565238][ T5689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 183.565256][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 183.584059][ T5689] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 183.584089][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 183.584107][ T5689] usb 3-1: Product: syz [ 183.584120][ T5689] usb 3-1: Manufacturer: syz [ 183.584134][ T5689] usb 3-1: SerialNumber: syz [ 183.585014][ T9] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 183.585357][ T9] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 183.588830][ T5689] usb 3-1: config 0 descriptor?? [ 183.640871][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 183.653688][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input29 [ 183.670360][ T9] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:12> initialized [ 183.809939][ T5689] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 183.809965][ T5689] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 183.956259][ T24] usb 2-1: USB disconnect, device number 12 [ 184.012488][ T5689] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 184.012514][ T5689] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 184.012531][ T5689] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 184.231516][ T5689] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 184.822132][ T9] IPVS: starting estimator thread 0... [ 184.925675][ T8416] IPVS: using max 31 ests per chain, 74400 per kthread [ 185.517949][ T5689] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 185.543845][ T5689] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 185.623159][ T5689] usb 3-1: USB disconnect, device number 20 [ 186.505598][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.709852][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.723446][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 186.770295][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.823232][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 186.876189][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.919435][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.927662][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 186.933365][ T8465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.958451][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.974532][ T9] usb 2-1: Product: syz [ 186.982635][ T9] usb 2-1: Manufacturer: syz [ 186.990961][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.003453][ T9] usb 2-1: SerialNumber: syz [ 187.021129][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 187.059051][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.100775][ T10] usb 6-1: config 0 descriptor?? [ 187.342673][ T24] IPVS: starting estimator thread 0... [ 187.445678][ T8468] IPVS: using max 33 ests per chain, 79200 per kthread [ 187.578717][ T10] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 187.606756][ T10] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 187.643714][ T8472] kvm: pic: non byte write [ 187.695215][ T5716] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 187.763850][ T10] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 187.864692][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 187.872764][ T5716] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 187.882057][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.890169][ T5716] usb 4-1: Product: syz [ 187.894358][ T5716] usb 4-1: Manufacturer: syz [ 187.899551][ T5716] usb 4-1: SerialNumber: syz [ 187.906944][ T5716] usb 4-1: config 0 descriptor?? [ 187.920265][ T5716] gspca_main: se401-2.14.0 probing 047d:5003 [ 187.934660][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 187.964920][ T10] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 188.035779][ T9] cdc_ncm 2-1:1.0: bind() failure [ 188.045338][ T9] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 188.053903][ T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 188.063378][ T9] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 188.087956][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.091873][ T9] usb 2-1: USB disconnect, device number 13 [ 188.098921][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.118086][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 188.128466][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 188.137034][ T24] usb 3-1: SerialNumber: syz [ 188.167631][ T10] ft260 0003:0403:6030.0011: failed to retrieve status: -32, no wakeup [ 188.329274][ T5716] gspca_se401: Wrong descriptor type [ 188.342038][ T5716] usb 4-1: USB disconnect, device number 19 [ 188.420780][ T9] usb 6-1: USB disconnect, device number 3 [ 188.579086][ T8483] netlink: 44 bytes leftover after parsing attributes in process `syz.4.850'. [ 188.748650][ T8486] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 188.761468][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.3.849 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.761497][ T8486] Tainted: [L]=SOFTLOCKUP [ 188.761504][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.761516][ T8486] Call Trace: [ 188.761523][ T8486] [ 188.761534][ T8486] dump_stack_lvl+0xe8/0x150 [ 188.761559][ T8486] sysfs_warn_dup+0x8e/0xa0 [ 188.761581][ T8486] sysfs_do_create_link_sd+0xc0/0x110 [ 188.761604][ T8486] device_add_class_symlinks+0x1cf/0x240 [ 188.761627][ T8486] device_add+0x475/0xbb0 [ 188.761649][ T8486] wiphy_register+0x1dc5/0x2dc0 [ 188.761682][ T8486] ? __pfx_wiphy_register+0x10/0x10 [ 188.761698][ T8486] ? __pfx_netdev_run_todo+0x10/0x10 [ 188.761717][ T8486] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 188.761743][ T8486] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 188.761767][ T8486] ieee80211_register_hw+0x3d82/0x4a70 [ 188.761800][ T8486] ? ieee80211_register_hw+0x1921/0x4a70 [ 188.761840][ T8486] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 188.761863][ T8486] ? __asan_memset+0x22/0x50 [ 188.761884][ T8486] ? __hrtimer_setup+0x1b7/0x260 [ 188.761906][ T8486] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 188.761927][ T8486] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 188.761979][ T8486] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 188.762000][ T8486] ? kstrndup+0xbf/0x160 [ 188.762026][ T8486] hwsim_new_radio_nl+0xf6a/0x1c00 [ 188.762072][ T8486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 188.762104][ T8486] ? rcu_is_watching+0x15/0xb0 [ 188.762124][ T8486] ? trace_kmalloc+0x2a/0xf0 [ 188.762151][ T8486] ? __nla_parse+0x40/0x60 [ 188.762175][ T8486] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 188.762195][ T8486] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 188.762222][ T8486] genl_family_rcv_msg_doit+0x22a/0x330 [ 188.762256][ T8486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 188.762289][ T8486] ? bpf_lsm_capable+0x9/0x20 [ 188.762305][ T8486] ? security_capable+0x7e/0x2c0 [ 188.762334][ T8486] genl_rcv_msg+0x61c/0x7a0 [ 188.762360][ T8486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.762379][ T8486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 188.762402][ T8486] ? __pfx_ref_tracker_free+0x10/0x10 [ 188.762420][ T8486] ? __asan_memcpy+0x40/0x70 [ 188.762438][ T8486] ? __skb_clone+0x63/0x7a0 [ 188.762463][ T8486] netlink_rcv_skb+0x232/0x4b0 [ 188.762487][ T8486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.762508][ T8486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.762547][ T8486] ? down_read+0x270/0x2e0 [ 188.762563][ T8486] ? genl_rcv+0xd/0x40 [ 188.762583][ T8486] genl_rcv+0x28/0x40 [ 188.762600][ T8486] netlink_unicast+0x75c/0x8e0 [ 188.762633][ T8486] netlink_sendmsg+0x813/0xb40 [ 188.762665][ T8486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.762692][ T8486] ? aa_sock_msg_perm+0xf1/0x1b0 [ 188.762716][ T8486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.762740][ T8486] ____sys_sendmsg+0x972/0x9f0 [ 188.762756][ T8486] ? __might_fault+0xaf/0x130 [ 188.762783][ T8486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.762809][ T8486] ? import_iovec+0x73/0xa0 [ 188.762833][ T8486] ___sys_sendmsg+0x2a5/0x360 [ 188.762848][ T8486] ? __lock_acquire+0x6b5/0x2cf0 [ 188.762872][ T8486] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.762895][ T8486] ? futex_wait+0x2a2/0x390 [ 188.762943][ T8486] ? __fget_files+0x2a/0x420 [ 188.762962][ T8486] ? __fget_files+0x3a0/0x420 [ 188.762992][ T8486] __x64_sys_sendmsg+0x1bd/0x2a0 [ 188.763012][ T8486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.763037][ T8486] ? rcu_is_watching+0x15/0xb0 [ 188.763066][ T8486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.763085][ T8486] do_syscall_64+0x174/0x580 [ 188.763102][ T8486] ? trace_irq_disable+0x3b/0x140 [ 188.763124][ T8486] ? clear_bhb_loop+0x40/0x90 [ 188.763145][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.763161][ T8486] RIP: 0033:0x7f74fc59ce59 [ 188.763190][ T8486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.763204][ T8486] RSP: 002b:00007f74fd3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.763222][ T8486] RAX: ffffffffffffffda RBX: 00007f74fc816090 RCX: 00007f74fc59ce59 [ 188.763233][ T8486] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 188.763252][ T8486] RBP: 00007f74fc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 188.763264][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.763274][ T8486] R13: 00007f74fc816128 R14: 00007f74fc816090 R15: 00007f74fc93fa48 [ 188.763304][ T8486] [ 189.223669][ T24] usb 3-1: 0:2 : does not exist [ 189.411282][ T24] usb 3-1: USB disconnect, device number 21 [ 189.504980][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.684624][ T808] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 189.847788][ T808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.858969][ T808] usb 6-1: config 0 has no interfaces? [ 189.884128][ T808] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 189.907002][ T808] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 189.939474][ T808] usb 6-1: Product: syz [ 189.961895][ T808] usb 6-1: Manufacturer: syz [ 189.985047][ T808] usb 6-1: SerialNumber: syz [ 190.021952][ T808] usb 6-1: config 0 descriptor?? [ 190.070914][ T8512] syzkaller0: entered promiscuous mode [ 190.077670][ T8512] syzkaller0: entered allmulticast mode [ 190.292662][ T24] usb 6-1: USB disconnect, device number 4 [ 192.423426][ T8587] kvm: emulating exchange as write [ 192.535163][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 192.724317][ T9] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 192.745161][ T9] usb 4-1: config 128 has no interface number 0 [ 192.763349][ T9] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 192.793952][ T9] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 192.815927][ T9] usb 4-1: config 128 interface 148 has no altsetting 0 [ 192.838543][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 192.853907][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.873077][ T9] usb 4-1: Product: syz [ 192.882353][ T9] usb 4-1: Manufacturer: syz [ 192.893314][ T9] usb 4-1: SerialNumber: syz [ 193.136565][ T8608] xt_hashlimit: size too large, truncated to 1048576 [ 193.171992][ T9] usb 4-1: USB disconnect, device number 20 [ 193.389884][ T8616] syz_tun: entered allmulticast mode [ 193.443610][ T808] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 193.522114][ T8620] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 193.535467][ T5730] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 193.606281][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 193.613181][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.624934][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.635065][ T808] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 193.644120][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.670550][ T808] usb 3-1: config 0 descriptor?? [ 193.684958][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 193.716506][ T5730] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 193.724808][ T5730] usb 5-1: config 0 has no interface number 0 [ 193.731278][ T5730] usb 5-1: config 0 interface 41 has no altsetting 0 [ 193.742361][ T5730] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 193.751988][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.766446][ T5730] usb 5-1: Product: syz [ 193.772941][ T5730] usb 5-1: Manufacturer: syz [ 193.778601][ T5730] usb 5-1: SerialNumber: syz [ 193.789706][ T5730] usb 5-1: config 0 descriptor?? [ 193.835335][ T42] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 193.854643][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 193.862178][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 193.871591][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.882032][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.892383][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 193.905281][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.922032][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.931434][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.984857][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 193.996474][ T42] usb 6-1: config 139 has an invalid interface number: 49 but max is 0 [ 194.014571][ T42] usb 6-1: config 139 has no interface number 0 [ 194.024874][ T42] usb 6-1: config 139 interface 49 has no altsetting 0 [ 194.044203][ T42] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 194.063624][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.073719][ T42] usb 6-1: Product: syz [ 194.078190][ T42] usb 6-1: Manufacturer: syz [ 194.082835][ T42] usb 6-1: SerialNumber: syz [ 194.105918][ T808] koneplus 0003:1E7D:2D51.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 194.155257][ T9] usb 4-1: usb_control_msg returned -32 [ 194.166452][ T9] usbtmc 4-1:16.0: can't read capabilities [ 194.294440][ T808] koneplus 0003:1E7D:2D51.0012: couldn't init struct koneplus_device [ 194.302807][ T808] koneplus 0003:1E7D:2D51.0012: couldn't install mouse [ 194.324857][ T42] radio-usb-si4713 6-1:139.49: Si4713 development board discovered: (10C4:8244) [ 194.340154][ T808] koneplus 0003:1E7D:2D51.0012: probe with driver koneplus failed with error -5 [ 194.361375][ T42] radio-usb-si4713 6-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 194.373579][ T42] usbhid 6-1:139.49: couldn't find an input interrupt endpoint [ 194.385460][ T42] usb 6-1: USB disconnect, device number 5 [ 194.403835][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.410915][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.550892][ T10] usb 3-1: USB disconnect, device number 22 [ 194.611633][ T5730] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 194.911645][ T8644] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 195.087251][ T9] usb 4-1: USB disconnect, device number 21 [ 195.251717][ T8655] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 195.425632][ T8659] tipc: Started in network mode [ 195.430618][ T8659] tipc: Node identity 124ed88fccbe, cluster identity 4711 [ 195.439128][ T8659] tipc: Enabled bearer , priority 0 [ 195.518108][ T8657] tipc: Resetting bearer [ 195.634953][ T5730] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 195.645894][ T5730] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 195.659194][ T5730] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 195.700350][ T5730] usb 5-1: USB disconnect, device number 15 [ 195.928327][ T42] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 196.050163][ T8673] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.914'. [ 196.138906][ T42] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 196.151102][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.154918][ T8678] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 196.159816][ T42] usb 4-1: Product: syz [ 196.171542][ T42] usb 4-1: Manufacturer: syz [ 196.186755][ T42] usb 4-1: SerialNumber: syz [ 196.198246][ T8680] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 196.216715][ T42] usb 4-1: config 0 descriptor?? [ 196.240474][ T42] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 196.524612][ T5730] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 196.700894][ T5730] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 196.710924][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.719117][ T5730] usb 2-1: Product: syz [ 196.723353][ T5730] usb 2-1: Manufacturer: syz [ 196.728033][ T5730] usb 2-1: SerialNumber: syz [ 196.736567][ T5730] usb 2-1: config 0 descriptor?? [ 196.750124][ T5730] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 196.968333][ T5730] gspca_sunplus: reg_r err -32 [ 197.402370][ T24] usb 2-1: USB disconnect, device number 14 [ 197.920511][ T8657] tipc: Disabling bearer [ 197.937242][ T8680] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 197.972465][ T808] tipc: Node number set to 3740326031 [ 198.218294][ T8694] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 198.683974][ T42] gspca_stk1135: reg_w 0x300 err -71 [ 198.702576][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 198.721680][ T42] gspca_stk1135: Sensor write failed [ 198.733070][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 198.751753][ T42] gspca_stk1135: Sensor write failed [ 198.769086][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 198.784673][ T42] gspca_stk1135: Sensor read failed [ 198.795103][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 198.806256][ T42] gspca_stk1135: Sensor read failed [ 198.820457][ T42] gspca_stk1135: Detected sensor type unknown (0x0) [ 198.835538][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 198.854816][ T42] gspca_stk1135: Sensor read failed [ 198.880818][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 198.916867][ T8716] geneve2: entered promiscuous mode [ 198.917777][ T42] gspca_stk1135: Sensor read failed [ 198.959330][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 198.969176][ T808] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 199.004289][ T42] gspca_stk1135: Sensor write failed [ 199.013356][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 199.036690][ T42] gspca_stk1135: Sensor write failed [ 199.046593][ T42] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 199.090141][ T42] usb 4-1: USB disconnect, device number 22 [ 199.167916][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.183174][ T8725] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 199.194542][ T808] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.235069][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.269833][ T808] usb 3-1: config 0 descriptor?? [ 199.397451][ T8730] netlink: 'syz.3.936': attribute type 3 has an invalid length. [ 199.426165][ T8730] netlink: 3 bytes leftover after parsing attributes in process `syz.3.936'. [ 199.497357][ T808] usbhid 3-1:0.0: can't add hid device: -71 [ 199.525728][ T808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 199.555503][ T808] usb 3-1: USB disconnect, device number 23 [ 199.741366][ T8740] syzkaller0: entered promiscuous mode [ 199.747054][ T8740] syzkaller0: entered allmulticast mode [ 199.876497][ T8744] vivid-002: ================= START STATUS ================= [ 199.887775][ T8744] vivid-002: Radio HW Seek Mode: Bounded [ 199.927678][ T8744] vivid-002: Radio Programmable HW Seek: false [ 199.959847][ T8744] vivid-002: RDS Rx I/O Mode: Block I/O [ 199.987012][ T8744] vivid-002: Generate RBDS Instead of RDS: false [ 200.009946][ T8744] vivid-002: RDS Reception: true [ 200.015568][ T8744] vivid-002: RDS Program Type: 0 inactive [ 200.021814][ T8744] vivid-002: RDS PS Name: inactive [ 200.029477][ T8744] vivid-002: RDS Radio Text: inactive [ 200.037385][ T8744] vivid-002: RDS Traffic Announcement: false inactive [ 200.044779][ T808] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 200.047190][ T8744] vivid-002: RDS Traffic Program: false inactive [ 200.067571][ T8744] vivid-002: RDS Music: false inactive [ 200.073368][ T8744] vivid-002: ================== END STATUS ================== [ 200.225203][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 200.243642][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.281405][ T808] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 200.315955][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.354542][ T808] usb 3-1: config 0 descriptor?? [ 200.388962][ T808] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 200.778432][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.785838][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.793170][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.800419][ T4984] usb 3-1: control msg error: -71 [ 200.807164][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.815183][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.823009][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.830514][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.837783][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.845037][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.852256][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.859547][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.866796][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.874006][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.881325][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.888591][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.895828][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.903031][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.910911][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.918180][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.925428][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.932637][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.939858][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.947204][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.954422][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.962009][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.969425][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.976757][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.984053][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.991352][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 200.998676][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.011086][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.018639][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.025949][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.033249][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.040850][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.048174][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.055467][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.062772][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.070089][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.077392][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.084777][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.092091][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.099414][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.106736][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.114430][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.121780][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.129097][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.136403][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.143688][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.151009][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.158338][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.165724][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.173049][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.180376][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.187702][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.195054][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.202344][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.209706][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.214844][ T8764] input: syz1 as /devices/virtual/input/input31 [ 201.217377][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.230674][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.238071][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.245401][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.252730][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.260053][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.268756][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.276267][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.285034][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.293049][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.300385][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.307567][ C0] usb 3-1: pegasus_irq - usb_submit_urb failed with result -1 [ 201.342068][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.349507][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.357548][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.368167][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.375991][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.383333][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.390685][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.398022][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.405366][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.412691][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.420022][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.427377][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.435683][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.443171][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.450487][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.457933][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.465315][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.465532][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.465742][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.465951][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.466163][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.466366][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.466579][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.466780][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.466988][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.467182][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.467390][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.467589][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.467792][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.467997][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.469035][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.469244][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.469442][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.469643][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.469906][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.470294][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.470485][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.470893][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.471153][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.471339][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.471536][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.471613][ T808] usb 3-1: USB disconnect, device number 24 [ 201.471730][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 201.471746][ C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -19 [ 201.478613][ T4984] usb 3-1: control msg error: -71 [ 201.800863][ T29] audit: type=1326 audit(1780488782.405:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec499ce59 code=0x7ffc0000 [ 201.800909][ T29] audit: type=1326 audit(1780488782.405:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f7ec499ce59 code=0x7ffc0000 [ 201.800953][ T29] audit: type=1326 audit(1780488782.405:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec499ce59 code=0x7ffc0000 [ 201.801271][ T29] audit: type=1326 audit(1780488782.405:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7ec495d68e code=0x7ffc0000 [ 201.807824][ T29] audit: type=1326 audit(1780488782.415:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7ec495d68e code=0x7ffc0000 [ 201.807866][ T29] audit: type=1326 audit(1780488782.415:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7ec495d68e code=0x7ffc0000 [ 201.807901][ T29] audit: type=1326 audit(1780488782.415:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec499ce59 code=0x7ffc0000 [ 201.808331][ T29] audit: type=1326 audit(1780488782.415:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7ec499ce59 code=0x7ffc0000 [ 201.818552][ T29] audit: type=1326 audit(1780488782.425:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec499ce59 code=0x7ffc0000 [ 201.818775][ T29] audit: type=1326 audit(1780488782.425:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec499ce59 code=0x7ffc0000 [ 201.873059][ T5628] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 202.034628][ T5628] usb 5-1: Using ep0 maxpacket: 8 [ 202.080423][ T5628] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 202.080447][ T5628] usb 5-1: config 179 has no interface number 0 [ 202.080490][ T5628] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 202.080513][ T5628] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 202.080536][ T5628] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 202.080556][ T5628] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 202.080576][ T5628] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 202.080597][ T5628] usb 5-1: config 179 interface 65 has no altsetting 0 [ 202.080627][ T5628] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 202.080645][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.139963][ T5628] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input32 [ 202.195512][ T4984] input input32: unable to receive magic message: -110 [ 202.235685][ T4984] input input32: unable to receive magic message: -32 [ 202.269437][ T808] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 202.272180][ T4984] input input32: unable to receive magic message: -32 [ 202.281351][ T4984] input input32: unable to receive magic message: -32 [ 202.328978][ T4984] input input32: unable to receive magic message: -32 [ 202.368068][ T5640] input input32: unable to receive magic message: -32 [ 202.432015][ T8770] input input32: unable to receive magic message: -32 [ 202.484580][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 202.746859][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.757489][ T808] usb 3-1: config 0 has no interfaces? [ 202.764432][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.776007][ T808] usb 3-1: config 0 has no interfaces? [ 202.782619][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.799760][ T808] usb 3-1: config 0 has no interfaces? [ 202.809845][ T808] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 202.819568][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.827946][ T808] usb 3-1: Product: syz [ 202.832194][ T808] usb 3-1: Manufacturer: syz [ 202.837815][ T808] usb 3-1: SerialNumber: syz [ 202.854663][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 202.857324][ T808] usb 3-1: config 0 descriptor?? [ 203.020015][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.034177][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.046990][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.071860][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 203.091165][ T9] usb 6-1: Manufacturer: syz [ 203.120633][ T9] usb 6-1: config 0 descriptor?? [ 203.269033][ T42] usb 3-1: USB disconnect, device number 25 [ 203.362156][ T10] usb 5-1: USB disconnect, device number 16 [ 203.362309][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.468051][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 203.574629][ T5730] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 203.602350][ T8805] syzkaller0: entered promiscuous mode [ 203.608512][ T8805] syzkaller0: entered allmulticast mode [ 203.713204][ T8807] binder: 8806:8807 ioctl c0306201 200000000000 returned -14 [ 203.773605][ T5730] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 203.784582][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 203.792636][ T5730] usb 4-1: Product: syz [ 203.800145][ T5730] usb 4-1: SerialNumber: syz [ 203.808469][ T5730] usb 4-1: config 0 descriptor?? [ 203.947006][ T9] uclogic 0003:256C:006D.0013: interface is invalid, ignoring [ 203.988233][ T9] usb 6-1: USB disconnect, device number 6 [ 204.062673][ T5730] hso 4-1:0.0: Failed to find BULK eps [ 204.271493][ T808] usb 4-1: USB disconnect, device number 23 [ 204.901665][ T8831] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.184606][ T5730] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 205.357000][ T5730] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.374980][ T5730] usb 4-1: config 0 has no interface number 0 [ 205.388171][ T5730] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 205.411757][ T5730] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 205.434427][ T5730] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.457772][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.484052][ T5730] usb 4-1: config 0 descriptor?? [ 205.504002][ T8834] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.532210][ T5730] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 205.740982][ T42] usb 4-1: USB disconnect, device number 24 [ 205.820063][ T8856] syzkaller0: entered promiscuous mode [ 205.828671][ T8856] syzkaller0: entered allmulticast mode [ 206.003313][ T8863] syzkaller0: entered promiscuous mode [ 206.009071][ T8863] syzkaller0: entered allmulticast mode [ 206.166356][ T8867] bridge_slave_0: left allmulticast mode [ 206.172090][ T8867] bridge_slave_0: left promiscuous mode [ 206.179160][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.201582][ T8867] bridge_slave_1: left allmulticast mode [ 206.208524][ T8867] bridge_slave_1: left promiscuous mode [ 206.214440][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.244127][ T8867] bond0: (slave bond_slave_0): Releasing backup interface [ 206.287098][ T8867] bond0: (slave bond_slave_1): Releasing backup interface [ 206.328002][ T8867] team0: Port device team_slave_0 removed [ 206.341975][ T8867] team0: Port device team_slave_1 removed [ 206.349962][ T8867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.357687][ T8867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.368899][ T8867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.378998][ T8867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.389019][ T8867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.438957][ T8875] syzkaller0: entered promiscuous mode [ 206.459781][ T8875] syzkaller0: entered allmulticast mode [ 206.534891][ T5730] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 206.705448][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 206.728262][ T5730] usb 4-1: config 0 has no interfaces? [ 206.743048][ T5730] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 206.752496][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.760738][ T5730] usb 4-1: Product: syz [ 206.765316][ T5730] usb 4-1: Manufacturer: syz [ 206.770042][ T5730] usb 4-1: SerialNumber: syz [ 206.778679][ T5730] usb 4-1: config 0 descriptor?? [ 207.019205][ T9] usb 4-1: USB disconnect, device number 25 [ 207.191369][ T8891] tipc: Cannot configure node identity twice [ 207.354704][ T5730] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 207.514668][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 207.523725][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.541858][ T5730] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 207.565723][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.602409][ T5730] usb 2-1: config 0 descriptor?? [ 207.617271][ T5730] hub 2-1:0.0: bad descriptor, ignoring hub [ 207.628186][ T5730] hub 2-1:0.0: probe with driver hub failed with error -5 [ 207.638364][ T5730] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 207.954844][ T5730] usb 2-1: USB disconnect, device number 15 [ 208.580228][ T8909] syzkaller0: entered promiscuous mode [ 208.589877][ T8909] syzkaller0: entered allmulticast mode [ 208.895008][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 209.066481][ T42] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.086178][ T42] usb 6-1: config 0 has no interface number 0 [ 209.107549][ T42] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 209.130182][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.147582][ T42] usb 6-1: Product: syz [ 209.156276][ T42] usb 6-1: Manufacturer: syz [ 209.166489][ T42] usb 6-1: SerialNumber: syz [ 209.185381][ T42] usb 6-1: config 0 descriptor?? [ 209.264733][ T5730] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 209.418782][ T42] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 209.440068][ T5730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.457156][ T5730] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.464935][ T42] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 209.485012][ T5730] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 209.494632][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.497971][ T42] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 209.512621][ T42] usb 6-1: media controller created [ 209.518990][ T5730] usb 3-1: Product: syz [ 209.533930][ T5730] usb 3-1: Manufacturer: syz [ 209.534871][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.546600][ T5730] usb 3-1: SerialNumber: syz [ 209.587903][ T5730] usb 3-1: config 0 descriptor?? [ 209.655816][ T8936] syz_tun: entered allmulticast mode [ 209.671447][ T8936] bond0: entered promiscuous mode [ 209.679470][ T8936] bond_slave_0: entered promiscuous mode [ 209.685906][ T8936] bond_slave_1: entered promiscuous mode [ 209.806518][ T8915] input: syz0 as /devices/virtual/input/input33 [ 209.822445][ T8915] qrtr: Invalid version 127 [ 209.882005][ T42] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 209.996657][ T42] usb 6-1: USB disconnect, device number 7 [ 210.194608][ T808] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 210.378244][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.387931][ T808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.399425][ T808] usb 2-1: config 0 has no interfaces? [ 210.407470][ T808] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 210.417317][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.425652][ T808] usb 2-1: Product: syz [ 210.429968][ T808] usb 2-1: Manufacturer: syz [ 210.435277][ T808] usb 2-1: SerialNumber: syz [ 210.449797][ T808] usb 2-1: config 0 descriptor?? [ 210.521449][ T8958] syzkaller0: entered promiscuous mode [ 210.542232][ T8958] syzkaller0: entered allmulticast mode [ 210.565732][ T5730] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 210.666846][ T10] usb 2-1: USB disconnect, device number 16 [ 210.727054][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 210.744222][ T5730] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 210.766189][ T5730] usb 5-1: config 0 has no interface number 0 [ 210.786543][ T5730] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 210.801508][ T5716] usb 3-1: USB disconnect, device number 26 [ 210.814125][ T5730] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 210.832841][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.850824][ T5730] usb 5-1: Product: syz [ 210.866381][ T5730] usb 5-1: Manufacturer: syz [ 210.871044][ T5730] usb 5-1: SerialNumber: syz [ 210.879872][ T5730] usb 5-1: config 0 descriptor?? [ 210.897964][ T8953] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 211.112906][ T8953] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 211.596136][ T5716] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 211.670023][ T8980] tipc: Enabled bearer , priority 0 [ 211.691035][ T8980] syzkaller0: entered promiscuous mode [ 211.714860][ T8980] syzkaller0: entered allmulticast mode [ 211.774214][ T8980] tipc: Resetting bearer [ 211.776757][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 211.798396][ T8978] tipc: Resetting bearer [ 211.822679][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 211.843690][ T8978] tipc: Disabling bearer [ 211.867999][ T5716] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 211.894583][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.914132][ T5716] usb 2-1: Product: syz [ 211.923204][ T5716] usb 2-1: Manufacturer: syz [ 211.942399][ T5716] usb 2-1: SerialNumber: syz [ 211.967973][ T5716] usb 2-1: config 0 descriptor?? [ 211.995157][ T5716] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 212.036855][ T5716] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 212.097295][ T8985] syzkaller0: entered promiscuous mode [ 212.116102][ T8985] syzkaller0: entered allmulticast mode [ 212.261188][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 212.594571][ T808] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 212.608629][ T5716] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 212.655221][ T42] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 212.754540][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 212.761368][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.770886][ T808] usb 4-1: config index 0 descriptor too short (expected 8192, got 63) [ 212.779517][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.789806][ T808] usb 4-1: config 0 has no interfaces? [ 212.798306][ T808] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 212.807606][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.816029][ T808] usb 4-1: Product: syz [ 212.820496][ T808] usb 4-1: Manufacturer: syz [ 212.825881][ T808] usb 4-1: SerialNumber: syz [ 212.831163][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.843076][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.856986][ T808] usb 4-1: config 0 descriptor?? [ 212.861988][ T5689] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 212.872413][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 212.883774][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.891961][ T42] usb 6-1: Product: syz [ 212.897058][ T42] usb 6-1: Manufacturer: syz [ 212.901669][ T42] usb 6-1: SerialNumber: syz [ 212.909507][ T42] usb 6-1: config 0 descriptor?? [ 213.029898][ T5716] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 213.038786][ T5716] em28xx 2-1:0.0: board has no eeprom [ 213.044603][ T5689] usb 3-1: Using ep0 maxpacket: 32 [ 213.052305][ T5689] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 213.061664][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.075265][ T5689] usb 3-1: config 0 descriptor?? [ 213.085352][ T808] usb 4-1: USB disconnect, device number 26 [ 213.128898][ T10] usb 6-1: USB disconnect, device number 8 [ 213.301654][ T5689] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 213.310526][ T5689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.324754][ T5716] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 213.325334][ T5689] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 213.334175][ T5716] em28xx 2-1:0.0: dvb set to bulk mode. [ 213.339884][ T5689] usb 3-1: media controller created [ 213.353199][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.355312][ T10] em28xx 2-1:0.0: Binding DVB extension [ 213.507659][ T5689] az6027: usb out operation failed. (-71) [ 213.517564][ T5689] az6027: usb out operation failed. (-71) [ 213.523365][ T5689] stb0899_attach: Driver disabled by Kconfig [ 213.529457][ T5689] az6027: no front-end attached [ 213.529457][ T5689] [ 213.537111][ T5689] az6027: usb out operation failed. (-71) [ 213.542912][ T5689] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 213.553228][ T5689] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 213.567977][ T5689] dvb-usb: schedule remote query interval to 400 msecs. [ 213.575686][ T5689] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 213.582821][ T5730] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 213.589752][ T5689] usb 3-1: USB disconnect, device number 27 [ 213.605758][ T5730] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 213.625500][ T5730] asix 5-1:0.188: probe with driver asix failed with error -71 [ 213.665477][ T5730] usb 5-1: USB disconnect, device number 17 [ 213.737274][ T5689] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 213.929046][ T9002] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 214.197734][ T9008] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1033'. [ 214.207318][ T5689] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 214.368606][ T5689] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.394846][ T5689] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.421645][ T9] usb 2-1: USB disconnect, device number 17 [ 214.421722][ T5689] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 214.443934][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 214.468105][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.484345][ T5689] usb 6-1: Product: syz [ 214.491476][ T5689] usb 6-1: Manufacturer: syz [ 214.497341][ T5689] usb 6-1: SerialNumber: syz [ 214.517888][ T10] em28xx 2-1:0.0: Registering input extension [ 214.518958][ T5689] usb 6-1: config 0 descriptor?? [ 214.542350][ T9] em28xx 2-1:0.0: Closing input extension [ 214.595856][ T5730] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 214.615175][ T9] em28xx 2-1:0.0: Freeing device [ 214.740187][ T8998] input: syz0 as /devices/virtual/input/input36 [ 214.749455][ T8998] qrtr: Invalid version 127 [ 214.766286][ T5730] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 214.775141][ T5730] usb 5-1: config 0 has no interface number 0 [ 214.781313][ T5730] usb 5-1: config 0 interface 41 has no altsetting 0 [ 214.791119][ T5730] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 214.800502][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.814433][ T5730] usb 5-1: Product: syz [ 214.822912][ T5730] usb 5-1: Manufacturer: syz [ 214.841080][ T5730] usb 5-1: SerialNumber: syz [ 214.857604][ T5730] usb 5-1: config 0 descriptor?? [ 215.432676][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.447416][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.494875][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 215.589963][ T9] usb 6-1: USB disconnect, device number 9 [ 215.649002][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.666428][ T5730] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 215.685996][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.715333][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 215.734765][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.748645][ T10] usb 2-1: Product: syz [ 215.759625][ T10] usb 2-1: Manufacturer: syz [ 215.770214][ T10] usb 2-1: SerialNumber: syz [ 215.786106][ T10] usb 2-1: config 0 descriptor?? [ 215.802664][ T9034] syzkaller0: entered promiscuous mode [ 215.809730][ T9034] syzkaller0: entered allmulticast mode [ 215.890961][ T10] usb 5-1: USB disconnect, device number 18 [ 216.003960][ T5689] usb 2-1: USB disconnect, device number 18 [ 216.427609][ T9047] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1045'. [ 216.526064][ T9050] syzkaller0: entered promiscuous mode [ 216.544640][ T9050] syzkaller0: entered allmulticast mode [ 217.306293][ T9072] syzkaller0: entered promiscuous mode [ 217.315824][ T9072] syzkaller0: entered allmulticast mode [ 217.626379][ T9078] kvm: vcpu 0: requested 13312 ns lapic timer period limited to 200000 ns [ 217.635605][ T9078] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 217.656646][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 217.826548][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.840013][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.859489][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 217.869305][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.877617][ T9] usb 4-1: Product: syz [ 217.884719][ T9] usb 4-1: Manufacturer: syz [ 217.889850][ T9] usb 4-1: SerialNumber: syz [ 217.902440][ T9] usb 4-1: config 0 descriptor?? [ 218.129066][ T9071] input: syz0 as /devices/virtual/input/input37 [ 218.152786][ T9071] qrtr: Invalid version 127 [ 218.270754][ T9090] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1057'. [ 218.487035][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 218.577506][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1060'. [ 218.901088][ T10] usb 4-1: USB disconnect, device number 27 [ 219.821632][ T9127] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 219.912357][ T9129] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1069'. [ 220.174764][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 220.183684][ T9142] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 220.351485][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.386759][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 220.413840][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.452109][ T9] usb 3-1: config 0 descriptor?? [ 220.472363][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 220.667953][ T9153] syzkaller0: entered promiscuous mode [ 220.677960][ T9153] syzkaller0: entered allmulticast mode [ 220.825539][ T5730] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 220.903510][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 220.929614][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 220.938737][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 220.950858][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 220.958930][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 220.973229][ C1] sd 0:0:1:0: [sda] tag#2707 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 220.983697][ C1] sd 0:0:1:0: [sda] tag#2707 CDB: Write(6) 0a 0d b5 a8 00 00 00 00 00 00 00 00 [ 220.993600][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 221.007826][ T5730] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.021174][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 221.029948][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.044318][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 221.053700][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 221.061939][ T5730] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 221.071973][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.081857][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 221.088568][ T5730] usb 6-1: Product: syz [ 221.093059][ T5730] usb 6-1: Manufacturer: syz [ 221.098917][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 221.107484][ T5730] usb 6-1: SerialNumber: syz [ 221.119055][ T5730] usb 6-1: config 0 descriptor?? [ 221.314061][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 221.322247][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 221.342502][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 221.355939][ T9149] input: syz0 as /devices/virtual/input/input38 [ 221.356360][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 221.388959][ T9] pwc: Registered as video103. [ 221.390520][ T9149] qrtr: Invalid version 127 [ 221.421205][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 221.477832][ T9] usb 3-1: USB disconnect, device number 28 [ 221.581166][ T9171] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1082'. [ 222.204254][ T9] usb 6-1: USB disconnect, device number 10 [ 222.244583][ T5730] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 222.404601][ T5730] usb 3-1: Using ep0 maxpacket: 8 [ 222.415024][ T5730] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 222.423667][ T5730] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 222.434353][ T5730] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.447853][ T5730] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.458501][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.474038][ T5730] usbtmc 3-1:16.0: bulk endpoints not found [ 222.861197][ T808] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.036083][ T808] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 223.061623][ T808] usb 5-1: config 160 has no interface number 0 [ 223.082491][ T808] usb 5-1: config 160 interface 200 has no altsetting 0 [ 223.106698][ T808] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 223.124273][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.150104][ T808] usb 5-1: Product: syz [ 223.166117][ T808] usb 5-1: Manufacturer: syz [ 223.176185][ T808] usb 5-1: SerialNumber: syz [ 223.442963][ T808] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.455173][ T808] usb 5-1: MIDIStreaming interface descriptor not found [ 223.464824][ T9197] syzkaller0: entered promiscuous mode [ 223.484051][ T9197] syzkaller0: entered allmulticast mode [ 223.624042][ T808] usb 5-1: USB disconnect, device number 19 [ 223.849412][ T5689] usb 3-1: USB disconnect, device number 29 [ 224.079084][ T9203] tipc: Started in network mode [ 224.096481][ T9203] tipc: Node identity 76638b7b2167, cluster identity 4711 [ 224.120590][ T9203] tipc: Enabled bearer , priority 0 [ 224.143993][ T9204] syzkaller0: entered promiscuous mode [ 224.166824][ T9204] syzkaller0: entered allmulticast mode [ 224.249436][ T9203] tipc: Resetting bearer [ 224.268568][ T9202] tipc: Resetting bearer [ 224.288026][ T9208] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1093'. [ 224.320102][ T9202] tipc: Disabling bearer [ 224.455052][ T9212] syzkaller0: entered promiscuous mode [ 224.472669][ T9212] syzkaller0: entered allmulticast mode [ 224.910735][ T9217] input: syz0 as /devices/virtual/input/input40 [ 224.953416][ T9217] qrtr: Invalid version 127 [ 224.994910][ T5730] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 225.418580][ T9229] tipc: Enabled bearer , priority 0 [ 225.440989][ T9229] syzkaller0: entered promiscuous mode [ 225.455326][ T9229] syzkaller0: entered allmulticast mode [ 225.515421][ T9229] tipc: Resetting bearer [ 225.536665][ T9228] tipc: Resetting bearer [ 225.600001][ T9228] tipc: Disabling bearer [ 226.034763][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 226.196583][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 226.212754][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 226.247215][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 226.275615][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 226.292043][ T9] usb 4-1: Product: syz [ 226.300687][ T9] usb 4-1: Manufacturer: syz [ 226.308573][ T9] usb 4-1: SerialNumber: syz [ 226.319103][ T9] usb 4-1: config 0 descriptor?? [ 226.326464][ T9234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 226.411296][ T9249] loop2: detected capacity change from 0 to 7 [ 226.461701][ T9249] Dev loop2: unable to read RDB block 7 [ 226.507700][ T9249] loop2: unable to read partition table [ 226.537808][ T9249] loop2: partition table beyond EOD, truncated [ 226.551181][ T9249] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.632220][ T9253] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1106'. [ 226.654261][ T4999] Dev loop2: unable to read RDB block 7 [ 226.663786][ T4999] loop2: unable to read partition table [ 226.676710][ T4999] loop2: partition table beyond EOD, truncated [ 227.313135][ T9] usb 4-1: USB disconnect, device number 28 [ 227.344677][ T5689] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 227.506478][ T5689] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.522111][ T5689] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 227.558725][ T5689] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 227.569693][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.590696][ T5689] usb 6-1: Product: syz [ 227.599086][ T5689] usb 6-1: Manufacturer: syz [ 227.605674][ T5689] usb 6-1: SerialNumber: syz [ 227.621308][ T5689] usb 6-1: config 0 descriptor?? [ 227.834677][ T5628] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 227.852220][ T9262] input: syz0 as /devices/virtual/input/input41 [ 227.878332][ T9262] qrtr: Invalid version 127 [ 227.998021][ T5628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.024681][ T5628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.051994][ T5628] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.086513][ T5628] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.119515][ T5628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.149226][ T5628] usb 2-1: config 0 descriptor?? [ 228.288048][ T9295] syzkaller0: entered promiscuous mode [ 228.293690][ T9295] syzkaller0: entered allmulticast mode [ 228.393207][ T9299] syzkaller0: entered promiscuous mode [ 228.409531][ T9299] syzkaller0: entered allmulticast mode [ 228.472513][ T9299] tipc: Enabled bearer , priority 0 [ 228.498443][ T9298] tipc: Resetting bearer [ 228.526118][ T9298] tipc: Disabling bearer [ 228.631306][ T5628] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 228.712967][ T9] usb 6-1: USB disconnect, device number 11 [ 228.861074][ T9275] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 228.943088][ T9275] bond1: entered promiscuous mode [ 228.949952][ T9275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.032767][ T9275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.040015][ T9275] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 229.055475][ T9275] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 229.069332][ T9275] bond1: (slave vti0): making interface the new active one [ 229.076964][ T9275] vti0: entered promiscuous mode [ 229.085218][ T9275] bond1: (slave vti0): Enslaving as an active interface with an up link [ 229.351046][ T42] usb 2-1: USB disconnect, device number 19 [ 230.735740][ T5689] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 230.905745][ T5689] usb 4-1: Using ep0 maxpacket: 32 [ 230.915731][ T5689] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 230.931885][ T5689] usb 4-1: config 0 has no interface number 0 [ 230.953194][ T5689] usb 4-1: config 0 interface 12 has no altsetting 0 [ 230.972319][ T5689] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 230.988388][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.008634][ T5689] usb 4-1: Product: syz [ 231.026538][ T5689] usb 4-1: Manufacturer: syz [ 231.031363][ T5689] usb 4-1: SerialNumber: syz [ 231.045250][ T5689] usb 4-1: config 0 descriptor?? [ 231.155130][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 231.177857][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.231489][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.621803][ T9347] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1131'. [ 231.774947][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 232.348834][ T9360] bond2 (unregistering): Released all slaves [ 233.077320][ T9371] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 233.155621][ T42] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 233.321367][ T42] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 233.342865][ T42] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 233.360841][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.368635][ T42] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 233.380057][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.396980][ T42] usb 5-1: config 0 descriptor?? [ 233.845974][ T42] lenovo 0003:17EF:60EE.0015: ignoring exceeding usage max [ 233.882408][ T42] lenovo 0003:17EF:60EE.0015: unknown main item tag 0x6 [ 233.913539][ T42] lenovo 0003:17EF:60EE.0015: ignoring exceeding usage max [ 233.957422][ T42] lenovo 0003:17EF:60EE.0015: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 234.129780][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.137478][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.144033][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.144435][ T5689] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 234.151326][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.165434][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.171958][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.178512][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.185072][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.189279][ T5689] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 234.191599][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.191613][ T9379] tc action pedit 'at' offset -61061 out of bounds [ 234.191637][ T9379] 0: reclassify loop, rule prio 0, protocol 800 [ 234.199666][ T5689] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 234.270105][ T9381] syzkaller0: entered promiscuous mode [ 234.274584][ T5689] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 234.276421][ T9381] syzkaller0: entered allmulticast mode [ 234.308978][ T5689] usb 4-1: USB disconnect, device number 29 [ 234.449976][ T42] lenovo 0003:17EF:60EE.0015: Sensitivity setting failed: -71 [ 234.481357][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 234.502845][ T42] usb 5-1: USB disconnect, device number 21 [ 234.657872][ T9387] syzkaller0: entered promiscuous mode [ 234.663692][ T9387] syzkaller0: entered allmulticast mode [ 234.815422][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 234.866705][ T9395] tipc: Started in network mode [ 234.890960][ T9395] tipc: Node identity c6db0007c1d1, cluster identity 4711 [ 234.917730][ T9395] tipc: Enabled bearer , priority 0 [ 234.925863][ T9399] syzkaller0: entered promiscuous mode [ 234.931446][ T9399] syzkaller0: entered allmulticast mode [ 234.943126][ T9395] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 234.990766][ T9395] tipc: Resetting bearer [ 234.994594][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 235.006830][ T9391] tipc: Resetting bearer [ 235.032076][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 235.068892][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.091639][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.128408][ T9391] tipc: Disabling bearer [ 235.130279][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.147928][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 235.161863][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.174153][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 235.188819][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 235.204876][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 235.215171][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.226942][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.239383][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.252361][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 235.317313][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.344864][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 235.406667][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 235.463355][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 235.511327][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.561119][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.744973][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.820939][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 235.920863][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.987389][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 236.105066][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 236.160417][ T9] usb 6-1: string descriptor 0 read error: -22 [ 236.182960][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 236.232017][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.441692][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 236.477141][ T5633] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 236.490003][ T5633] Bluetooth: hci1: Injecting HCI hardware error event [ 236.500029][ T5633] Bluetooth: hci1: hardware error 0x00 [ 237.086402][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 237.086418][ T29] audit: type=1800 audit(1780488817.695:22): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1151" name="bus" dev="tmpfs" ino=1319 res=0 errno=0 [ 237.675035][ T10] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 237.856914][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.884671][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.899007][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 237.931630][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 237.960361][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.008267][ T9437] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 238.060463][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 238.088851][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 238.116417][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 238.128583][ T5730] usb 6-1: USB disconnect, device number 12 [ 238.135421][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 238.169507][ T10] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 238.209517][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 238.304567][ T42] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 238.494682][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 238.518907][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.532079][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 238.541580][ T42] usb 2-1: no configurations [ 238.548544][ T42] usb 2-1: can't read configurations, error -22 [ 238.566131][ T5633] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 238.655552][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 238.669514][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.680598][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.712320][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.729193][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 238.740926][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.779592][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 238.808422][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.863036][ T9] usb 5-1: Manufacturer: syz [ 238.925385][ T9] usb 5-1: config 0 descriptor?? [ 239.013009][ T9466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.091842][ T5730] usb 3-1: USB disconnect, device number 30 [ 239.395122][ T9] rc_core: IR keymap rc-hauppauge not found [ 239.406087][ T9] Registered IR keymap rc-empty [ 239.428202][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.487331][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.539184][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 239.579374][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input43 [ 239.632988][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.684750][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.724754][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.757658][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.794606][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.830420][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.874818][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.925338][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.966642][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.014824][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.063700][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 240.101909][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 240.135476][ T9] usb 5-1: USB disconnect, device number 22 [ 240.350122][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 241.306951][ T5730] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 241.517170][ T5730] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.541353][ T5730] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.567010][ T5730] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.580996][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.638994][ T9509] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.676684][ T5730] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.247969][ T42] usb 2-1: USB disconnect, device number 22 [ 243.403908][ T9536] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1181'. [ 243.725540][ T42] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 243.930542][ T42] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 243.956591][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.979460][ T42] usb 4-1: Product: syz [ 243.997284][ T42] usb 4-1: Manufacturer: syz [ 244.010886][ T42] usb 4-1: SerialNumber: syz [ 244.034593][ T5716] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 244.045640][ T42] usb 4-1: config 0 descriptor?? [ 244.054567][ T5628] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 244.067652][ T42] hub 4-1:0.0: bad descriptor, ignoring hub [ 244.082897][ T42] hub 4-1:0.0: probe with driver hub failed with error -5 [ 244.194625][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 244.206022][ T5716] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 244.221671][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.236469][ T5628] usb 5-1: Using ep0 maxpacket: 32 [ 244.246302][ T5716] usb 6-1: config 0 descriptor?? [ 244.254951][ T5628] usb 5-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 244.293602][ T5628] usb 5-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 244.349504][ T5628] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 244.358846][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.368559][ T5628] usb 5-1: Product: syz [ 244.373247][ T5628] usb 5-1: Manufacturer: syz [ 244.377963][ T5628] usb 5-1: SerialNumber: syz [ 244.410416][ T42] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 244.445037][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.455464][ T42] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 244.466335][ T42] usb 4-1: media controller created [ 244.477954][ T5716] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 244.526608][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.544210][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.588235][ T5716] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 244.598314][ T5716] usb 6-1: media controller created [ 244.626119][ T9536] dib0700: tx buffer length is larger than 4. Not supported. [ 244.675972][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.729856][ T42] DVB: Unable to find symbol dib7000p_attach() [ 244.754561][ T42] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 244.787807][ T9551] ------------[ cut here ]------------ [ 244.793335][ T9551] usb 4-1: BOGUS control dir, pipe 80001e80 doesn't match bRequestType c0 [ 244.802175][ T9551] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.5.1182/9551 [ 244.812602][ T9551] Modules linked in: [ 244.816748][ T9551] CPU: 1 UID: 0 PID: 9551 Comm: syz.5.1182 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.827660][ T9551] Tainted: [L]=SOFTLOCKUP [ 244.832067][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.842681][ T9551] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 244.849839][ T9551] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 244.869538][ T9551] RSP: 0018:ffffc900032ef948 EFLAGS: 00010246 [ 244.875727][ T9551] RAX: 0000000000000000 RBX: ffff88802a4b4f00 RCX: 0000000080001e80 [ 244.884868][ T9551] RDX: ffff888027c4c0a0 RSI: ffffffff8c80c2e0 RDI: ffffffff903d96e0 [ 244.892860][ T9551] RBP: 1ffff11004356ffc R08: 00000000000000c0 R09: 0000000000000000 [ 244.901231][ T9551] R10: ffffc900032efa40 R11: fffff5200065df54 R12: ffff8880785ad100 [ 244.909361][ T9551] R13: ffff888021ab7fe0 R14: 0000000080001e80 R15: ffff888027c4c0a0 [ 244.917386][ T9551] FS: 00007f44319f66c0(0000) GS:ffff88812539c000(0000) knlGS:0000000000000000 [ 244.926351][ T9551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.932941][ T9551] CR2: 00007f44319f5ff8 CR3: 000000003621a000 CR4: 00000000003526f0 [ 244.940959][ T9551] Call Trace: [ 244.944248][ T9551] [ 244.947221][ T9551] ? __init_swait_queue_head+0xa9/0x150 [ 244.952773][ T9551] usb_start_wait_urb+0x13f/0x5b0 [ 244.958226][ T9551] ? rcu_is_watching+0x15/0xb0 [ 244.962995][ T9551] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 244.968572][ T9551] ? trace_kmalloc+0x2a/0xf0 [ 244.973177][ T9551] usb_control_msg+0x234/0x3e0 [ 244.977988][ T9551] dib0700_i2c_xfer+0xbb2/0xf80 [ 244.982879][ T9551] __i2c_transfer+0x79a/0x1f70 [ 244.987664][ T9551] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.993473][ T9551] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.999317][ T9551] ? i2c_transfer+0xc8/0x2d0 [ 245.003901][ T9551] i2c_transfer+0x1cc/0x2d0 [ 245.008447][ T9551] i2cdev_ioctl_rdwr+0x460/0x740 [ 245.013393][ T9551] i2cdev_ioctl+0x6a5/0x880 [ 245.017903][ T9551] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 245.022918][ T9551] ? __fget_files+0x3a0/0x420 [ 245.027620][ T9551] ? __fget_files+0x2a/0x420 [ 245.032215][ T9551] ? bpf_lsm_file_ioctl+0x9/0x20 [ 245.037203][ T9551] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 245.042234][ T9551] __se_sys_ioctl+0xfc/0x170 [ 245.046903][ T9551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.052988][ T9551] do_syscall_64+0x174/0x580 [ 245.057620][ T9551] ? trace_irq_disable+0x3b/0x140 [ 245.062638][ T9551] ? clear_bhb_loop+0x40/0x90 [ 245.064476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.067338][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.081447][ T9551] RIP: 0033:0x7f443379ce59 [ 245.085919][ T9551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.105581][ T9551] RSP: 002b:00007f44319f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.114002][ T9551] RAX: ffffffffffffffda RBX: 00007f4433a16090 RCX: 00007f443379ce59 [ 245.122353][ T9551] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000006 [ 245.130473][ T9551] RBP: 00007f4433832d6f R08: 0000000000000000 R09: 0000000000000000 [ 245.138507][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.146515][ T9551] R13: 00007f4433a16128 R14: 00007f4433a16090 R15: 00007f4433b3fa48 [ 245.154543][ T9551] [ 245.157579][ T9551] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 245.164863][ T9551] CPU: 1 UID: 0 PID: 9551 Comm: syz.5.1182 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.175718][ T9551] Tainted: [L]=SOFTLOCKUP [ 245.180052][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.190113][ T9551] Call Trace: [ 245.193395][ T9551] [ 245.196334][ T9551] vpanic+0x56c/0xa60 [ 245.200329][ T9551] ? __pfx__printk+0x10/0x10 [ 245.204933][ T9551] ? __pfx_vpanic+0x10/0x10 [ 245.209448][ T9551] ? is_bpf_text_address+0x292/0x2b0 [ 245.214741][ T9551] ? is_bpf_text_address+0x26/0x2b0 [ 245.219959][ T9551] panic+0xc5/0xd0 [ 245.223696][ T9551] ? __pfx_panic+0x10/0x10 [ 245.228140][ T9551] __warn+0x315/0x4c0 [ 245.232131][ T9551] ? usb_submit_urb+0x1053/0x18b0 [ 245.237169][ T9551] ? usb_submit_urb+0x1053/0x18b0 [ 245.242208][ T9551] __report_bug+0x29a/0x540 [ 245.246724][ T9551] ? usb_submit_urb+0x1053/0x18b0 [ 245.251773][ T9551] ? __pfx___report_bug+0x10/0x10 [ 245.256833][ T9551] ? lockdep_hardirqs_on+0x7a/0x110 [ 245.262040][ T9551] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 245.267869][ T9551] report_bug_entry+0x19a/0x290 [ 245.272727][ T9551] ? usb_submit_urb+0x1115/0x18b0 [ 245.277760][ T9551] ? usb_submit_urb+0x111a/0x18b0 [ 245.282795][ T9551] handle_bug+0xce/0x200 [ 245.287045][ T9551] exc_invalid_op+0x1a/0x50 [ 245.291538][ T9551] asm_exc_invalid_op+0x1a/0x20 [ 245.296376][ T9551] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 245.302008][ T9551] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 245.321618][ T9551] RSP: 0018:ffffc900032ef948 EFLAGS: 00010246 [ 245.327684][ T9551] RAX: 0000000000000000 RBX: ffff88802a4b4f00 RCX: 0000000080001e80 [ 245.335647][ T9551] RDX: ffff888027c4c0a0 RSI: ffffffff8c80c2e0 RDI: ffffffff903d96e0 [ 245.343620][ T9551] RBP: 1ffff11004356ffc R08: 00000000000000c0 R09: 0000000000000000 [ 245.351588][ T9551] R10: ffffc900032efa40 R11: fffff5200065df54 R12: ffff8880785ad100 [ 245.359554][ T9551] R13: ffff888021ab7fe0 R14: 0000000080001e80 R15: ffff888027c4c0a0 [ 245.367533][ T9551] ? usb_submit_urb+0x10a4/0x18b0 [ 245.372557][ T9551] ? __init_swait_queue_head+0xa9/0x150 [ 245.378109][ T9551] usb_start_wait_urb+0x13f/0x5b0 [ 245.383126][ T9551] ? rcu_is_watching+0x15/0xb0 [ 245.387890][ T9551] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 245.393428][ T9551] ? trace_kmalloc+0x2a/0xf0 [ 245.398024][ T9551] usb_control_msg+0x234/0x3e0 [ 245.402788][ T9551] dib0700_i2c_xfer+0xbb2/0xf80 [ 245.407643][ T9551] __i2c_transfer+0x79a/0x1f70 [ 245.412397][ T9551] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 245.418198][ T9551] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 245.423995][ T9551] ? i2c_transfer+0xc8/0x2d0 [ 245.428574][ T9551] i2c_transfer+0x1cc/0x2d0 [ 245.433068][ T9551] i2cdev_ioctl_rdwr+0x460/0x740 [ 245.437999][ T9551] i2cdev_ioctl+0x6a5/0x880 [ 245.442488][ T9551] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 245.447508][ T9551] ? __fget_files+0x3a0/0x420 [ 245.452178][ T9551] ? __fget_files+0x2a/0x420 [ 245.456757][ T9551] ? bpf_lsm_file_ioctl+0x9/0x20 [ 245.461688][ T9551] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 245.466697][ T9551] __se_sys_ioctl+0xfc/0x170 [ 245.471276][ T9551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.477326][ T9551] do_syscall_64+0x174/0x580 [ 245.481922][ T9551] ? trace_irq_disable+0x3b/0x140 [ 245.486934][ T9551] ? clear_bhb_loop+0x40/0x90 [ 245.491604][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.497485][ T9551] RIP: 0033:0x7f443379ce59 [ 245.501887][ T9551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.521479][ T9551] RSP: 002b:00007f44319f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.529885][ T9551] RAX: ffffffffffffffda RBX: 00007f4433a16090 RCX: 00007f443379ce59 [ 245.537841][ T9551] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000006 [ 245.545796][ T9551] RBP: 00007f4433832d6f R08: 0000000000000000 R09: 0000000000000000 [ 245.553758][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.561717][ T9551] R13: 00007f4433a16128 R14: 00007f4433a16090 R15: 00007f4433b3fa48 [ 245.569692][ T9551] [ 245.572960][ T9551] Kernel Offset: disabled [ 245.577296][ T9551] Rebooting in 86400 seconds..