last executing test programs: 30.207172944s ago: executing program 2 (id=3468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x200003}}}}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffe6, 0xb}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x5, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 29.004939524s ago: executing program 2 (id=3471): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001400)="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", 0x36a}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487", 0xc}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 27.685793726s ago: executing program 2 (id=3476): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 27.225798733s ago: executing program 2 (id=3479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x8, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001dc0)={0x8c, 0x0, 0x20000}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 26.292248387s ago: executing program 2 (id=3484): r0 = semget$private(0x0, 0x7, 0x191) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x106) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2014050, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0) 25.833565602s ago: executing program 0 (id=3489): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) 25.622760148s ago: executing program 0 (id=3490): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="91f8a9849519def28691bbc4173c3d6f357de68907e50e997fc26e4c91ea4feb931647fc5393de1f0000000000002c847ecfbcfa0a026a6f96a4ffd844b1252fa8332e469c6b1aafc08e0e632da389ba8899e94ce0216d23bec00ff251e11ba4e19e7fe33f6d7635fbf6f16f1f0a381d1e3219c1cfa013b391b6623f164f55a0a33902f0c938d626905f8cd1fba51334c16b150281addd9ae74a51c0572bfcc1af96ea1177e68f6f60136d777fb081848b4eddb2ede3cd121b0a5630932fdbce2a202e9ad400bf330b68344c8eda3e9fcbe42abb4486553d2e3e6c6b62650eedfc021896346567b68ee468501d5174cd4febc162dd79ef058d6e6ac11d1dc8d3d06498d64ba74b1846c2abfb704cae1af98a3eb2dd6f414e350b1c25fb4571d1670499461260284142405ba6e49bdc94821f2f52a6f45e6189022f76", 0x13c}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce", 0xad}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648d", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000040)="7542473782798be019c27ed3", 0xc}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac448a37a5347342781c320dd5dcb867490334b723", 0x6c}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 24.463800993s ago: executing program 0 (id=3494): bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af"}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 23.633811429s ago: executing program 0 (id=3495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c0ff000000000ff840000000000000003125ce882cbf490d908f1523f000000000000", 0x2e}], 0x1}, 0x4005) 23.482291648s ago: executing program 2 (id=3497): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4140aecd, 0x0) 21.327534152s ago: executing program 0 (id=3504): bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af"}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 20.951159659s ago: executing program 4 (id=3505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0x8, 0x0) io_pgetevents(r5, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(r5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000140)) 18.096372072s ago: executing program 3 (id=3512): r0 = semget$private(0x0, 0x7, 0x191) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x106) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2014050, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0) 17.679192485s ago: executing program 0 (id=3513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c0ff000000000ff840000000000000003125ce882cbf490d908f1523f000000000000", 0x2e}], 0x1}, 0x4005) 17.322012245s ago: executing program 4 (id=3515): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x48043) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000140)=0x80000001, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 17.24564398s ago: executing program 3 (id=3516): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc4, 0x0, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r0, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="070002807235ab000c0007000001"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 16.384285212s ago: executing program 4 (id=3518): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x3, 0x8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x3873, 0x6, 0x2, 0x9}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 14.491899544s ago: executing program 3 (id=3519): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="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", 0x13c}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f800"/202, 0xca}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648d", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000040)="7542473782798be019c27ed3", 0xc}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac448a37a5347342781c320dd5dcb867490334b723", 0x6c}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12.92121305s ago: executing program 3 (id=3521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0f", 0xb1}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.131594242s ago: executing program 1 (id=3523): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ftruncate(0xffffffffffffffff, 0x2007ffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) 10.977306713s ago: executing program 1 (id=3524): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 9.40704451s ago: executing program 1 (id=3525): r0 = semget$private(0x0, 0x7, 0x191) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x106) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2014050, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0) 8.481751452s ago: executing program 1 (id=3526): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001400)="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", 0x36a}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487", 0xc}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.628156087s ago: executing program 32 (id=3513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c0ff000000000ff840000000000000003125ce882cbf490d908f1523f000000000000", 0x2e}], 0x1}, 0x4005) 2.398785497s ago: executing program 4 (id=3528): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000dc0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)="3599e95720f34e2f35527f68a8807e45206c336a1df7314f4042db703d25bb5312943490dc482149505006f469dfd72981349715e9c181a8a5efc4d7878f76f4ca03c4a57d52456184ffd03a82b11dd769d9f50a78235578b473e82237da105b1a1a2e67ba2d8b3b9e8d5f50d2a535e8a01e30f17cf9cd882eb9f0baa7eb74a176b3", 0x82}], 0x1, &(0x7f00000009c0)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) 2.294042037s ago: executing program 3 (id=3529): io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, 0xffffffffffffffff, &(0x7f0000000140)="e5ed6dd8c28ce374a9991b119a575f82eeb4fe0366c48f49b5830beb2fe516e43c4065ad72d51fd2a19955be74d9c74a0764681b66812090e2f5a9cc0a678964a8bd877b7b301df8a0071a3db4745dc889d6c158b9ebc3cdc8e45af26ab43790af545d10b3a7ae7c02d062d574a028c98f5a44d44ca85bb095349418f5ffcc55ebb900eea47dd463b8e1a83eb06117", 0x8f, 0x8, 0x0, 0x2}]) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 2.274421801s ago: executing program 1 (id=3530): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000000)={0x8000004, 0x6, "e22e845e3ede57135adc514d00000000001af2bb6b1543835f00", 0x0, 0x4, 0x8000, 0x9, 0x10}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x0) 2.059348677s ago: executing program 4 (id=3531): r0 = semget$private(0x0, 0x7, 0x191) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x106) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2014050, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0) 319.473458ms ago: executing program 4 (id=3532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003900)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 82.764825ms ago: executing program 1 (id=3533): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xf8, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 3 (id=3534): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) kernel console output (not intermixed with test programs): 437.549615][ T5857] usb 2-1: config 0 interface 41 has no altsetting 0 [ 437.552181][ T5857] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 437.552210][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.552229][ T5857] usb 2-1: Product: syz [ 437.552242][ T5857] usb 2-1: Manufacturer: syz [ 437.552256][ T5857] usb 2-1: SerialNumber: syz [ 437.560306][ T5857] usb 2-1: config 0 descriptor?? [ 437.584272][ T5857] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 437.711052][T12064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 440.077365][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 440.350278][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.350347][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.427627][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 441.000090][ T5884] usb 2-1: USB disconnect, device number 62 [ 441.313579][ T9] usb 1-1: config 0 has no interfaces? [ 441.313614][ T9] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 441.313635][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.326366][ T9] usb 1-1: config 0 descriptor?? [ 442.750212][T12130] fuse: Unknown parameter '0x0000000000000003' [ 442.784102][ T5870] usb 1-1: USB disconnect, device number 36 [ 445.890934][T12163] fuse: Unknown parameter '0x0000000000000003' [ 446.845756][T12177] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 446.845777][T12177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2367'. [ 447.767641][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 451.350847][T12227] fuse: Unknown parameter '0x0000000000000003' [ 455.472157][T12266] fuse: Unknown parameter '0x0000000000000003' [ 456.799704][T12276] fuse: Bad value for 'fd' [ 459.028180][T12303] fuse: Unknown parameter '0x0000000000000003' [ 459.162757][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 460.285539][T12313] fuse: Bad value for 'fd' [ 461.108251][T12321] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 462.177923][T12332] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 464.446967][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2427'. [ 468.892700][T12350] syzkaller0: entered promiscuous mode [ 468.892725][T12350] syzkaller0: entered allmulticast mode [ 471.512665][T11651] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 471.512744][T11651] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 471.547054][ T10] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 471.547130][ T10] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 471.562415][T11651] usb 3-1: USB disconnect, device number 62 [ 471.663468][T12389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2444'. [ 471.695467][ T10] usb 5-1: USB disconnect, device number 52 [ 473.081940][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 473.566754][ T10] usb 5-1: device descriptor read/64, error -71 [ 474.977435][T11651] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 475.360481][T11651] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.360509][T11651] usb 1-1: config 0 has no interface number 0 [ 475.363320][T11651] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 475.363348][T11651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.363367][T11651] usb 1-1: Product: syz [ 475.363380][T11651] usb 1-1: Manufacturer: syz [ 475.363394][T11651] usb 1-1: SerialNumber: syz [ 475.844770][T11651] usb 1-1: config 0 descriptor?? [ 476.105162][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2457'. [ 476.179572][T11651] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 476.183246][T11651] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 476.183269][T11651] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 478.427358][ T810] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 479.490382][ T810] usb 2-1: device descriptor read/64, error -71 [ 480.307360][ T810] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 480.437454][ T810] usb 2-1: device descriptor read/64, error -71 [ 480.591341][ T810] usb usb2-port1: attempt power cycle [ 480.729430][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 480.877360][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 480.880007][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.880037][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.883742][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.883769][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.883787][ T9] usb 5-1: Product: syz [ 480.883801][ T9] usb 5-1: Manufacturer: syz [ 480.883815][ T9] usb 5-1: SerialNumber: syz [ 481.828259][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'. [ 482.022689][ T9] usb 5-1: 0:2 : does not exist [ 482.036115][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 482.115004][ T9] usb 5-1: USB disconnect, device number 55 [ 482.163190][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.757361][ T5913] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 486.813799][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 486.813834][ T5913] usb 2-1: can't read configurations, error -71 [ 486.903600][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2483'. [ 486.918306][T12516] loop5: detected capacity change from 0 to 7 [ 487.025772][ T5941] Dev loop5: unable to read RDB block 7 [ 487.025823][ T5941] loop5: unable to read partition table [ 487.026063][ T5941] loop5: partition table beyond EOD, truncated [ 487.038828][T12516] Dev loop5: unable to read RDB block 7 [ 487.038878][T12516] loop5: unable to read partition table [ 487.039113][T12516] loop5: partition table beyond EOD, truncated [ 487.039130][T12516] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 487.472536][T12539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2487'. [ 487.472565][T12539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2487'. [ 487.486589][T12539] syzkaller0: entered promiscuous mode [ 487.486613][T12539] syzkaller0: entered allmulticast mode [ 487.516464][T12539] 0: reclassify loop, rule prio 0, protocol 800 [ 488.938825][ T9] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 489.899079][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.899106][ T9] usb 3-1: config 0 has no interfaces? [ 489.906531][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.906559][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.906576][ T9] usb 3-1: Product: syz [ 489.906589][ T9] usb 3-1: Manufacturer: syz [ 489.906602][ T9] usb 3-1: SerialNumber: syz [ 489.961765][ T9] usb 3-1: config 0 descriptor?? [ 490.981506][T12574] syzkaller0: entered promiscuous mode [ 490.981531][T12574] syzkaller0: entered allmulticast mode [ 491.114234][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 491.138026][T12579] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2504'. [ 491.257422][ T5913] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 491.267681][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 491.286332][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 491.286359][ T9] usb 5-1: config 0 has no interface number 0 [ 491.286402][ T9] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 491.286424][ T9] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 491.329253][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 491.329283][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.329302][ T9] usb 5-1: Product: syz [ 491.329315][ T9] usb 5-1: Manufacturer: syz [ 491.329328][ T9] usb 5-1: SerialNumber: syz [ 491.369912][ T9] usb 5-1: config 0 descriptor?? [ 491.375648][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 491.407350][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 491.411849][ T5913] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 491.411873][ T5913] usb 2-1: config 0 has no interface number 0 [ 491.412153][ T5913] usb 2-1: config 0 interface 89 has no altsetting 0 [ 491.415965][ T5913] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 491.415992][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.416011][ T5913] usb 2-1: Product: syz [ 491.416025][ T5913] usb 2-1: Manufacturer: syz [ 491.416247][ T5913] usb 2-1: SerialNumber: syz [ 491.490932][ T5913] usb 2-1: config 0 descriptor?? [ 491.511404][ T5913] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 491.511439][ T5913] em28xx 2-1:0.89: Video interface 89 found: bulk [ 491.575004][ T9] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 491.575409][ T9] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 491.789125][ T9] usb 5-1: USB disconnect, device number 56 [ 491.931961][ T5804] usb 3-1: USB disconnect, device number 63 [ 492.685930][ T5913] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 493.106599][ T5913] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 493.106633][ T5913] em28xx 2-1:0.89: board has no eeprom [ 493.930634][ T5913] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 493.930665][ T5913] em28xx 2-1:0.89: analog set to bulk mode. [ 493.935353][ T9] em28xx 2-1:0.89: Registering V4L2 extension [ 494.377009][T12613] syzkaller0: entered promiscuous mode [ 494.377036][T12613] syzkaller0: entered allmulticast mode [ 494.569329][ T810] usb 2-1: USB disconnect, device number 68 [ 494.571514][ T810] em28xx 2-1:0.89: Disconnecting em28xx [ 494.601546][T12614] tipc: Enabled bearer , priority 0 [ 494.618808][T12613] tipc: Resetting bearer [ 494.624493][ T9] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 494.624517][ T9] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 494.624530][ T9] em28xx 2-1:0.89: No AC97 audio processor [ 494.637682][ T9] usb 2-1: Decoder not found [ 494.637700][ T9] em28xx 2-1:0.89: failed to create media graph [ 494.637727][ T9] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 494.646780][ T9] em28xx 2-1:0.89: Registering snapshot button... [ 494.659747][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input37 [ 494.687715][T12613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.687751][T12613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.737286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.740472][ T9] em28xx 2-1:0.89: Remote control support is not available for this card. [ 494.740524][ T810] em28xx 2-1:0.89: Closing input extension [ 494.740546][ T810] em28xx 2-1:0.89: Deregistering snapshot button [ 494.744581][T12618] fuse: Bad value for 'group_id' [ 494.744598][T12618] fuse: Bad value for 'group_id' [ 494.757633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.775562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.802726][T12612] tipc: Resetting bearer [ 494.920805][ T37] audit: type=1326 audit(1772173852.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12623 comm="syz.4.2521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb806b6c799 code=0x0 [ 494.966331][ T810] em28xx 2-1:0.89: Freeing device [ 495.364094][T12612] tipc: Disabling bearer [ 495.710995][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'. [ 496.951185][T12653] fuse: Bad value for 'group_id' [ 496.951205][T12653] fuse: Bad value for 'group_id' [ 497.149165][T12662] syzkaller0: entered promiscuous mode [ 497.149190][T12662] syzkaller0: entered allmulticast mode [ 497.277371][ T5804] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 497.281765][T12667] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2533'. [ 497.429974][ T5804] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 497.430001][ T5804] usb 5-1: config 0 has no interface number 0 [ 497.430054][ T5804] usb 5-1: config 0 interface 41 has no altsetting 0 [ 497.432374][ T5804] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 497.432390][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.432400][ T5804] usb 5-1: Product: syz [ 497.432408][ T5804] usb 5-1: Manufacturer: syz [ 497.432415][ T5804] usb 5-1: SerialNumber: syz [ 497.498767][ T5804] usb 5-1: config 0 descriptor?? [ 497.784489][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 498.114742][ T5804] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 498.409846][T12691] fuse: Bad value for 'group_id' [ 498.409867][T12691] fuse: Bad value for 'group_id' [ 499.741939][ T5804] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 499.757736][T12707] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2545'. [ 499.900796][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 499.915435][ T5804] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 499.915463][ T5804] usb 2-1: config 0 has no interface number 0 [ 499.915506][ T5804] usb 2-1: config 0 interface 89 has no altsetting 0 [ 499.918629][ T5804] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 499.918663][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.918673][ T5804] usb 2-1: Product: syz [ 499.918681][ T5804] usb 2-1: Manufacturer: syz [ 499.918688][ T5804] usb 2-1: SerialNumber: syz [ 499.970324][ T5804] usb 2-1: config 0 descriptor?? [ 500.059355][ T5804] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 500.059392][ T5804] em28xx 2-1:0.89: Video interface 89 found: bulk [ 500.271913][ T809] usb 5-1: USB disconnect, device number 57 [ 500.661119][ T5804] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 500.847159][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'. [ 501.158787][ T810] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 502.478047][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.478104][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.506521][ T810] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.506546][ T810] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.518765][ T5804] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 502.518794][ T5804] em28xx 2-1:0.89: board has no eeprom [ 502.542646][ T810] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 502.542682][ T810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 502.542699][ T810] usb 5-1: SerialNumber: syz [ 502.587641][ T5804] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 502.587670][ T5804] em28xx 2-1:0.89: analog set to bulk mode. [ 502.589381][ T809] em28xx 2-1:0.89: Registering V4L2 extension [ 502.765467][ T5804] usb 2-1: USB disconnect, device number 69 [ 502.792477][ T810] usb 5-1: 0:2 : does not exist [ 502.804337][T12741] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2557'. [ 502.818269][ T809] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 502.818383][ T809] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 502.818495][ T809] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-19) [ 502.818600][ T809] em28xx 2-1:0.89: reading from i2c device at 0x40 failed (error=-19) [ 502.818675][ T809] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 502.818747][ T809] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 502.818760][ T809] em28xx 2-1:0.89: No AC97 audio processor [ 502.837606][ T809] usb 2-1: Decoder not found [ 502.837624][ T809] em28xx 2-1:0.89: failed to create media graph [ 502.837652][ T809] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 503.058225][ T5804] em28xx 2-1:0.89: Disconnecting em28xx [ 503.077384][ T809] em28xx 2-1:0.89: Registering snapshot button... [ 503.094982][ T809] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input38 [ 503.120107][ T809] em28xx 2-1:0.89: Remote control support is not available for this card. [ 503.120162][ T5804] em28xx 2-1:0.89: Closing input extension [ 503.120183][ T5804] em28xx 2-1:0.89: Deregistering snapshot button [ 503.164189][ T810] usb 5-1: USB disconnect, device number 58 [ 503.275892][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.278435][ T5804] em28xx 2-1:0.89: Freeing device [ 504.360110][T12748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.379603][T12748] bond0: (slave rose0): Enslaving as an active interface with an up link [ 505.777317][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 506.717303][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 506.721583][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.721614][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.721635][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 506.721674][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 506.721696][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.799129][ T9] usb 5-1: config 0 descriptor?? [ 507.448983][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 507.449102][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 507.482620][ T9] usb 5-1: USB disconnect, device number 59 [ 507.620653][T12824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.829735][T12845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 511.179602][T12859] syz.2.2582 (12859): drop_caches: 2 [ 513.108888][ T5804] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 513.268652][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 513.271176][ T5804] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 513.271202][ T5804] usb 5-1: config 0 has no interface number 0 [ 513.274041][ T5804] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 513.274067][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.274086][ T5804] usb 5-1: Product: syz [ 513.274099][ T5804] usb 5-1: Manufacturer: syz [ 513.274113][ T5804] usb 5-1: SerialNumber: syz [ 513.284969][ T5804] usb 5-1: config 0 descriptor?? [ 513.305761][ T5804] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 513.590246][ T5804] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 513.605488][ T5804] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 513.857970][T12890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.775862][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 514.799099][ T5884] usb 5-1: USB disconnect, device number 60 [ 514.891472][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 514.915266][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 514.925558][ T5884] quatech2 5-1:0.51: device disconnected [ 515.322932][ T5804] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 515.487749][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 516.004947][ T5804] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.004974][ T5804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.028381][ T5804] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.028410][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.028430][ T5804] usb 3-1: Product: syz [ 516.028444][ T5804] usb 3-1: Manufacturer: syz [ 516.028457][ T5804] usb 3-1: SerialNumber: syz [ 516.297620][ T5804] usb 3-1: 0:2 : does not exist [ 516.337601][ T5804] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 516.431789][T12923] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2596'. [ 516.480891][T12919] fuse: Bad value for 'group_id' [ 516.480910][T12919] fuse: Bad value for 'group_id' [ 516.596954][ T5804] usb 3-1: USB disconnect, device number 64 [ 516.689126][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.759597][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 516.947100][T12931] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 517.867348][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.867375][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.870539][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 517.870566][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 517.870585][ T10] usb 5-1: SerialNumber: syz [ 518.261598][ T10] usb 5-1: 0:2 : does not exist [ 518.391771][T12943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.017896][ T10] usb 5-1: USB disconnect, device number 61 [ 519.105317][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.407366][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 519.568636][T12956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2608'. [ 519.588270][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 519.590176][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.590199][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.592282][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.592303][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.592314][ T10] usb 3-1: Product: syz [ 519.592321][ T10] usb 3-1: Manufacturer: syz [ 519.592328][ T10] usb 3-1: SerialNumber: syz [ 519.713951][T12960] syzkaller0: entered promiscuous mode [ 519.713968][T12960] syzkaller0: entered allmulticast mode [ 519.803049][ T10] usb 3-1: 0:2 : does not exist [ 519.842128][ T10] usb 3-1: USB disconnect, device number 65 [ 519.878955][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.440469][ T810] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 521.589203][ T810] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 521.591439][ T810] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 521.591461][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.591471][ T810] usb 3-1: Product: syz [ 521.591478][ T810] usb 3-1: Manufacturer: syz [ 521.591485][ T810] usb 3-1: SerialNumber: syz [ 521.597969][ T810] usb 3-1: config 0 descriptor?? [ 521.863669][ T10] usb 3-1: USB disconnect, device number 66 [ 522.365072][T12984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.353067][T12992] syzkaller0: entered promiscuous mode [ 523.353093][T12992] syzkaller0: entered allmulticast mode [ 524.172271][ T5884] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 524.465397][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 524.695354][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.695380][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.716415][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.716444][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.716464][ T5884] usb 2-1: Product: syz [ 524.716478][ T5884] usb 2-1: Manufacturer: syz [ 524.716493][ T5884] usb 2-1: SerialNumber: syz [ 524.970760][ T5884] usb 2-1: 0:2 : does not exist [ 525.025692][ T5884] usb 2-1: USB disconnect, device number 70 [ 525.065283][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.693393][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'. [ 527.753616][T13044] syzkaller0: entered promiscuous mode [ 527.753642][T13044] syzkaller0: entered allmulticast mode [ 529.241968][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 529.246290][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 529.279762][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 529.283871][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 529.327029][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 529.356632][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61000000000 [ 529.546244][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61300000000 [ 529.562690][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61600000000 [ 529.583060][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61900000000 [ 529.590923][T13055] kvm: kvm [13054]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61c00000000 [ 529.797335][ T5884] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 529.887341][ T5804] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 529.950001][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 529.952334][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.952357][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.954877][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.954904][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.954923][ T5884] usb 2-1: Product: syz [ 529.954937][ T5884] usb 2-1: Manufacturer: syz [ 529.954950][ T5884] usb 2-1: SerialNumber: syz [ 530.047700][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 530.049550][ T5804] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 530.049573][ T5804] usb 5-1: config 0 has no interface number 0 [ 530.051954][ T5804] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 530.051971][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.051981][ T5804] usb 5-1: Product: syz [ 530.052022][ T5804] usb 5-1: Manufacturer: syz [ 530.052030][ T5804] usb 5-1: SerialNumber: syz [ 530.059842][ T5804] usb 5-1: config 0 descriptor?? [ 530.123442][ T5804] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 530.157369][ T31] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 530.183272][ T5884] usb 2-1: 0:2 : does not exist [ 530.289477][ T5884] usb 2-1: USB disconnect, device number 71 [ 530.309934][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 530.311961][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.312011][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.312090][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 530.312111][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 530.312133][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.313300][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 530.313326][ T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 530.313400][ T31] usb 3-1: Manufacturer: syz [ 530.344069][ T31] usb 3-1: config 0 descriptor?? [ 530.364434][ T5804] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 530.423802][ T5804] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 530.451859][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.647341][ T31] rc_core: IR keymap rc-hauppauge not found [ 530.647357][ T31] Registered IR keymap rc-empty [ 530.647487][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.676859][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.688954][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 530.691529][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 530.702481][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.717409][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.724367][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 530.725727][ T5884] usb 5-1: USB disconnect, device number 62 [ 530.737767][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.753139][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 530.757581][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.777846][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.781015][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 530.790212][ T5884] quatech2 5-1:0.51: device disconnected [ 530.797888][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.818126][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.845169][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.858411][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.879324][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.919015][ T31] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 530.919411][ T31] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 531.101454][ T5884] usb 3-1: USB disconnect, device number 67 [ 531.277341][ T31] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 532.110674][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.110745][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.374361][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 532.374392][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 532.374410][ T31] usb 2-1: SerialNumber: syz [ 532.621169][ T31] usb 2-1: 0:2 : does not exist [ 532.681104][ T31] usb 2-1: USB disconnect, device number 72 [ 532.716192][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.759427][T13124] syzkaller0: entered promiscuous mode [ 534.759453][T13124] syzkaller0: entered allmulticast mode [ 535.046282][T13130] fuse: Unknown parameter 'use00000000000000000000' [ 536.500549][T13147] syzkaller0: entered promiscuous mode [ 536.500565][T13147] syzkaller0: entered allmulticast mode [ 536.590464][T13148] tipc: Started in network mode [ 536.590495][T13148] tipc: Node identity 1a7813a1a9fc, cluster identity 4711 [ 536.594873][T13148] tipc: Enabled bearer , priority 0 [ 536.638988][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 536.640600][T13146] tipc: Resetting bearer [ 537.031916][T13159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.343424][T11651] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 538.343508][T11651] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 538.372559][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 538.390927][T13146] tipc: Disabling bearer [ 538.395715][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 538.395742][ T10] usb 3-1: config 0 has no interface number 0 [ 538.395786][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [ 538.396167][T11651] usb 1-1: USB disconnect, device number 37 [ 538.430183][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 538.430215][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.430234][ T10] usb 3-1: Product: syz [ 538.430248][ T10] usb 3-1: Manufacturer: syz [ 538.430262][ T10] usb 3-1: SerialNumber: syz [ 538.438912][ T10] usb 3-1: config 0 descriptor?? [ 538.450975][ T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 538.451010][ T10] em28xx 3-1:0.89: Video interface 89 found: bulk [ 538.633473][T13167] fuse: Unknown parameter 'user_i00000000000000000000' [ 538.746320][ T31] tipc: Node number set to 3011777441 [ 539.540027][ T10] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 540.716017][ T10] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 540.716037][ T10] em28xx 3-1:0.89: board has no eeprom [ 540.781600][ T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 540.781629][ T10] em28xx 3-1:0.89: analog set to bulk mode. [ 540.791139][ T6039] em28xx 3-1:0.89: Registering V4L2 extension [ 540.803757][T13201] fuse: Unknown parameter 'user_i00000000000000000000' [ 540.849101][ T10] usb 3-1: USB disconnect, device number 68 [ 540.850417][ T10] em28xx 3-1:0.89: Disconnecting em28xx [ 540.913412][T13203] syzkaller0: entered promiscuous mode [ 540.913436][T13203] syzkaller0: entered allmulticast mode [ 540.962485][ T6039] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 540.962508][ T6039] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 540.962521][ T6039] em28xx 3-1:0.89: No AC97 audio processor [ 541.053243][ T6039] usb 3-1: Decoder not found [ 541.053262][ T6039] em28xx 3-1:0.89: failed to create media graph [ 541.053288][ T6039] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 541.071038][ T6039] em28xx 3-1:0.89: Registering snapshot button... [ 541.073307][ T6039] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input40 [ 541.112404][ T6039] em28xx 3-1:0.89: Remote control support is not available for this card. [ 541.115171][ T10] em28xx 3-1:0.89: Closing input extension [ 541.115196][ T10] em28xx 3-1:0.89: Deregistering snapshot button [ 541.175051][T13206] tipc: Enabled bearer , priority 0 [ 541.225781][T13199] tipc: Resetting bearer [ 541.276788][ T10] em28xx 3-1:0.89: Freeing device [ 541.439880][T13199] tipc: Disabling bearer [ 542.598284][T13237] fuse: Unknown parameter 'user_i00000000000000000000' [ 542.757304][ T6039] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 543.737337][ T6039] usb 2-1: Using ep0 maxpacket: 32 [ 543.741198][ T6039] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 543.741225][ T6039] usb 2-1: config 0 has no interface number 0 [ 543.741269][ T6039] usb 2-1: config 0 interface 89 has no altsetting 0 [ 543.743859][ T6039] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 543.743886][ T6039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.743905][ T6039] usb 2-1: Product: syz [ 543.743919][ T6039] usb 2-1: Manufacturer: syz [ 543.743933][ T6039] usb 2-1: SerialNumber: syz [ 543.859416][ T6039] usb 2-1: config 0 descriptor?? [ 543.880857][ T6039] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 543.880879][ T6039] em28xx 2-1:0.89: Video interface 89 found: bulk [ 544.481236][ T6039] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 545.890256][ T6039] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 545.890294][ T6039] em28xx 2-1:0.89: board has no eeprom [ 545.952150][ T6039] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 545.952180][ T6039] em28xx 2-1:0.89: analog set to bulk mode. [ 545.953504][ T10] em28xx 2-1:0.89: Registering V4L2 extension [ 545.987761][T13272] syzkaller0: entered promiscuous mode [ 545.987787][T13272] syzkaller0: entered allmulticast mode [ 545.989828][ T6039] usb 2-1: USB disconnect, device number 73 [ 545.992033][ T6039] em28xx 2-1:0.89: Disconnecting em28xx [ 546.017895][T13277] fuse: Unknown parameter 'user_id00000000000000000000' [ 547.034689][ T10] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 547.034713][ T10] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 547.034726][ T10] em28xx 2-1:0.89: No AC97 audio processor [ 547.051504][ T10] usb 2-1: Decoder not found [ 547.051523][ T10] em28xx 2-1:0.89: failed to create media graph [ 547.051551][ T10] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 547.063980][ T10] em28xx 2-1:0.89: Registering snapshot button... [ 547.066602][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input41 [ 547.071242][ T10] em28xx 2-1:0.89: Remote control support is not available for this card. [ 547.071299][ T6039] em28xx 2-1:0.89: Closing input extension [ 547.071321][ T6039] em28xx 2-1:0.89: Deregistering snapshot button [ 547.543543][ T6039] em28xx 2-1:0.89: Freeing device [ 547.693449][T13300] Bluetooth: hci0: invalid len left 7, exp >= 86 [ 547.837311][ T5870] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 547.941380][T13307] fuse: Unknown parameter 'user_id00000000000000000000' [ 548.001556][ T5870] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 548.001588][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.001608][ T5870] usb 5-1: Product: syz [ 548.001621][ T5870] usb 5-1: Manufacturer: syz [ 548.001634][ T5870] usb 5-1: SerialNumber: syz [ 548.042672][ T5870] usb 5-1: config 0 descriptor?? [ 548.283826][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 548.316793][ T5870] usb 5-1: ignoring: probably an ADSL modem [ 549.227343][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 549.267131][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.267156][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.267168][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.444723][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 549.444750][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.445220][ T5870] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 549.516003][ T5870] usb 5-1: USB disconnect, device number 63 [ 549.612269][ T31] usb 1-1: config 0 descriptor?? [ 550.853799][T13325] Bluetooth: hci0: unsupported parameter 255 [ 550.854800][T13325] Bluetooth: hci0: unsupported parameter 255 [ 550.877473][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 550.877587][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 550.904083][ T31] usb 1-1: USB disconnect, device number 38 [ 551.527406][ T31] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 551.569734][T13336] syzkaller0: entered promiscuous mode [ 551.569761][T13336] syzkaller0: entered allmulticast mode [ 551.599330][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 551.683650][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 551.683676][ T31] usb 5-1: config 0 has no interface number 0 [ 551.686803][ T31] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 551.686830][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.686851][ T31] usb 5-1: Product: syz [ 551.686866][ T31] usb 5-1: Manufacturer: syz [ 551.686879][ T31] usb 5-1: SerialNumber: syz [ 551.747451][ T31] usb 5-1: config 0 descriptor?? [ 551.843813][T13329] syz.1.2731 (13329): drop_caches: 2 [ 551.870402][T13342] fuse: Unknown parameter 'user_id00000000000000000000' [ 551.978643][ T31] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 551.984909][ T31] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 551.985246][ T31] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 551.985307][ T31] usb 5-1: media controller created [ 552.262080][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 552.440448][ T5870] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 553.077798][ T31] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 553.199463][T13356] input: syz0 as /devices/virtual/input/input42 [ 553.234828][ T31] usb 5-1: USB disconnect, device number 64 [ 553.269946][ T5870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 553.269973][ T5870] usb 3-1: config 0 has no interface number 0 [ 553.270048][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 553.270074][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 553.270113][ T5870] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 553.270136][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.356223][ T5870] usb 3-1: config 0 descriptor?? [ 553.356987][T13344] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 554.532560][ T5870] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 555.547805][T13369] syzkaller0: entered promiscuous mode [ 555.547830][T13369] syzkaller0: entered allmulticast mode [ 555.550733][ T5870] usb 3-1: USB disconnect, device number 69 [ 555.596260][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2749'. [ 555.599438][T13378] fuse: Bad value for 'fd' [ 555.620735][T13366] tipc: Enabled bearer , priority 0 [ 555.828851][T13365] tipc: Resetting bearer [ 557.046400][T13382] syz.1.2752 (13382): drop_caches: 2 [ 557.104647][T13365] tipc: Disabling bearer [ 559.087464][T13401] tipc: Enabling of bearer rejected, failed to enable media [ 560.566406][T13418] fuse: Bad value for 'fd' [ 560.618523][T13421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 560.739644][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2765'. [ 561.076405][T13434] fuse: Unknown parameter 'group_id00000000000000000000' [ 563.329394][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.329464][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.672597][T13458] fuse: Bad value for 'fd' [ 565.084223][ T810] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 566.136888][T13475] fuse: Unknown parameter 'group_id00000000000000000000' [ 566.507412][T13473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2778'. [ 567.785958][T13485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 568.022343][ T810] usb 3-1: Using ep0 maxpacket: 16 [ 568.036195][ T810] usb 3-1: device descriptor read/all, error -71 [ 570.170713][T13510] fuse: Unknown parameter 'group_id00000000000000000000' [ 570.864414][T13518] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 570.864437][T13518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2792'. [ 571.267091][T13525] fuse: Invalid rootmode [ 571.847941][T11651] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 572.278948][T11651] usb 5-1: Using ep0 maxpacket: 32 [ 572.283818][T11651] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 572.283848][T11651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.283867][T11651] usb 5-1: Product: syz [ 572.283881][T11651] usb 5-1: Manufacturer: syz [ 572.283895][T11651] usb 5-1: SerialNumber: syz [ 572.324921][T11651] usb 5-1: config 0 descriptor?? [ 572.346907][T11651] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 572.357800][T11651] dvb-usb: bulk message failed: -22 (2/0) [ 572.361955][T11651] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.362712][T11651] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 572.362781][T11651] usb 5-1: media controller created [ 572.393432][T13540] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 572.396436][T13542] fuse: Bad value for 'user_id' [ 572.396453][T13542] fuse: Bad value for 'user_id' [ 572.426426][T11651] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.427350][ T6039] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 572.464358][T11651] usb 5-1: selecting invalid altsetting 7 [ 572.464378][T11651] cxusb: set interface failed [ 572.464391][T11651] dvb-usb: bulk message failed: -22 (1/0) [ 572.524976][T11651] DVB: Unable to find symbol lgdt330x_attach() [ 572.524991][T11651] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 572.551927][T13527] dvb-usb: bulk message failed: -22 (4/0) [ 572.551951][T13527] cxusb: i2c read failed [ 572.581038][ T6039] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 572.581066][ T6039] usb 2-1: config 0 has no interface number 0 [ 572.581108][ T6039] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 572.581133][ T6039] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 572.581172][ T6039] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 572.581194][ T6039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.601890][ T6039] usb 2-1: config 0 descriptor?? [ 572.603164][T13535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 572.669013][ T6039] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 572.697314][T11651] rc_core: IR keymap rc-dvico-portable not found [ 572.697334][T11651] Registered IR keymap rc-empty [ 572.700789][T11651] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 572.703826][T11651] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input43 [ 572.741335][T11651] dvb-usb: schedule remote query interval to 100 msecs. [ 572.741356][T11651] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 572.766981][T11651] usb 5-1: USB disconnect, device number 65 [ 573.566212][T13559] netlink: 'syz.2.2807': attribute type 1 has an invalid length. [ 573.566235][T13559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2807'. [ 573.777308][ T31] usb 2-1: USB disconnect, device number 74 [ 574.502324][T11651] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 574.966398][T13576] fuse: Unknown parameter '0x0000000000000003' [ 575.080661][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'. [ 577.677290][ T810] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 577.775170][T13593] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 577.775170][T13593] program syz.4.2817 not setting count and/or reply_len properly [ 578.337913][ T810] usb 3-1: Using ep0 maxpacket: 32 [ 578.501989][ T810] usb 3-1: device descriptor read/all, error -71 [ 578.578675][T13601] fuse: Unknown parameter '0x0000000000000003' [ 583.968081][T13647] IPv6: NLM_F_REPLACE set, but no existing node found! [ 584.201563][ T31] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 584.339151][ T810] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 584.447421][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 584.456437][ T31] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 584.456467][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.456487][ T31] usb 2-1: Product: syz [ 584.456500][ T31] usb 2-1: Manufacturer: syz [ 584.456515][ T31] usb 2-1: SerialNumber: syz [ 584.464020][ T31] usb 2-1: config 0 descriptor?? [ 584.497945][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2838'. [ 584.532677][ T31] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 584.532728][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 584.547337][ T810] usb 3-1: device descriptor read/64, error -71 [ 584.564850][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 584.577089][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 584.585305][ T31] usb 2-1: media controller created [ 584.611459][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.649506][ T31] usb 2-1: selecting invalid altsetting 7 [ 584.649528][ T31] cxusb: set interface failed [ 584.649541][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 584.657787][ T810] usb usb3-port1: attempt power cycle [ 584.687594][T13645] dvb-usb: bulk message failed: -22 (4/0) [ 584.687615][T13645] cxusb: i2c read failed [ 584.739498][ T31] DVB: Unable to find symbol lgdt330x_attach() [ 584.739512][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 584.927289][ T31] rc_core: IR keymap rc-dvico-portable not found [ 584.927309][ T31] Registered IR keymap rc-empty [ 584.931743][ T31] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 584.961549][ T31] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input44 [ 584.963010][T13669] netlink: 'syz.4.2843': attribute type 2 has an invalid length. [ 584.991459][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 584.991481][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 585.015511][ T31] usb 2-1: USB disconnect, device number 75 [ 585.164819][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 590.607461][ T10] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 590.773364][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.773391][ T10] usb 3-1: config 0 has no interface number 0 [ 590.773443][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 590.773493][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 590.773604][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 590.773629][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.817317][ T810] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 590.860257][ T10] usb 3-1: config 0 descriptor?? [ 590.861306][T13696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 591.228530][ T809] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 591.617755][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 591.636175][ T809] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 591.636206][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.636225][ T809] usb 1-1: Product: syz [ 591.636238][ T809] usb 1-1: Manufacturer: syz [ 591.636251][ T809] usb 1-1: SerialNumber: syz [ 591.676364][ T809] usb 1-1: config 0 descriptor?? [ 591.697937][ T809] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 591.697996][ T809] dvb-usb: bulk message failed: -22 (2/0) [ 591.728112][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 591.757396][ T810] usb 5-1: device descriptor read/64, error -71 [ 591.982503][ T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 591.986101][ T809] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 591.986172][ T809] usb 1-1: media controller created [ 592.004701][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.753992][ T810] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 592.763388][T13717] dvb-usb: bulk message failed: -22 (4/0) [ 592.763410][T13717] cxusb: i2c read failed [ 592.877322][ T810] usb 5-1: device descriptor read/64, error -71 [ 592.932022][ T809] usb 1-1: selecting invalid altsetting 7 [ 592.932105][ T809] cxusb: set interface failed [ 592.932851][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 593.128880][ T810] usb usb5-port1: attempt power cycle [ 593.207322][ T809] DVB: Unable to find symbol lgdt330x_attach() [ 593.207337][ T809] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 593.989744][ T5870] usb 3-1: USB disconnect, device number 75 [ 594.099051][ T810] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 594.117798][ T810] usb 5-1: device descriptor read/8, error -71 [ 594.207393][ T809] rc_core: IR keymap rc-dvico-portable not found [ 594.207412][ T809] Registered IR keymap rc-empty [ 594.211575][ T809] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 594.239772][ T809] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input45 [ 594.283838][ T809] dvb-usb: schedule remote query interval to 100 msecs. [ 594.283859][ T809] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 594.542534][ T5804] dvb-usb: bulk message failed: -22 (1/0) [ 594.655202][ T5870] dvb-usb: bulk message failed: -22 (1/0) [ 594.728404][ T809] usb 1-1: USB disconnect, device number 39 [ 594.768070][ T5870] dvb-usb: bulk message failed: -22 (1/0) [ 595.569643][ T809] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 596.017747][ T5913] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 596.076102][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 596.143541][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 596.155572][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 596.156833][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 596.163886][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 596.207306][ T6039] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 596.226653][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 596.242261][ T5913] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 596.242291][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.242310][ T5913] usb 3-1: Product: syz [ 596.242325][ T5913] usb 3-1: Manufacturer: syz [ 596.242339][ T5913] usb 3-1: SerialNumber: syz [ 596.298015][ T5913] usb 3-1: config 0 descriptor?? [ 596.303236][ T5913] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 596.303284][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 596.351203][ T6039] usb 2-1: device descriptor read/64, error -71 [ 599.471695][ T60] Bluetooth: hci1: command tx timeout [ 599.475994][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 599.493122][ T5913] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 599.493177][ T5913] usb 3-1: media controller created [ 599.543103][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.610250][ T5913] usb 3-1: selecting invalid altsetting 7 [ 599.610269][ T5913] cxusb: set interface failed [ 599.610282][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 599.703327][ T5913] DVB: Unable to find symbol lgdt330x_attach() [ 599.703345][ T5913] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 599.837519][ T5913] rc_core: IR keymap rc-dvico-portable not found [ 599.837540][ T5913] Registered IR keymap rc-empty [ 599.839261][ T5913] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 599.842264][ T5913] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input46 [ 599.858265][ T5913] dvb-usb: schedule remote query interval to 100 msecs. [ 599.858286][ T5913] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 599.876550][ T5913] usb 3-1: USB disconnect, device number 76 [ 601.322839][ T5913] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 601.375522][ T60] Bluetooth: hci5: Malformed Event: 0x02 [ 601.517312][ T809] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 601.535129][ T60] Bluetooth: hci1: command tx timeout [ 601.674250][ T809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.674276][ T809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.677343][T11651] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 601.704780][ T809] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 601.704855][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 601.704876][ T809] usb 2-1: SerialNumber: syz [ 601.861345][T11651] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 601.861372][T11651] usb 1-1: config 0 has no interface number 0 [ 601.861490][T11651] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 601.861515][T11651] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 601.861555][T11651] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 601.861780][T11651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.935555][T11651] usb 1-1: config 0 descriptor?? [ 601.947713][T13822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 601.953626][ T809] usb 2-1: 0:2 : does not exist [ 601.953717][ T809] usb 2-1: unit 5 not found! [ 602.011851][T11651] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 602.072537][ T809] usb 2-1: USB disconnect, device number 78 [ 602.133427][T13701] udevd[13701]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.610597][ T60] Bluetooth: hci1: command tx timeout [ 603.904828][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.977417][ T5870] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 604.035712][T13767] chnl_net:caif_netlink_parms(): no params data found [ 604.127352][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 604.145647][ T5870] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 604.145676][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.145801][ T5870] usb 2-1: Product: syz [ 604.145815][ T5870] usb 2-1: Manufacturer: syz [ 604.145829][ T5870] usb 2-1: SerialNumber: syz [ 604.223229][ T5870] usb 2-1: config 0 descriptor?? [ 604.246394][ T5870] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 604.246956][ T5870] dvb-usb: bulk message failed: -22 (2/0) [ 604.294681][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.307053][ T5870] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 604.307646][ T5870] usb 2-1: media controller created [ 604.395963][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.438199][T13875] dvb-usb: bulk message failed: -22 (4/0) [ 604.438221][T13875] cxusb: i2c read failed [ 604.509932][ T5870] usb 2-1: selecting invalid altsetting 7 [ 604.509960][ T5870] cxusb: set interface failed [ 604.509972][ T5870] dvb-usb: bulk message failed: -22 (1/0) [ 604.563293][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.600023][ T5870] DVB: Unable to find symbol lgdt330x_attach() [ 604.600038][ T5870] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 604.621436][ T6039] usb 1-1: USB disconnect, device number 40 [ 604.757354][ T5870] rc_core: IR keymap rc-dvico-portable not found [ 604.757374][ T5870] Registered IR keymap rc-empty [ 604.758995][ T5870] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 604.762130][ T5870] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input47 [ 604.774461][ T5870] dvb-usb: schedule remote query interval to 100 msecs. [ 604.774481][ T5870] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 604.784162][ T5870] usb 2-1: USB disconnect, device number 79 [ 605.242745][T11651] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 605.598722][T11651] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.598793][T11651] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.629637][T11651] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 605.629712][T11651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 605.629754][T11651] usb 1-1: SerialNumber: syz [ 605.769151][ T5870] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 605.884138][T13701] udevd[13701]: setting mode of /dev/bus/usb/002/079 to 020664 failed: No such file or directory [ 605.885215][T13701] udevd[13701]: setting owner of /dev/bus/usb/002/079 to uid=0, gid=0 failed: No such file or directory [ 605.904507][ T60] Bluetooth: hci1: command tx timeout [ 605.928433][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.003628][T11651] usb 1-1: 0:2 : does not exist [ 606.003709][T11651] usb 1-1: unit 5 not found! [ 606.153515][T11651] usb 1-1: USB disconnect, device number 41 [ 606.233331][T13928] udevd[13928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.560512][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.415731][T13767] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.415945][T13767] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.416130][T13767] bridge_slave_0: entered allmulticast mode [ 607.463474][T13767] bridge_slave_0: entered promiscuous mode [ 607.474627][T13767] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.538934][T13767] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.543857][T13767] bridge_slave_1: entered allmulticast mode [ 607.569989][T13767] bridge_slave_1: entered promiscuous mode [ 608.083249][T13767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.119958][T13767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.247611][ T5913] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 608.289900][T13767] team0: Port device team_slave_0 added [ 608.298183][T13767] team0: Port device team_slave_1 added [ 608.409892][ T5913] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.409925][ T5913] usb 1-1: config 0 has no interface number 0 [ 608.409968][ T5913] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 608.409993][ T5913] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 608.410034][ T5913] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 608.410056][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.488881][ T5913] usb 1-1: config 0 descriptor?? [ 608.491744][T13961] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.523586][ T5913] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 608.640275][T13767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.640291][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.640317][T13767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.856985][T13767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.857001][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.857029][T13767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.907321][ T5870] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 609.727342][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 609.732388][ T5870] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 609.732405][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.732415][ T5870] usb 3-1: Product: syz [ 609.732422][ T5870] usb 3-1: Manufacturer: syz [ 609.732429][ T5870] usb 3-1: SerialNumber: syz [ 609.794952][ T5870] usb 3-1: config 0 descriptor?? [ 609.834338][ T5870] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 609.834391][ T5870] dvb-usb: bulk message failed: -22 (2/0) [ 609.929057][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 609.930672][ T5870] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 609.930740][ T5870] usb 3-1: media controller created [ 609.998909][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 610.017442][T13979] dvb-usb: bulk message failed: -22 (4/0) [ 610.017463][T13979] cxusb: i2c read failed [ 610.088464][ T5870] usb 3-1: selecting invalid altsetting 7 [ 610.088849][ T5870] cxusb: set interface failed [ 610.088865][ T5870] dvb-usb: bulk message failed: -22 (1/0) [ 610.166632][T13767] hsr_slave_0: entered promiscuous mode [ 610.171525][T13767] hsr_slave_1: entered promiscuous mode [ 610.173532][T13767] debugfs: 'hsr0' already exists in 'hsr' [ 610.173556][T13767] Cannot create hsr debugfs directory [ 610.356396][ T5870] DVB: Unable to find symbol lgdt330x_attach() [ 610.356938][ T5870] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 611.241136][ T5913] usb 1-1: USB disconnect, device number 42 [ 611.257827][ T5870] rc_core: IR keymap rc-dvico-portable not found [ 611.257847][ T5870] Registered IR keymap rc-empty [ 611.323641][ T5870] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 612.056417][T14023] syz.0.2975 (14023): drop_caches: 2 [ 612.325583][ T5870] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input48 [ 614.304170][ T5870] dvb-usb: schedule remote query interval to 100 msecs. [ 614.304210][ T5870] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 614.307536][ T5870] usb 3-1: USB disconnect, device number 77 [ 614.357295][ T57] bridge_slave_1: left allmulticast mode [ 614.357323][ T57] bridge_slave_1: left promiscuous mode [ 614.357554][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.400487][ T57] bridge_slave_0: left allmulticast mode [ 615.400516][ T57] bridge_slave_0: left promiscuous mode [ 615.400760][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.515946][ T5870] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 615.667733][T14048] fuse: Bad value for 'fd' [ 616.159986][ T5870] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 616.520743][ T5870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 616.520770][ T5870] usb 3-1: config 0 has no interface number 0 [ 616.520830][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 616.520856][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 616.520896][ T5870] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 616.520918][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.586331][ T5870] usb 3-1: config 0 descriptor?? [ 616.596377][T14043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 616.649082][ T5870] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 616.747287][ T5913] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 618.129006][ T5870] usb 3-1: USB disconnect, device number 78 [ 618.694844][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 618.703278][ T5913] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 618.703306][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.703324][ T5913] usb 2-1: Product: syz [ 618.703337][ T5913] usb 2-1: Manufacturer: syz [ 618.703351][ T5913] usb 2-1: SerialNumber: syz [ 618.714213][ T5913] usb 2-1: config 0 descriptor?? [ 618.723160][ T5913] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 618.723208][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 618.740391][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 618.745611][ T5913] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 618.745665][ T5913] usb 2-1: media controller created [ 618.802147][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.881570][ T5913] usb 2-1: selecting invalid altsetting 7 [ 618.881590][ T5913] cxusb: set interface failed [ 618.881603][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 619.029773][ T5913] DVB: Unable to find symbol lgdt330x_attach() [ 619.029789][ T5913] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 619.227539][ T5913] rc_core: IR keymap rc-dvico-portable not found [ 619.227561][ T5913] Registered IR keymap rc-empty [ 619.229882][ T5913] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 619.236531][ T5913] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input49 [ 619.281697][ T5913] dvb-usb: schedule remote query interval to 100 msecs. [ 619.281719][ T5913] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 619.308993][ T5913] usb 2-1: USB disconnect, device number 80 [ 619.472891][ T5913] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 620.327324][ T5870] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 620.502313][ T5870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.502338][ T5870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.506335][ T5870] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 620.506364][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 620.506383][ T5870] usb 2-1: SerialNumber: syz [ 620.697949][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.605999][ T5870] usb 2-1: 0:2 : does not exist [ 621.606085][ T5870] usb 2-1: unit 5 not found! [ 621.686485][T14146] fuse: Unknown parameter '0x0000000000000003' [ 621.701540][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.730719][ T5870] usb 2-1: USB disconnect, device number 81 [ 621.768497][ T57] bond0 (unregistering): Released all slaves [ 621.794502][T13928] udevd[13928]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.057377][ T5913] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 622.102312][ T57] tipc: Left network mode [ 622.217244][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 622.223843][ T5913] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 622.223872][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.223896][ T5913] usb 3-1: Product: syz [ 622.224013][ T5913] usb 3-1: Manufacturer: syz [ 622.224030][ T5913] usb 3-1: SerialNumber: syz [ 622.265600][ T5913] usb 3-1: config 0 descriptor?? [ 622.289794][ T5913] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 622.289836][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 622.313121][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 622.314293][ T5913] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 622.314355][ T5913] usb 3-1: media controller created [ 622.363802][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.414672][T14171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3038'. [ 622.417741][ T5913] usb 3-1: selecting invalid altsetting 7 [ 622.417759][ T5913] cxusb: set interface failed [ 622.417771][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 622.472507][T14151] dvb-usb: bulk message failed: -22 (4/0) [ 622.472520][T14151] cxusb: i2c read failed [ 622.592739][ T5913] DVB: Unable to find symbol lgdt330x_attach() [ 622.592756][ T5913] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 622.744147][T14166] macsec1: entered promiscuous mode [ 622.744168][T14166] vlan1: entered promiscuous mode [ 622.757312][ T5913] rc_core: IR keymap rc-dvico-portable not found [ 622.757330][ T5913] Registered IR keymap rc-empty [ 622.758979][ T5913] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 622.761892][ T5913] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input50 [ 622.797734][ T5913] dvb-usb: schedule remote query interval to 100 msecs. [ 622.797748][ T5913] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 622.832264][ T5913] usb 3-1: USB disconnect, device number 79 [ 624.088857][ T5913] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 624.579430][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.579499][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.677416][ T57] hsr_slave_0: left promiscuous mode [ 624.720689][ T57] hsr_slave_1: left promiscuous mode [ 624.721714][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.721737][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.779614][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.779642][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.890346][ T57] veth1_macvtap: left promiscuous mode [ 624.890445][ T57] veth0_macvtap: left promiscuous mode [ 624.890663][ T57] veth1_vlan: left promiscuous mode [ 624.890831][ T57] veth0_vlan: left promiscuous mode [ 624.899060][T14245] binder: 14244:14245 unknown command 0 [ 624.899079][T14245] binder: 14244:14245 ioctl c0306201 200000000080 returned -22 [ 625.447408][T14265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 626.468160][ T57] team0 (unregistering): Port device team_slave_1 removed [ 626.528007][ T57] team0 (unregistering): Port device team_slave_0 removed [ 626.978251][T14340] overlayfs: failed to resolve './file2': -2 [ 627.097880][T14345] binder: 14344:14345 unknown command 0 [ 627.097901][T14345] binder: 14344:14345 ioctl c0306201 200000000080 returned -22 [ 627.330612][T14347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 627.803810][T14387] overlayfs: failed to resolve './file2': -2 [ 628.192050][T14402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 629.676456][T13767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 629.715227][T13767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 630.326019][T13767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 630.348570][T14437] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3139'. [ 631.208182][T13767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.041127][T13767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.130469][T14491] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3152'. [ 632.134966][T13767] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.202462][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.206065][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.445598][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.445843][ T6226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.490994][T14495] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3153'. [ 632.605127][T14495] dvmrp6: entered allmulticast mode [ 633.686625][T13767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.193090][T13767] veth0_vlan: entered promiscuous mode [ 636.229955][T13767] veth1_vlan: entered promiscuous mode [ 637.595776][T13767] veth0_macvtap: entered promiscuous mode [ 637.602589][T13767] veth1_macvtap: entered promiscuous mode [ 637.775424][T13767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.861854][T14581] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3178'. [ 637.932656][T13767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.195209][ T170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.217059][ T170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.270879][ T170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.287382][ T170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.707337][ T6039] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 638.799840][ T6240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.799859][ T6240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.879298][ T6039] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.879324][ T6039] usb 3-1: config 0 has no interface number 0 [ 638.879367][ T6039] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 638.879394][ T6039] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 638.879434][ T6039] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 638.879457][ T6039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.906875][ T6039] usb 3-1: config 0 descriptor?? [ 638.907822][T14593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 638.957254][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 638.973920][ T6039] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 639.008749][ T6240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.008769][ T6240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.107327][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 639.114645][ T10] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 639.114671][ T10] usb 2-1: config 0 has no interface number 0 [ 639.120950][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 639.120976][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.120995][ T10] usb 2-1: Product: syz [ 639.121008][ T10] usb 2-1: Manufacturer: syz [ 639.121021][ T10] usb 2-1: SerialNumber: syz [ 639.136088][ T10] usb 2-1: config 0 descriptor?? [ 640.224486][ T10] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -32 [ 640.224804][ T10] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 640.250597][ T10] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 640.502587][ T10] usb 2-1: USB disconnect, device number 82 [ 642.589658][ T5804] usb 3-1: USB disconnect, device number 80 [ 642.979961][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 643.103228][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 643.153281][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 643.193927][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 643.206404][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 644.031362][T14659] netlink: 'syz.1.3200': attribute type 1 has an invalid length. [ 644.031427][T14659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3200'. [ 647.139335][ T10] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 647.159808][ T60] Bluetooth: hci0: command tx timeout [ 647.289870][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 647.289897][ T10] usb 1-1: config 0 has no interface number 0 [ 647.289940][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 647.289965][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 647.290004][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 647.290026][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.362384][ T10] usb 1-1: config 0 descriptor?? [ 647.363360][T14673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 647.405545][ T10] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 649.004228][T14691] syzkaller0: entered promiscuous mode [ 649.004254][T14691] syzkaller0: entered allmulticast mode [ 649.208383][ T60] Bluetooth: hci0: command tx timeout [ 649.420000][T14721] netlink: 'syz.2.3217': attribute type 1 has an invalid length. [ 649.420065][T14721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3217'. [ 650.276110][ T9] usb 1-1: USB disconnect, device number 43 [ 650.350621][ T6224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.322140][ T60] Bluetooth: hci0: command tx timeout [ 653.018657][T14751] capability: warning: `syz.1.3226' uses deprecated v2 capabilities in a way that may be insecure [ 653.110958][ T6224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.367697][ T60] Bluetooth: hci0: command tx timeout [ 653.732536][ T6224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.767438][ T5884] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 653.924982][ T5884] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 653.925009][ T5884] usb 1-1: config 0 has no interface number 0 [ 653.925051][ T5884] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 653.925077][ T5884] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 653.925117][ T5884] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 653.925138][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.072057][ T5884] usb 1-1: config 0 descriptor?? [ 654.072770][T14757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 654.101459][ T5884] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 656.324766][ T6224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.461716][T14786] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 656.461716][T14786] program syz.2.3234 not setting count and/or reply_len properly [ 657.047711][ T6039] usb 1-1: USB disconnect, device number 44 [ 657.085269][T14644] chnl_net:caif_netlink_parms(): no params data found [ 657.691411][ T6224] bridge_slave_1: left allmulticast mode [ 657.691438][ T6224] bridge_slave_1: left promiscuous mode [ 657.691660][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.963661][ T6224] bridge_slave_0: left allmulticast mode [ 658.963687][ T6224] bridge_slave_0: left promiscuous mode [ 659.117737][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.139000][ T810] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 660.469865][ T810] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 660.469892][ T810] usb 3-1: config 0 has no interface number 0 [ 660.469935][ T810] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 660.469959][ T810] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 660.469997][ T810] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 660.470019][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.551491][ T810] usb 3-1: config 0 descriptor?? [ 660.552465][T14821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 660.582956][ T810] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 660.710017][ T6039] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 661.025269][ T6039] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 661.025297][ T6039] usb 4-1: config 0 has no interface number 0 [ 661.025331][ T6039] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 661.025344][ T6039] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 661.025367][ T6039] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 661.025378][ T6039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.029502][ T6039] usb 4-1: config 0 descriptor?? [ 661.855167][T14829] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 661.865008][ T31] usb 3-1: USB disconnect, device number 81 [ 661.865113][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 661.865521][ T6039] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 663.317735][ T6224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.377816][ T6224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.400349][ T6224] bond0 (unregistering): Released all slaves [ 663.438660][T14644] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.438754][T14644] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.438927][T14644] bridge_slave_0: entered allmulticast mode [ 663.441645][T14644] bridge_slave_0: entered promiscuous mode [ 663.457831][T14827] tipc: Started in network mode [ 663.457865][T14827] tipc: Node identity d61fdefcf308, cluster identity 4711 [ 663.458043][T14827] tipc: Enabled bearer , priority 0 [ 663.458777][T14832] syzkaller0: entered promiscuous mode [ 663.458797][T14832] syzkaller0: entered allmulticast mode [ 663.527785][T14842] tipc: Resetting bearer [ 663.528305][T14644] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.528487][T14644] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.528723][T14644] bridge_slave_1: entered allmulticast mode [ 663.533390][T14644] bridge_slave_1: entered promiscuous mode [ 663.687519][T14823] tipc: Resetting bearer [ 663.884126][T14853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.620806][T11651] usb 4-1: USB disconnect, device number 60 [ 664.628381][T14823] tipc: Disabling bearer [ 664.799995][T14865] loop2: detected capacity change from 0 to 7 [ 664.805440][T14865] Dev loop2: unable to read RDB block 7 [ 664.805484][T14865] loop2: unable to read partition table [ 664.805708][T14865] loop2: partition table beyond EOD, truncated [ 664.805726][T14865] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 664.886450][ T6224] tipc: Left network mode [ 664.894898][ T5870] tipc: Node number set to 622321404 [ 664.964214][T14644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.971403][T14644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.327281][ T5870] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 665.387268][T11651] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 665.411327][T14644] team0: Port device team_slave_0 added [ 665.423441][ T9] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 665.446993][T14644] team0: Port device team_slave_1 added [ 665.498569][ T5870] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 665.498595][ T5870] usb 2-1: config 0 has no interface number 0 [ 665.498637][ T5870] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 665.498663][ T5870] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 665.498703][ T5870] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 665.498723][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.566110][T11651] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.566136][T11651] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.567389][T11651] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 665.567413][T11651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 665.567431][T11651] usb 3-1: SerialNumber: syz [ 665.584196][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 665.584221][ T9] usb 4-1: config 0 has no interface number 0 [ 665.584261][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 665.584287][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 665.584324][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 665.584345][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.665409][ T5870] usb 2-1: config 0 descriptor?? [ 665.666187][T14872] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 665.670686][ T9] usb 4-1: config 0 descriptor?? [ 665.671670][T14875] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 665.709522][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 665.753291][ T5870] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 666.143580][T11651] usb 3-1: skipping empty audio interface (v1) [ 666.160038][T14644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.160053][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.160167][T14644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.847086][ T5804] usb 2-1: USB disconnect, device number 83 [ 667.030019][T14644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.030036][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.030063][T14644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.084875][T11651] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 667.100809][T11651] usb 3-1: USB disconnect, device number 82 [ 668.267276][T11651] usb 4-1: USB disconnect, device number 61 [ 668.338132][T13928] udevd[13928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.587360][ T6224] hsr_slave_0: left promiscuous mode [ 669.649328][ T6224] hsr_slave_1: left promiscuous mode [ 669.650311][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.650335][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.707262][ T9] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 669.744875][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.744900][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.868195][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 669.868223][ T9] usb 1-1: config 0 has no interface number 0 [ 669.868285][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 669.868311][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 669.868350][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 669.868372][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.886303][ T9] usb 1-1: config 0 descriptor?? [ 669.887516][T14913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 669.932342][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 669.955699][ T6224] veth1_macvtap: left promiscuous mode [ 669.955806][ T6224] veth0_macvtap: left promiscuous mode [ 669.956054][ T6224] veth1_vlan: left promiscuous mode [ 669.956219][ T6224] veth0_vlan: left promiscuous mode [ 671.445555][ T36] usb 1-1: USB disconnect, device number 45 [ 671.445674][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 671.977427][ T810] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 672.129040][ T810] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 672.129067][ T810] usb 3-1: config 0 has no interface number 0 [ 672.129104][ T810] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 672.129119][ T810] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 672.129142][ T810] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 672.129153][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.132856][ T810] usb 3-1: config 0 descriptor?? [ 672.133945][T14954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 672.141601][ T810] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 673.518888][ T6224] team0 (unregistering): Port device team_slave_1 removed [ 673.581577][ T6224] team0 (unregistering): Port device team_slave_0 removed [ 673.872026][T14644] hsr_slave_0: entered promiscuous mode [ 673.873861][T14644] hsr_slave_1: entered promiscuous mode [ 673.895385][T14912] tipc: Enabled bearer , priority 0 [ 673.896261][T14915] syzkaller0: entered promiscuous mode [ 673.896282][T14915] syzkaller0: entered allmulticast mode [ 674.088634][T14928] tipc: Resetting bearer [ 674.241829][T14928] tipc: Disabling bearer [ 674.283933][T14965] Bluetooth: MGMT ver 1.23 [ 675.771431][ T9] usb 3-1: USB disconnect, device number 83 [ 675.861340][T14983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3285'. [ 682.997312][ T6039] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 683.147238][ T6039] usb 3-1: Using ep0 maxpacket: 16 [ 683.300365][ T6039] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.300422][ T6039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.300449][ T6039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 683.300471][ T6039] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 683.300500][ T6039] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.314000][ T6039] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 683.314031][ T6039] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 683.314051][ T6039] usb 3-1: Manufacturer: syz [ 683.327878][ T6039] usb 3-1: config 0 descriptor?? [ 683.664949][ T6039] rc_core: IR keymap rc-hauppauge not found [ 683.664971][ T6039] Registered IR keymap rc-empty [ 683.666192][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.677448][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.719484][ T6039] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 683.728564][ T6039] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input51 [ 683.742718][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.757427][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.777882][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.801866][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.819253][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.837973][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.867389][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.887573][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.907426][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.927711][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 683.947389][ T6039] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 684.008661][ T6039] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 684.009214][ T6039] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 684.069230][ T6039] usb 3-1: USB disconnect, device number 84 [ 685.402435][T15077] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 686.246804][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.246872][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.634224][T14644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 688.877881][T14644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 690.450740][T14644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 690.516075][T14644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 692.641356][T14644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.806677][T14644] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.192873][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.193003][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.195393][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.195519][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.388982][T14644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.390149][T15180] overlayfs: missing 'lowerdir' [ 695.636437][T15190] loop7: detected capacity change from 0 to 16384 [ 695.698556][T15190] loop7: detected capacity change from 16384 to 16383 [ 696.071299][T14644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.659544][T15239] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 698.659544][T15239] program syz.0.3337 not setting count and/or reply_len properly [ 699.396054][T15241] 9p: Bad value for 'wfdno' [ 699.867084][T14644] veth0_vlan: entered promiscuous mode [ 699.874240][T14644] veth1_vlan: entered promiscuous mode [ 699.981117][T14644] veth0_macvtap: entered promiscuous mode [ 699.986012][T14644] veth1_macvtap: entered promiscuous mode [ 700.042040][T14644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.072512][T14644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.102195][ T6238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.102650][ T6238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.110262][ T6238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.135260][ T6238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.648736][ T6236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.648755][ T6236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.087471][ T6226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.087493][ T6226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.151800][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 704.155147][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 704.156422][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 704.198615][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 704.199383][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 705.358331][T15323] fuse: Bad value for 'fd' [ 706.327589][ T60] Bluetooth: hci4: command tx timeout [ 708.407326][ T60] Bluetooth: hci4: command tx timeout [ 708.702257][ T6224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.795433][T15346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.818171][T15351] loop2: detected capacity change from 0 to 7 [ 709.859925][T15351] Dev loop2: unable to read RDB block 7 [ 709.859977][T15351] loop2: unable to read partition table [ 709.860176][T15351] loop2: partition table beyond EOD, truncated [ 709.860193][T15351] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 710.520586][ T60] Bluetooth: hci4: command tx timeout [ 710.655645][ T6224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.037428][ T9] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 711.101929][ T6224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.201987][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 711.202015][ T9] usb 2-1: config 0 has no interface number 0 [ 711.202060][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 711.202086][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 711.202126][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 711.202147][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.215681][ T9] usb 2-1: config 0 descriptor?? [ 711.217598][T15372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 711.247422][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 711.602489][ T36] usb 2-1: USB disconnect, device number 84 [ 711.602596][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 711.646016][ T6224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.810806][T15302] chnl_net:caif_netlink_parms(): no params data found [ 711.970037][T15394] fuse: Bad value for 'fd' [ 712.397340][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 712.570194][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 712.572654][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.572680][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.575597][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.575625][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.575644][ T9] usb 4-1: Product: syz [ 712.575658][ T9] usb 4-1: Manufacturer: syz [ 712.575672][ T9] usb 4-1: SerialNumber: syz [ 712.630900][ T60] Bluetooth: hci4: command tx timeout [ 713.420224][ T9] usb 4-1: 0:2 : does not exist [ 713.577518][ T9] usb 4-1: USB disconnect, device number 62 [ 714.054073][T15415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.283909][T14981] udevd[14981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.782771][T15302] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.782927][T15302] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.783157][T15302] bridge_slave_0: entered allmulticast mode [ 714.817390][T15302] bridge_slave_0: entered promiscuous mode [ 714.863832][T15302] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.863951][T15302] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.864153][T15302] bridge_slave_1: entered allmulticast mode [ 714.866982][T15302] bridge_slave_1: entered promiscuous mode [ 716.012503][T15302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.012747][ T6224] bridge_slave_1: left allmulticast mode [ 716.012767][ T6224] bridge_slave_1: left promiscuous mode [ 716.013071][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.866947][ T6224] bridge_slave_0: left allmulticast mode [ 718.866976][ T6224] bridge_slave_0: left promiscuous mode [ 718.879400][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.607304][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 719.920946][T15491] binder: BINDER_SET_CONTEXT_MGR already set [ 719.920961][T15491] binder: 15490:15491 ioctl 4018620d 200000004a80 returned -16 [ 720.158454][ T6224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.488952][ T6224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.530738][ T6224] bond0 (unregistering): Released all slaves [ 720.614835][T15302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.362096][T15302] team0: Port device team_slave_0 added [ 722.413110][T15302] team0: Port device team_slave_1 added [ 722.616046][T15520] process 'syz.3.3408' launched '/dev/fd/3' with NULL argv: empty string added [ 722.817475][T15523] binder: 15522:15523 ioctl c0306201 0 returned -14 [ 722.925280][T15302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.925296][T15302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.925321][T15302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.989860][T15302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.989875][T15302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.989898][T15302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.288315][T15302] hsr_slave_0: entered promiscuous mode [ 723.289590][T15302] hsr_slave_1: entered promiscuous mode [ 723.290460][T15302] debugfs: 'hsr0' already exists in 'hsr' [ 723.290483][T15302] Cannot create hsr debugfs directory [ 723.643570][T15533] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 723.643570][T15533] program syz.3.3412 not setting count and/or reply_len properly [ 723.897907][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3415'. [ 723.901029][ T6224] hsr_slave_0: left promiscuous mode [ 723.972613][ T6224] hsr_slave_1: left promiscuous mode [ 723.975068][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.975094][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.018418][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.018445][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.119955][ T6224] veth1_macvtap: left promiscuous mode [ 724.120056][ T6224] veth0_macvtap: left promiscuous mode [ 724.120304][ T6224] veth1_vlan: left promiscuous mode [ 724.120476][ T6224] veth0_vlan: left promiscuous mode [ 725.464262][T15570] binder: 15568:15570 ioctl c0306201 0 returned -14 [ 725.474858][T15570] binder: BINDER_SET_CONTEXT_MGR already set [ 725.474871][T15570] binder: 15568:15570 ioctl 4018620d 200000004a80 returned -16 [ 725.950954][ T6224] team0 (unregistering): Port device team_slave_1 removed [ 726.010222][ T6224] team0 (unregistering): Port device team_slave_0 removed [ 728.041876][T15572] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.042475][T15572] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.449970][T15572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.456723][T15572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.403993][T15572] vlan1: left promiscuous mode [ 729.507451][ T1473] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.006726][ T1473] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.132705][ T1473] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.161427][ T1473] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.263857][T15594] tipc: Enabled bearer , priority 0 [ 731.375632][T15594] tipc: Resetting bearer [ 731.396455][T15601] syzkaller0: entered promiscuous mode [ 731.396472][T15601] syzkaller0: entered allmulticast mode [ 731.757444][T15593] tipc: Resetting bearer [ 732.730536][T15593] tipc: Disabling bearer [ 733.030437][T15624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.348515][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 733.485478][T15646] tipc: Enabled bearer , priority 0 [ 733.486250][T15646] syzkaller0: entered promiscuous mode [ 733.486272][T15646] syzkaller0: entered allmulticast mode [ 733.497268][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 733.510839][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.510868][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 733.510887][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 733.510899][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.513808][ T9] usb 1-1: config 0 descriptor?? [ 733.823567][T15651] tipc: Resetting bearer [ 733.867897][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 733.868010][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 733.883513][ T9] usb 1-1: USB disconnect, device number 46 [ 734.892708][T15645] tipc: Resetting bearer [ 735.019579][T15675] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3439'. [ 738.509899][T15645] tipc: Disabling bearer [ 738.730044][T15686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 739.012947][T15702] syzkaller0: entered promiscuous mode [ 739.012972][T15702] syzkaller0: entered allmulticast mode [ 739.990554][T15712] tipc: Started in network mode [ 739.990583][T15712] tipc: Node identity dab9c151247a, cluster identity 4711 [ 739.992235][T15712] tipc: Enabled bearer , priority 0 [ 740.004963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.114559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.126006][T15701] tipc: Resetting bearer [ 740.286823][T15721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 740.629691][T15701] tipc: Disabling bearer [ 741.704906][T15739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 742.058847][T15749] loop2: detected capacity change from 0 to 7 [ 742.076383][T15749] Dev loop2: unable to read RDB block 7 [ 742.076422][T15749] loop2: AHDI p1 p2 p3 [ 742.076453][T15749] loop2: partition table partially beyond EOD, truncated [ 742.076706][T15749] loop2: p1 start 1601398130 is beyond EOD, truncated [ 742.076725][T15749] loop2: p2 start 1702059890 is beyond EOD, truncated [ 742.170467][T15302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 742.267057][T15302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 742.504438][T15302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 743.584840][T15302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 746.937393][T15786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 747.466944][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.467010][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.613328][T15816] syzkaller0: entered promiscuous mode [ 747.613354][T15816] syzkaller0: entered allmulticast mode [ 747.747426][ T5913] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 747.918828][ T5913] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 747.920991][ T5913] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 747.921014][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.921023][ T5913] usb 2-1: Product: syz [ 747.921031][ T5913] usb 2-1: Manufacturer: syz [ 747.921038][ T5913] usb 2-1: SerialNumber: syz [ 747.933444][ T5913] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 747.933502][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 747.952571][ T5913] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 747.958352][ T5913] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 747.958422][ T5913] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 748.826176][T15831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.826702][T15831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.239738][T15834] loop2: detected capacity change from 0 to 7 [ 749.240783][T15834] Dev loop2: unable to read RDB block 7 [ 749.240812][T15834] loop2: AHDI p1 p2 p3 [ 749.240838][T15834] loop2: partition table partially beyond EOD, truncated [ 749.241046][T15834] loop2: p1 start 1601398130 is beyond EOD, truncated [ 749.241064][T15834] loop2: p2 start 1702059890 is beyond EOD, truncated [ 749.487092][T15838] binder: BINDER_SET_CONTEXT_MGR already set [ 749.491031][T15838] binder: 15837:15838 ioctl 4018620d 200000004a80 returned -16 [ 749.516366][T15302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.595986][T15302] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.621203][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.622166][ T6224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.668325][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.668491][ T6224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.985724][T15856] syzkaller0: entered promiscuous mode [ 749.985749][T15856] syzkaller0: entered allmulticast mode [ 750.574711][ T36] usb 2-1: USB disconnect, device number 85 [ 750.936776][T15302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.826628][T15302] veth0_vlan: entered promiscuous mode [ 751.834364][T15302] veth1_vlan: entered promiscuous mode [ 751.874647][T15302] veth0_macvtap: entered promiscuous mode [ 751.979281][T15302] veth1_macvtap: entered promiscuous mode [ 752.052106][T15302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.081076][T15302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.128897][ T3073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.135204][ T3073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.156800][ T3073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.175360][ T3073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.443642][ T36] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 752.767233][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 752.769797][ T36] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 752.769823][ T36] usb 4-1: config 0 has no interface number 0 [ 752.769883][ T36] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 752.769905][ T36] usb 4-1: config 0 interface 1 has no altsetting 0 [ 752.772817][ T36] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 752.772843][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.772862][ T36] usb 4-1: Product: syz [ 752.772876][ T36] usb 4-1: Manufacturer: syz [ 752.772890][ T36] usb 4-1: SerialNumber: syz [ 752.871055][ T36] usb 4-1: config 0 descriptor?? [ 753.431589][ T36] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 753.471399][ T36] cx231xx 4-1:0.1: Failed to read PCB config [ 753.471471][ T36] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 753.508937][ T36] usb 4-1: USB disconnect, device number 63 [ 753.537738][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.537760][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.678010][T15919] syzkaller0: entered promiscuous mode [ 753.678036][T15919] syzkaller0: entered allmulticast mode [ 753.679820][ T6238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.679837][ T6238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.937798][ T36] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 755.136137][T15930] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3195'. [ 755.389893][ T36] usb 4-1: device not accepting address 64, error -71 [ 756.098079][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 756.144792][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 756.164105][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 756.165706][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 756.166447][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 756.389544][T15952] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3503'. [ 758.220246][T15943] chnl_net:caif_netlink_parms(): no params data found [ 759.127961][ T5811] Bluetooth: hci0: command tx timeout [ 759.512223][T15985] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3510'. [ 759.997009][T15987] syzkaller0: entered promiscuous mode [ 759.997029][T15987] syzkaller0: entered allmulticast mode [ 760.167367][ T5884] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 760.195855][ T116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.251190][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.251344][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.251561][T15943] bridge_slave_0: entered allmulticast mode [ 760.253779][T15943] bridge_slave_0: entered promiscuous mode [ 760.307390][ T36] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 760.337365][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 760.347502][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.347574][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 760.347601][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 760.347681][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 760.347703][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.380221][ T5884] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 760.380251][ T5884] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 760.380269][ T5884] usb 4-1: Manufacturer: syz [ 760.391840][ T5884] usb 4-1: config 0 descriptor?? [ 760.492871][ T36] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 760.512857][ T36] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 760.512875][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.512885][ T36] usb 2-1: Product: syz [ 760.512893][ T36] usb 2-1: Manufacturer: syz [ 760.512900][ T36] usb 2-1: SerialNumber: syz [ 760.552681][ T36] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 760.552712][ T36] dvb-usb: bulk message failed: -22 (3/0) [ 760.583634][ T36] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 760.600866][ T36] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 760.600921][ T36] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 760.690059][ T5884] rc_core: IR keymap rc-hauppauge not found [ 760.690079][ T5884] Registered IR keymap rc-empty [ 760.690228][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.707312][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.728815][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 760.732286][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 760.736860][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.747451][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.769846][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 760.991374][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 761.007478][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 761.162758][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.163265][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.239301][ T5811] Bluetooth: hci0: command tx timeout [ 761.727581][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 761.747354][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 761.777564][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 761.797303][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 761.818545][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 761.841619][ T5884] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 761.841646][ T5884] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 761.938244][ T810] usb 4-1: USB disconnect, device number 66 [ 763.117795][ T9] usb 2-1: USB disconnect, device number 86 [ 763.287237][ T5811] Bluetooth: hci0: command tx timeout [ 765.378737][ T5811] Bluetooth: hci0: command tx timeout [ 766.068885][T16027] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3523'. [ 774.677412][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.677531][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.677766][T15943] bridge_slave_1: entered allmulticast mode [ 774.680112][T15943] bridge_slave_1: entered promiscuous mode [ 774.680381][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 774.736588][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 774.745195][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 774.775332][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 774.776994][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 776.888013][ T5811] Bluetooth: hci2: command tx timeout [ 776.948087][T16067] ODEBUG: Out of memory. ODEBUG disabled [ 777.148555][ C0] ------------[ cut here ]------------ [ 777.148577][ C0] 1 [ 777.148592][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 777.148636][ C0] Modules linked in: [ 777.148665][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 777.148695][ C0] Tainted: [L]=SOFTLOCKUP [ 777.148704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.148720][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 777.148743][ C0] Code: 0f 94 c0 5b 41 5e e9 05 0d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 777.148763][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 777.148782][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801cab0000 [ 777.148800][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 777.148815][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 777.148830][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 777.148846][ C0] R13: 000000010000b998 R14: 1ffff9200002af4c R15: ffff888039452208 [ 777.148863][ C0] FS: 0000000000000000(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 777.148881][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.148897][ C0] CR2: 000055772a925660 CR3: 0000000040458000 CR4: 00000000003526f0 [ 777.148916][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.148929][ C0] DR3: 00000000ffffdb67 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 777.148944][ C0] Call Trace: [ 777.148956][ C0] [ 777.148965][ C0] call_timer_fn+0x192/0x640 [ 777.148989][ C0] ? __pfx_stub_timer+0x10/0x10 [ 777.149008][ C0] ? call_timer_fn+0xd4/0x640 [ 777.149030][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 777.149049][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 777.149091][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.149121][ C0] ? __pfx_stub_timer+0x10/0x10 [ 777.149144][ C0] __run_timer_base+0x6a3/0x9f0 [ 777.149196][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 777.149225][ C0] ? rt_spin_lock+0x1e0/0x400 [ 777.149268][ C0] run_timer_softirq+0xb7/0x170 [ 777.149302][ C0] handle_softirqs+0x1de/0x6f0 [ 777.149345][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 777.149378][ C0] run_ktimerd+0x69/0x100 [ 777.149412][ C0] smpboot_thread_fn+0x541/0xa50 [ 777.149448][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 777.149493][ C0] kthread+0x388/0x470 [ 777.149517][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 777.149549][ C0] ? __pfx_kthread+0x10/0x10 [ 777.149581][ C0] ret_from_fork+0x51e/0xb90 [ 777.149616][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 777.149646][ C0] ? __switch_to+0xc7d/0x1450 [ 777.149679][ C0] ? __pfx_kthread+0x10/0x10 [ 777.149704][ C0] ret_from_fork_asm+0x1a/0x30 [ 777.149745][ C0] [ 777.149763][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 777.149782][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 777.149812][ C0] Tainted: [L]=SOFTLOCKUP [ 777.149835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.149848][ C0] Call Trace: [ 777.149856][ C0] [ 777.149865][ C0] vpanic+0x56c/0xa60 [ 777.149900][ C0] ? __pfx__printk+0x10/0x10 [ 777.149925][ C0] ? __pfx_vpanic+0x10/0x10 [ 777.149959][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 777.149991][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 777.150032][ C0] panic+0xc5/0xd0 [ 777.150064][ C0] ? __pfx_panic+0x10/0x10 [ 777.150108][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 777.150136][ C0] __warn+0x315/0x4f0 [ 777.150168][ C0] ? stub_timer+0xa/0x20 [ 777.150189][ C0] ? stub_timer+0xa/0x20 [ 777.150210][ C0] __report_bug+0x29a/0x540 [ 777.150247][ C0] ? stub_timer+0xa/0x20 [ 777.150267][ C0] ? __pfx___report_bug+0x10/0x10 [ 777.150294][ C0] ? add_lock_to_list+0xc7/0x100 [ 777.150322][ C0] ? lockdep_unlock+0x5d/0xd0 [ 777.150353][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 777.150386][ C0] ? stub_timer+0xa/0x20 [ 777.150405][ C0] report_bug+0x16a/0x220 [ 777.150434][ C0] ? stub_timer+0xa/0x20 [ 777.150452][ C0] ? stub_timer+0xc/0x20 [ 777.150470][ C0] handle_bug+0x98/0x200 [ 777.150505][ C0] exc_invalid_op+0x1a/0x50 [ 777.150538][ C0] asm_exc_invalid_op+0x1a/0x20 [ 777.150560][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 777.150585][ C0] Code: 0f 94 c0 5b 41 5e e9 05 0d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 777.150605][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 777.150624][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801cab0000 [ 777.150641][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 777.150656][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 777.150671][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 777.150687][ C0] R13: 000000010000b998 R14: 1ffff9200002af4c R15: ffff888039452208 [ 777.150709][ C0] ? __pfx_stub_timer+0x10/0x10 [ 777.150730][ C0] ? stub_timer+0x9/0x20 [ 777.150756][ C0] ? stub_timer+0x9/0x20 [ 777.150773][ C0] call_timer_fn+0x192/0x640 [ 777.150795][ C0] ? __pfx_stub_timer+0x10/0x10 [ 777.150814][ C0] ? call_timer_fn+0xd4/0x640 [ 777.150834][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 777.150854][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 777.150896][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.150925][ C0] ? __pfx_stub_timer+0x10/0x10 [ 777.150948][ C0] __run_timer_base+0x6a3/0x9f0 [ 777.150997][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 777.151028][ C0] ? rt_spin_lock+0x1e0/0x400 [ 777.151069][ C0] run_timer_softirq+0xb7/0x170 [ 777.151104][ C0] handle_softirqs+0x1de/0x6f0 [ 777.151145][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 777.151178][ C0] run_ktimerd+0x69/0x100 [ 777.151212][ C0] smpboot_thread_fn+0x541/0xa50 [ 777.151248][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 777.151292][ C0] kthread+0x388/0x470 [ 777.151316][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 777.151348][ C0] ? __pfx_kthread+0x10/0x10 [ 777.151374][ C0] ret_from_fork+0x51e/0xb90 [ 777.151409][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 777.151439][ C0] ? __switch_to+0xc7d/0x1450 [ 777.151470][ C0] ? __pfx_kthread+0x10/0x10 [ 777.151496][ C0] ret_from_fork_asm+0x1a/0x30 [ 777.151536][ C0] [ 777.151889][ C0] Kernel Offset: disabled