last executing test programs: 2m11.1447754s ago: executing program 1 (id=219): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x60bd25, 0x5, {0x0, 0x0, 0x0, r4, 0x8013, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 2m8.734487947s ago: executing program 1 (id=226): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003680)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000006800), 0x204200, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4) 2m8.491833432s ago: executing program 1 (id=230): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r7 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) 2m5.503949569s ago: executing program 1 (id=246): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000040)=0x4649, 0x4) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x4c885) recvmmsg(r2, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}], 0x1000011a}, 0x4}], 0x1, 0x400101c3, 0x0) close(r2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @remote, 0xb}, 0x20) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c016003010902240001010000000904690202ff5aa30009052402100000fa0009058202400000000049942a843b6e10dfd37905e2f4fc5b5116976b192ac4868f0766a29d42f33e3001e015fcd34fbbd33c270debebe15c9f5bb19779af4932c2fdf9daaa6269f86ea81a37a56f92037c4e209eb0817eeeed6ab3bcc0fcf6f164c1a87172540caff08d863fde84b8c32178a79419bc7128538ef63a70eda805e4365d72"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009a40)=ANY=[@ANYBLOB="2800000002030104000000000000005b65b400090900020000000001300000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) io_setup(0x5, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ppoll(&(0x7f0000000040)=[{r6, 0x5}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000500)={0x1, 0x2000, 0x4, {0x2, @win={{0xfffffffe, 0xfffffffd, 0x0, 0x400}, 0xb, 0xa, 0x0, 0x0, 0x0}}, 0x405}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x10, {0x10, 0x9, "3d4f9a28d8e7cbac1a5a41e2d006"}}, &(0x7f0000000980)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, &(0x7f0000000100)=ANY=[@ANYRES16=r4], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x9, 0xb, "148ab067", "4b27bd28"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x8, 0x5, 0x3, 0x4, 0x5}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x20, 0x8, 0x82, "e9962ca454e2ae0c9fc95ed8602df42f5c306f24f97d9f25b95448959109980a8989da1d56d00daeb5462b350c8e425d8b658f730fd1dbdb7ef32b182e5998ff7b13cad384ba8eaddf2cdc88be5cec4125996b84d7e5a533d4afc65c88ec590b84aaa95989bb70ddb2bf3740c1c4d35874a935b31952ee77ceb13321d1341c413c01"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000440)=ANY=[@ANYBLOB="20000400000008004035"], 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000600)={0x40, 0xb, 0x2, "9cf3"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xfffc}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "7793"}, 0x0, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io(r3, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 2m5.082343748s ago: executing program 1 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xff, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x8, 0xb}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m4.47809655s ago: executing program 1 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x4048081) connect$can_j1939(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_clone(0x11a6100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='hfsplus\x00', 0x0) r4 = fsmount(r3, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r4, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m49.303709123s ago: executing program 32 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x4048081) connect$can_j1939(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_clone(0x11a6100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='hfsplus\x00', 0x0) r4 = fsmount(r3, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r4, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m48.189771945s ago: executing program 2 (id=338): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x481) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 1m47.93261953s ago: executing program 2 (id=340): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r4, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) 1m46.89580429s ago: executing program 2 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2902, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235004000000f30b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d90000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3166b857000f00d0", 0x54}], 0x1, 0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000000c0)={0xfffffffffffffffe, 0x1}) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0x70bd27, 0x4000}, 0x10}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x84081, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x101100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0xc0044dff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.903330799s ago: executing program 2 (id=348): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(r0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1m45.881037989s ago: executing program 2 (id=349): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m45.438832218s ago: executing program 2 (id=352): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000018c0)={0x1, &(0x7f0000001800)=[{0x92, 0x187, &(0x7f0000000800)="37a6c0f9362b72a96c0bff206a0a3f95050a0d79ee95f59e117f71c07800f43d61abf0332d96036921cecddcee20309509636bc3e5fdbb7eee4fb141f19350c0da1a0d52ad0da39d16702fd367523d49899986c40e261b583f94106a7553ed36c85d09809a71e73265c8a3612ea3a4bf4c4c5a64f0fe0c789dda3aa9ddce0130e90dbc7781a9bf5209522d62c41f2b8fef762bd756098901a8784f9ae2849f8c329a903befa402a89e8a2d5cacc9895e701d536f88fd6f166debeb7c35f0778e0fc7740ee49577687f35cae24ab4e75b77028276a005f47fd90596930bd19eb5b80d5af2985d7317d740a52f81bd46d8aeac18423d579c86708105aab7079e15c210ab617a4a6f6fe7712bfb350f0242a1c20ff921aad1889f47a12a496c757c3a20db06a816b54a097760bafed49bb96daabe6686ea41ee4245b04650b250b24ef7ea47fa99177c87723342226ca0b7f3fbf6409f940c3b292585838048718b9ee2e9bbd8bc82ed36aae7a197d1c6c6827507205d6765fd005fd712e54129d09bf2d5c46f5839"}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 1m45.32909671s ago: executing program 33 (id=352): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000018c0)={0x1, &(0x7f0000001800)=[{0x92, 0x187, &(0x7f0000000800)="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"}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 11.655968174s ago: executing program 3 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r8], 0x3c}}, 0x0) 11.048433606s ago: executing program 3 (id=699): socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0x9, 0x0, 0x1}, 0x0, 0x0, 0x0) 10.091991185s ago: executing program 3 (id=701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x101, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8a}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.943711697s ago: executing program 5 (id=704): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 8.951992867s ago: executing program 6 (id=705): prctl$PR_SET_KEEPCAPS(0x8, 0x85) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x3, 0x1000000000000, &(0x7f0000000340)="cbe601"}) 8.814465529s ago: executing program 5 (id=707): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000021401002cac7000fddbdf25090003"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) 8.75556289s ago: executing program 3 (id=708): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000000002, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) accept(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x3d46, 0x0, 0x0, 0x142}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 8.523943955s ago: executing program 5 (id=711): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) statx(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x100, 0x0, &(0x7f0000000640)) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) syz_clone(0x20200, 0x0, 0x0, &(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)="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") mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000003e40)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c003d23c12f26a79ad95409eea44e4f29b1b1132d0f0ba8f6e383bb0726fbcbdee12d50b2dc2e1484c268d1ebc180700e57743be45d267a44f200756233"]) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) creat(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, 0x0) write$binfmt_elf32(r2, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 7.124422052s ago: executing program 6 (id=713): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0x8000, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb}}, 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6.019314573s ago: executing program 6 (id=715): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.739991418s ago: executing program 4 (id=717): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x803}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}]}], {0x14}}, 0x60}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.588625342s ago: executing program 4 (id=719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000000), 0x4) 5.431602785s ago: executing program 5 (id=720): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x4) 5.361850626s ago: executing program 6 (id=721): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.000384003s ago: executing program 5 (id=722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x101, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.766980288s ago: executing program 5 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1b, @ipv4={'\x00', '\xff\xff', @loopback}, 0x106}, 0x1c) 4.756729748s ago: executing program 0 (id=725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000002c0)) 3.744109548s ago: executing program 0 (id=726): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 3.60097052s ago: executing program 3 (id=727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r8], 0x3c}}, 0x0) 3.563895741s ago: executing program 6 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) 2.867845954s ago: executing program 4 (id=729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xe, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.464729182s ago: executing program 6 (id=730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) statx(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x100, 0x0, &(0x7f0000000640)) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) syz_clone(0x20200, 0x0, 0x0, &(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)="93deced293a8922a65ea628df3c69ce0c3cbd0a581ee6dee882a7879bcf25e1cec4d692537223e947d259ac59afd8895d1a79e07b2288553ee87e7cbca5f91b8b65688e8dbe666331d265034d3e379b5c63b36755ac30b5f7d8cc046971f45981d2d86f795e77e67347d03eb5e15437eef2da49d359a8030199b4024db29858925fd55e5403d45074f9cf4021163bc01e5ac7b3731edd980f8e41a756e32507fabb67b75d4e592e3ce4044e89e70bb992765971321d6211f5d8548d4ade380e27c44faa5a30b20d5f2bc4a1a969c2f008c81d5fac6ad4a9019aad1122fc6340021dd012f2bf6e74162a878392fc032de15d6f87cdcf393b931b9bd99e7c4ebc06e3d4ef290f421907b8b55e066948b78919299daa9fd4e852f69f13afd2ccf1b0777fda166ec9f18fea8d1cdaa21cab327fe842d2e163cae8f40dec184d88f89ab89f06d82f94f6bf1315a679173310536579692ed115e3ca046911b7680e14bbeb206b2bdf4d364670c30fa7faba9a02a90b89dc18cd97d5161f6b805ed5d6d9defd972567d2da99b9c9d72f4aa67f1dcad9bebe4481d2c900194a9ddc4964d10a95a7e0e6a17a8873bf4de9a5f1d3cf4ed81c730551e8b7d51e1470f1d5fd6d5fc07d972df6d25c997209aaf387ad68c2d261af092e60c05b1a046e0d81db22e9f6d2c7f29cc4f8abc8a669e0a10af2801254ac0cda964639f015e15fd4e726bb5cc576da0c50d237dddd797e24514f5e7b6b5daba38d645d61c75cf4c1519ba1824c1ab4a856419925fd63d1f1b6a5b8b232aa316a4875420c32673ad759fd4d1a1ac3ebe8725b804eff2a8c960cd759dbe9c7f1edf3f109cba320ec33cc4e4052a293b7f3bc32702d385e11360a4168e5888a02be35c8ee086ecedddc895ee93b5f0bf002056a2ec2691b68e822e143bf78b9bdbd01c30826767d186621d47659577d24b7c3a53e035688c567a5d89471eb5421ac9943447828cfddff83b697ae517afafbd5209803c405c539c4e037a993c74f21086c10abbfbc435c2a0d3e2126657359935a9f9b4b2a99cd9035fa9d79f1959aac533a432f898ee89bb66a476f92f52b077a4a7889fced09675d803c8ed2d8fc022936b528bbb17c4c258ef8d59c1fa902a9290f1b212ff4ca29b8f12eb6ef5db9f0feba58e9d711f3c485cba4e218b57072fcd59f3e7a68c8a76cc4e7d9fd178b9de769ed7b69489ce0ac4904e90a0ae5bca657d20c7993ccd577ddfd3278a056b2d183dd1b2b12e681b1430be743f43e10460ad300eb791f09373c0e407fcafaf9781adab6945182eb805a97a85ea46c24e8beaf8da038b9975ddf7828830871c80e5fcace86ea2381090f9dca9157f30a164420138a77f22cb2218a7a3882c0eb30038422eb9c1393eddecefb9a19bab225e7cb0a52b269e4d6ecdf7ae746129363ea2927740eaeaacba28e609310132002783cc57b62b7da9e76ca74f4dde2ec886ef97bd2ea66c72dfdc3acd9bb489bab30601c335ed51ef7f0a7deba70795db33d6d28b30b27b4109bb91153b45655c99514498ad21483d6da77b1ccaefbaa6302b6ef03518f7404224bc1e64df9b36bc4e35b9fba87eb6c0796a09c977f432e6db4d6ddcb3f6e57c3e8b1eacee1efd8cef7bf0cd1b89f33f3fd4d419c79702c88721de835766c1351ffea38f2268b486735575ca128ecc76a229996529575f08bdf8bc16c86f9fa0073202c4f4ae1f546adec04813b9c768189a078d710e1027512fdf003c6eb58113d7a7c4decffada91efd1b0e7d675366887cb8abdcb2e8ac54e3608496d03e2e59f432baeb50a6ca62fe8f19d7432cb6f6b01d3c5367983b481ab50f195f88efe1b570ca0e7ae05c64bea597caae60b1c512cdd21759475aeca3785d5c13302e561b285dcb18e90e6806f6534112519a8d5ebc000780a8e92ea33226987ecb467d7cdcd4294622ed0fa3f87abf0fb0830514cde8773078947094d7ebe016e431a3a6599f309852399ee4dba7e4e85f868ad80f94cfe09a31a8cec100964e6ad8e605f2c20f7645bbb6ec76a0ecd3310b2bed01b4800de525d2ae9fe991d525cc532ca47c1f4bcdd298492f8e420ed7f732ebc082f21c75d251d8feeb02fcdf8278dda4b6e756fbe585fe770f0d0e176661ad456747551a786fa35e9dfa0db1fb0ee72124c0b561882a052c2a2be4afa656ed0cb472f9a07198f9d8b29ad042ba819808103679bbc84ec282b72bdb71036a2a3841a53e7e748f404ab93bb87d3fbd6f2c88844d3112554f55d24223001fa94d614af13ef30225dc05a4fe1cc4effb206ecf201a08e5be9a05e9f136e585cb624abfb0b1a51c68d28e6f41dd0d743fded006841260d8b0b3e3bd0ad8079c106e26c2ecf3d5bf6241eff36c05741897de8c55fa8985ae7b33a0e5846d28d28ab2b4fe6c72790caaba4e0624e1057cdd023b0b77fbd2d881726927d50ddccc6cefc413cf3db982a966145efca9d2c0a92dbab262daeb6d816eaab78a46e0cccfca7a1e3703ef6e036e33fd7b20500750aa9f6be29fcc5fdfbc54777ab167d4949549b69ab1414103fb71a32425e522d6832c47a678305e5d9d8b044f1151dc6b0a6f28f148fedec63ec649a283fcbe8dd668254152e78d619a5ec8109f1f05bc660b094b6ce995f5b5d3eca270415a03dc085caba7f965f0b4e5dce81ac3bb90185cc236c84540f073992f398a26d74b3c2c492aa11e19cb1e7a591db29ec2970da0e75fcb7d5d7c29113fd04b066da738bbf1dbc5f23dc658952115bd90017743de83e69372a441ad6a49545fb3964f6786de349f6f88a0a3350d15d5740a919afab23be080436d696e494ec93f8072c67ef4bc21774867851df9475c205d98b8b27a930d0c943c526f3105f52fc6d2c28c89848ccf965a7a1f10c0ac2b8bf4526f2f79d7c5aefe7f95e65ca07dcb01391159026883d98a3389b3b1fc1d280e97061e641c4a82274c889df12e93daba0fb1568fed3e74cd3d4dc357b9fa6e5bc34dbf7a5bcb4730b02848c5d29a2decdd8adbcebce5139b11d00fd15226a83700907b464c19925fd96780ad3ad55553a828934be2809403733ac50aba9d80f1738dd187a9159d6a15d7b6018ae24c31c386353490ddc2acc1fb5362d05aafbb1883bd20ded82819cc0d933ddaad9b31e612fe9def79313e57976b7049e57f089a27479fe9abc86b2f0276ea2359a3d961a17ed49cb931074126692156555fee99896be881d0e99a57887a0ecb64c82c251ead0418bb87c7dd37f3ae2ed7ba7987c0f8fc0d897a50a88043f1c619089e3f6dd71b4ca0471167a77af4296ceabac54ce096bbeb3d4f9e92765d84ccc645c94968f94f89cbe0c20412d4e1eb6395242de86a6f5b31e3012ab8e3a7c14b08fb2f204f46abaaf38537a30a3db72ec33694159d1ffdf91f0cc4f425c6850d2b634836f3769a672fdaedb6a20f17405fc2c119ec3ab146d2c9bcdd5907691b576998cf246f268727c8edf8552090aeb23cdcc1922e26d38870beadd3b42a5e8bb3652f552a34d8dd0f98e5be01964db39eb849c6e32069b4d786c0e5972120ab34e351f8ae0376d6e578202988e5e0b17a49014a41fa356a1880f6a427c40c98aa8b6521eacf97322f78ae37aedcec0c0aa8f54086bd0d3522169c4351b52712006605885b962a1d85a5a61965c0aaa388e199c79b900db07fb0f64433a9dfa139b9f9020e0452c25d97e9c27de2657f0833ec7605d3b62e50030a07f4a8ce2621ada26539f5b5bbf211fb651f33c5ad681a990804e5aa1a897b84437808b857e48fa67e20f9783c98c086f042ee83942171bc533e08c1b3a878eed535d9c140111951072abf8e84109d14974365c4dea529132affa657475011b3caef4e8d8c3d189b7e8731c1f5687080000a5c616f1c3ebb7b6ebc94a2448036209366f9f5dc21f43c477733ecefac918b732812a429067afb0e3b6d8caeab89ab1bd517a437af8d92180496f7657be3d70ec77f251c57bc440a02d9633fc2b678d54a0ec22ef946e4c9b7fb64cc8d96e628d0cdb14957f5ef2413f159200c9fc97319aa0c4507b63670dc975ee6e8d24ca98398693a95a28ae2f79eaa4ac7a6a537360e8a9db547f5218dab935643b128dfaf2245f71aa9bffea4465e4c3613c17e27d2050b4f35d5b85bf711c2046fbda062b38d94d51652696e3916cf0f2e0bcd09345ced9a7afbed09f993b7cb4dc0c0996ee56e0973b0625ca28fbed970bc688e7ec00dd56869d6aa99ec8f031bf1721e11b42052b5bb7c8040deca6c9656850777c4a743222215c5ec7f9ffb224537d3b6bcb6f61e3efd9e49fd99ccf5a8e48e8f8c3cf83aea118563367a96f0aa4bca8754710941abc8fb9d17b6035f98015d43228a4bbcd688d2efd8fc2580b81f22fd9d7a78b03a15336cd2eb9d733e07497bf2a49b4093f29afae6c1403618bf63cb245556420830a646bfefed9d0a00b61c32f4afb78d4a8a29ce12e8ff45821342093392f5ceb22ec2ddb9f29712edf6c122bbfca2f54618c1dc03e25f899228cb6ae6a506d175c61c76c2b85893678013ed379dd72466bc2096aeb8d1abee32883c90ca0070df93284996c1c332698ecf8093107ebdb6181894a1aa3e9ff03e2be6eaa6dd7d4f80b52368135693fa3a65f633c6c0d6a4e4bcd99f416ce93518aba94663a6603ad77994e87ed0681f0923d7c6180d38fe7c226a8aae64391eb96d24a550232a8078dcc3482e61eff8c946b47d1c87c8dd9af0f588461369e462bc6f5135c71b931d8534693256141f0918c9cf7eb507b149105c8f8d28e65629eda5092f864edf6027a9824afb41edd71802d3d2f86a0cc7adac3bc3b49bc17fdb289aa0e3c19023ed6980d961d49f80e571028a77cf86bd838f6b40e8bfe3bbb80a8aa1ebc7194761f1d893abd2933c351062aceb77be0d14f35fa4f4f216ffe95e72ea18ca1bf5566b5e455e08d1fccd25e1d8cf220e7b368e9d47eaa2e19bd4b6ab3cc06d520c7654dab57bbcb7c2333726108c95d946928737c7c0f706adb80acb5a293a34ee0b8be8bd5d29e279659933c16f836a246b3150263f91017dfe81e149c86f95910bd1440b6adcc78d796afa1db9f9d52a555bc6641fd3fe0a7d771722d7f4592e69bb522e9c98716c3763a27367dce17f9d153f9b779df7d5b5dfcfedbda2a5fb36ba2975260d74d5a62aad3409a7d43296a23082e5471c652b991c158eb155a9df63bf9b6bb5f914a2557447877c94700ce99f118180f78d2e6fe9c2b48d02f3807f2cde7ef0096fae5c95cb45de62142e33421eac5b366e508a66a4a51c2df4cd04e0fcaf05a83322edfe3a67635445b379545d9ad02c2405f0b8e7a78140c148e071246ad899a2ce80b34e32168623d88a373a3f0dd5732d29dc2ce1f25bf5bd653f806b388") mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000003e40)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c003d23c12f26a79ad95409eea44e4f29b1b1132d0f0ba8f6e383bb0726fbcbdee12d50b2dc2e1484c268d1ebc180700e57743be45d267a44f200756233"]) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) creat(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, 0x0) write$binfmt_elf32(r2, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 2.362384834s ago: executing program 0 (id=731): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0x0, 0x11c3adec}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x14) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000000)={&(0x7f00003ae000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x15, 0x5, 0x0) readv(r0, &(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.277436035s ago: executing program 3 (id=732): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.115753738s ago: executing program 0 (id=733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x101, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8a}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.03690498s ago: executing program 4 (id=734): syz_init_net_socket$ax25(0x3, 0x3, 0xc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read$msr(r3, &(0x7f0000000380)=""/200, 0xc8) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x4050) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept4(r4, 0x0, 0x0, 0x0) 819.001354ms ago: executing program 0 (id=735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x101, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 573.777259ms ago: executing program 0 (id=736): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xe6, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000086b1d01014000010203010902d40003010480050904000000010100000a2401ffff340201020924030103030203400a240502f56bd88fc99c092403060101040625097c010000010200000904010101010200001224a459adab020205000300cf9b35ac4c4c10d9e18e0e2402014001dafa44412933e2de0b24020109043719a789e00b24020105040f068b2b83102402018102cc063a5c6a05028e48b80724010909021009050109200006071007250102013f060904020000010200000904020101010208a44c5f4509058209ff03fc010d072501"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x40, 0x44, 0xf, 0x40, 0xc}, 0x58, &(0x7f0000000180)={0x5, 0xf, 0x58, 0x3, [@generic={0x33, 0x10, 0xa, "af8b93aee23e6e5cac560a24b6cfff39c536c76d333c8cdc3f08e376bacaa7f3e7a6e3a9f2ba1b60c02948ea9e2416b3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x4, 0xf000, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f596c6f72a3a40a01650c9a7330a98b3"}]}, 0x2, [{0x2, &(0x7f0000000580)=@string={0x2}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000500)={0x14, &(0x7f0000000680)={0x0, 0x3, 0xf9, {0xf9, 0x23, "7dd9eddef1d69022ccd29e77c685561b24333f4131795961f3307fa74ad867b52cf0b35729143c3a579cb103595d3691a793067bd6bff44c5b312d14a2fd1d6ba9872ecdb5f67dc3fc68bd0f9c284a005893c9f0abfebe5a10c39900f6afd7385ef99daf77d945e02300899e6230cc5818a044ce61d39526a7b8d44f07d1ebd61b488f573e2a445e03bdb1e93fdf3379f49a110c9826530049703da7f47d4dde8075441f90826ca41b1b74024b3a8356fc7bc897e31b0bb824fd3a9580ea080bcaf5145f36a33d8cdad3339832c8a7044f76618719ef99a7c127af3c9396087ea561759149b41d359686944193e53e3e75b14b91b026de"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)={0x40, 0x30, 0x90, "2be11f42733746783b3557b2037906fc718f89352b2107ec5af23ea7a84607edef1eb9303763186b047d914d2df4bf95d9b21ae6f773c930d16cc9802b7e3ba858a92c390b03692df36df907567bf5a1cac72e1a9ca38ef8214551c1372e7aa8fcc372de964304f481754dd0c40ee8ff0c280178cbb4d3ebbd7668f57d776e4677dd899abe7048ac5ae98bbe20f80b2f"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="a221dc07e52d6214f6ad000096aeffd336bf68ea528130cbd3801110726b657905fad8a5f91874445f2f32e6aa3d03034d9d7d352b83f541e0de8d7ef4ab37c122a303dae0edcb730bfc53218d5cfe20a217738b33bb16254f4fbca2"], &(0x7f0000000a00)={0x20, 0x83, 0x1, '\v'}, &(0x7f0000000a40)={0x20, 0x84, 0x4, "9194320e"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x92}, &(0x7f0000000b40)=ANY=[@ANYBLOB="2001b6000000eb10630d921ec78843a92555c55e75333353a91a2b3c1f77ea6bcde9c99d0ac7360104bf40ff40fa6bbec63d4959a645e2e8d17d505ecc530778ac454c19f118f0e9f26c3d09c1d50d44e80c0a31a213cf874484b4b4e9b94646fb97a2811c7f884f57df88246b8d7d197bb9e690ef1a1498ede6d2507e0f8b2efb02cad02715095d73c89037837943ee164e634fc9a474cff45a1b26007c444ec71908b8d4caea67f2b4814f04ea5a1024d4cd93f9037420c60a41cc637338dad867b2e4cb23d1404e19dd379ed166a55e13727b4d81b1b9adbfeb274d2d1e9c7e29b748446e74436465f44de8049d4b1c4fac58f04934"], &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x86}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x941d42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) r2 = gettid() r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x8800, 0x0) 44.016219ms ago: executing program 4 (id=737): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x20000, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0xe, 0x91, 0x1, 0x8000, 0x5, 0x0, 0x8, 0x64246694, r5}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1, 0x6, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) kernel console output (not intermixed with test programs): val 0, changing to 7 [ 100.830333][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.960572][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.002035][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.079835][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.210404][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.213618][ T4986] tipc: Enabled bearer , priority 0 [ 101.240005][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.291842][ T4987] device syzkaller0 entered promiscuous mode [ 101.310846][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.390416][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.440470][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.468958][ T23] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.506138][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.535243][ T4985] tipc: Resetting bearer [ 101.585642][ T4985] tipc: Disabling bearer [ 101.626878][ T4993] tipc: Enabled bearer , priority 0 [ 101.655676][ T4993] device syzkaller0 entered promiscuous mode [ 101.662160][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 101.690220][ T4992] tipc: Resetting bearer [ 101.725178][ T23] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 101.800617][ T23] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 101.820471][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.829503][ T23] usb 5-1: Product: syz [ 101.855090][ T23] usb 5-1: Manufacturer: syz [ 101.859742][ T23] usb 5-1: SerialNumber: syz [ 101.894542][ T23] usb 5-1: config 0 descriptor?? [ 101.899829][ T4992] tipc: Disabling bearer [ 101.905856][ T13] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 101.915964][ T13] usb 1-1: config 4 has no interface number 0 [ 101.923184][ T13] usb 1-1: config 4 interface 30 has no altsetting 0 [ 101.995103][ T23] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 102.110333][ T5007] binder: 5005:5007 ioctl c018620c 200000000280 returned -22 [ 102.190409][ T13] usb 1-1: string descriptor 0 read error: -22 [ 102.198837][ T13] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 102.235594][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.260344][ T2360] usb 5-1: USB disconnect, device number 4 [ 102.270367][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 102.295513][ T2360] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 102.322493][ T13] dw2102: su3000_identify_state [ 102.327389][ T13] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 102.378411][ T13] dw2102: su3000_power_ctrl: 1, initialized 0 [ 102.399402][ T13] dvb-usb: bulk message failed: -22 (2/0) [ 102.435263][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.530621][ T13] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 102.552248][ T13] usb 1-1: media controller created [ 102.561144][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 102.567339][ T13] dw2102: i2c transfer failed. [ 102.591110][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 102.625874][ T13] dw2102: i2c transfer failed. [ 102.649131][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 102.678158][ T5023] bond0: option primary_reselect: invalid value (255) [ 102.686200][ T13] dw2102: i2c transfer failed. [ 102.700340][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 102.737481][ T13] dw2102: i2c transfer failed. [ 102.778615][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 102.816618][ T13] dw2102: i2c transfer failed. [ 102.860105][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 102.892630][ T13] dw2102: i2c transfer failed. [ 102.908957][ T13] dvb-usb: MAC address: 02:02:02:02:02:02 [ 102.989389][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.069395][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 103.107336][ T13] dw2102: command 0x0e transfer failed. [ 103.127200][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 103.166573][ T13] dw2102: command 0x0e transfer failed. [ 103.180465][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.460353][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 103.510752][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 103.518249][ T13] dw2102: command 0x0e transfer failed. [ 103.536207][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 103.562406][ T13] dw2102: command 0x0e transfer failed. [ 103.590658][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.603998][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 103.609793][ T13] dw2102: command 0x51 transfer failed. [ 103.633381][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.636026][ T13] dvb-usb: bulk message failed: -22 (5/0) [ 103.696933][ T13] dw2102: i2c probe for address 0x68 failed. [ 103.710330][ T4232] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.724517][ T13] dvb-usb: bulk message failed: -22 (5/0) [ 103.744643][ T13] dw2102: i2c probe for address 0x69 failed. [ 103.765767][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.784877][ T13] dvb-usb: bulk message failed: -22 (5/0) [ 103.801020][ T13] dw2102: i2c probe for address 0x6a failed. [ 103.822975][ T13] dw2102: probing for demodulator failed. Is the external power switched on? [ 103.864816][ T13] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 103.873142][ T4232] usb 3-1: config 0 descriptor?? [ 103.951049][ T4232] hub 3-1:0.0: USB hub found [ 104.150340][ T13] rc_core: IR keymap rc-tt-1500 not found [ 104.156172][ T13] Registered IR keymap rc-empty [ 104.210465][ T13] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 104.220395][ T4232] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 104.245503][ T13] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input9 [ 104.289492][ T13] dvb-usb: schedule remote query interval to 250 msecs. [ 104.327235][ T13] dw2102: su3000_power_ctrl: 0, initialized 1 [ 104.357695][ T13] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 104.370484][ T4232] usbhid 3-1:0.0: can't add hid device: -71 [ 104.379486][ T4232] usbhid: probe of 3-1:0.0 failed with error -71 [ 104.410634][ T13] usb 1-1: USB disconnect, device number 8 [ 104.491051][ T4232] usb 3-1: USB disconnect, device number 7 [ 104.523759][ T13] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 104.551426][ T5035] tipc: Enabled bearer , priority 0 [ 104.581904][ T5035] device syzkaller0 entered promiscuous mode [ 104.631155][ T5035] tipc: Resetting bearer [ 104.690775][ T5034] tipc: Resetting bearer [ 104.740991][ T5034] tipc: Disabling bearer [ 105.008263][ T5049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 105.399423][ T5073] bond0: option primary_reselect: invalid value (255) [ 105.600615][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.733663][ T5079] tipc: Enabled bearer , priority 0 [ 105.768253][ T5079] device syzkaller0 entered promiscuous mode [ 105.850416][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 105.859807][ T5079] tipc: Resetting bearer [ 106.011864][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.102458][ T13] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 106.117431][ T13] usb 4-1: config 4 has no interface number 0 [ 106.143291][ T13] usb 4-1: config 4 interface 30 has no altsetting 0 [ 106.325905][ T5078] tipc: Resetting bearer [ 106.403880][ T13] usb 4-1: string descriptor 0 read error: -22 [ 106.404460][ T5078] tipc: Disabling bearer [ 106.413900][ T13] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 106.458447][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.571724][ T13] dw2102: su3000_identify_state [ 106.578962][ T13] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 106.597711][ T13] dw2102: su3000_power_ctrl: 1, initialized 0 [ 106.617235][ T13] dvb-usb: bulk message failed: -22 (2/0) [ 106.654227][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.743023][ T13] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 106.777678][ T13] usb 4-1: media controller created [ 106.805431][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 106.832330][ T13] dw2102: i2c transfer failed. [ 106.870193][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 106.900408][ T13] dw2102: i2c transfer failed. [ 106.927420][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 106.950505][ T13] dw2102: i2c transfer failed. [ 106.967305][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 106.996264][ T13] dw2102: i2c transfer failed. [ 107.016934][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 107.060651][ T13] dw2102: i2c transfer failed. [ 107.083614][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 107.117606][ T13] dw2102: i2c transfer failed. [ 107.129773][ T13] dvb-usb: MAC address: 02:02:02:02:02:02 [ 107.180953][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.246455][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 107.283000][ T13] dw2102: command 0x0e transfer failed. [ 107.288603][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 107.333663][ T13] dw2102: command 0x0e transfer failed. [ 107.674826][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 107.681888][ T13] dw2102: command 0x0e transfer failed. [ 107.708144][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 107.714673][ T4786] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 107.730472][ T13] dw2102: command 0x0e transfer failed. [ 107.751354][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 107.774347][ T5098] loop6: detected capacity change from 0 to 7 [ 107.777461][ T13] dw2102: command 0x51 transfer failed. [ 107.789679][ T13] dvb-usb: bulk message failed: -22 (5/0) [ 107.806805][ T13] dw2102: i2c probe for address 0x68 failed. [ 107.848120][ T13] dvb-usb: bulk message failed: -22 (5/0) [ 107.858752][ T13] dw2102: i2c probe for address 0x69 failed. [ 107.882893][ T13] dvb-usb: bulk message failed: -22 (5/0) [ 107.888900][ T5098] Dev loop6: unable to read RDB block 7 [ 107.903158][ T13] dw2102: i2c probe for address 0x6a failed. [ 107.915543][ T13] dw2102: probing for demodulator failed. Is the external power switched on? [ 107.932255][ T13] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 107.942243][ T5098] loop6: AHDI p4 [ 107.947342][ T5098] loop6: partition table partially beyond EOD, truncated [ 107.960383][ T4786] usb 3-1: Using ep0 maxpacket: 32 [ 108.083925][ T4786] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 108.098871][ T4786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.130360][ T13] rc_core: IR keymap rc-tt-1500 not found [ 108.136136][ T13] Registered IR keymap rc-empty [ 108.143459][ T4786] usb 3-1: config 0 descriptor?? [ 108.160167][ T13] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 108.191632][ T13] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 108.232387][ T13] dvb-usb: schedule remote query interval to 250 msecs. [ 108.239466][ T13] dw2102: su3000_power_ctrl: 0, initialized 1 [ 108.282246][ T13] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 108.329729][ T13] usb 4-1: USB disconnect, device number 5 [ 108.400484][ T4786] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 108.431817][ T4786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.470767][ T4786] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 108.489904][ T4786] usb 3-1: media controller created [ 108.498373][ T13] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 108.542871][ T4786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.580047][ T5117] tipc: Enabled bearer , priority 0 [ 108.606990][ T5117] device syzkaller0 entered promiscuous mode [ 108.626250][ T4786] az6027: usb out operation failed. (-71) [ 108.660429][ T4786] az6027: usb out operation failed. (-71) [ 108.668657][ T5117] tipc: Resetting bearer [ 108.690543][ T4786] stb0899_attach: Driver disabled by Kconfig [ 108.698334][ T4786] az6027: no front-end attached [ 108.698334][ T4786] [ 108.716771][ T5115] tipc: Resetting bearer [ 108.737336][ T4786] az6027: usb out operation failed. (-71) [ 108.755204][ T4786] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 108.761184][ T5115] tipc: Disabling bearer [ 108.790448][ T4786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 108.817307][ T4786] dvb-usb: schedule remote query interval to 400 msecs. [ 108.860503][ T4786] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 108.924795][ T4786] usb 3-1: USB disconnect, device number 8 [ 109.018076][ T4786] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 109.203265][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 109.423196][ T5127] tipc: Enabled bearer , priority 0 [ 109.525596][ T5128] device syzkaller0 entered promiscuous mode [ 109.604248][ T5127] tipc: Resetting bearer [ 109.610377][ T4786] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.719984][ T5126] tipc: Resetting bearer [ 109.748604][ T5126] tipc: Disabling bearer [ 109.860354][ T4786] usb 3-1: Using ep0 maxpacket: 8 [ 109.909204][ T5131] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 110.077625][ T5135] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.140523][ T4786] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 110.162700][ T4786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.181452][ T5135] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 110.192057][ T4786] usb 3-1: Product: syz [ 110.205174][ T5135] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 110.211801][ T4786] usb 3-1: Manufacturer: syz [ 110.237308][ T4786] usb 3-1: SerialNumber: syz [ 110.262565][ T4786] usb 3-1: config 0 descriptor?? [ 110.280309][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 110.332308][ T4786] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 110.622803][ T5144] device syzkaller0 entered promiscuous mode [ 110.912734][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 111.150907][ T2360] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.181072][ T5122] udc-core: couldn't find an available UDC or it's busy [ 111.199060][ T5122] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.330527][ T5153] tipc: Enabled bearer , priority 0 [ 111.391462][ T5154] device syzkaller0 entered promiscuous mode [ 111.400637][ T2360] usb 1-1: Using ep0 maxpacket: 16 [ 111.521090][ T2360] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 111.538754][ T2360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.568301][ T5152] tipc: Resetting bearer [ 111.591484][ T2360] usb 1-1: config 0 descriptor?? [ 111.608893][ T5152] tipc: Disabling bearer [ 111.660481][ T4786] gspca_sonixj: reg_w1 err -71 [ 111.665374][ T4786] sonixj: probe of 3-1:0.0 failed with error -71 [ 111.699361][ T4786] usb 3-1: USB disconnect, device number 9 [ 111.950426][ T2360] usbhid 1-1:0.0: can't add hid device: -71 [ 111.960347][ T2360] usbhid: probe of 1-1:0.0 failed with error -71 [ 111.994229][ T2360] usb 1-1: USB disconnect, device number 9 [ 112.178018][ T5164] tipc: Enabled bearer , priority 0 [ 112.228243][ T5164] device syzkaller0 entered promiscuous mode [ 112.286612][ T5164] tipc: Resetting bearer [ 112.317472][ T5163] tipc: Resetting bearer [ 112.371259][ T5163] tipc: Disabling bearer [ 112.425915][ T5169] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 112.473150][ T5169] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 112.485880][ T5169] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 112.496451][ T5169] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 112.532604][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 112.667818][ T5173] tipc: Enabled bearer , priority 0 [ 112.677412][ T5173] device syzkaller0 entered promiscuous mode [ 112.696517][ T5173] tipc: Resetting bearer [ 112.704797][ T5172] tipc: Resetting bearer [ 112.715841][ T5172] tipc: Disabling bearer [ 112.790085][ T5178] device syzkaller0 entered promiscuous mode [ 113.065264][ T5186] tipc: Enabled bearer , priority 0 [ 113.074867][ T5186] device syzkaller0 entered promiscuous mode [ 113.097060][ T5186] tipc: Resetting bearer [ 113.112549][ T5185] tipc: Resetting bearer [ 113.122332][ T5185] tipc: Disabling bearer [ 113.440468][ T4232] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 113.450525][ T5020] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.700385][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 113.710665][ T5020] usb 4-1: Using ep0 maxpacket: 8 [ 113.841100][ T4232] usb 3-1: config 0 has an invalid interface number: 102 but max is 0 [ 113.859537][ T4232] usb 3-1: config 0 has no interface number 0 [ 114.041751][ T5020] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 114.051028][ T4232] usb 3-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 114.064240][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.073931][ T5020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.087914][ T4232] usb 3-1: Product: syz [ 114.093207][ T5020] usb 4-1: Product: syz [ 114.099546][ T5020] usb 4-1: Manufacturer: syz [ 114.106976][ T4232] usb 3-1: Manufacturer: syz [ 114.114860][ T5020] usb 4-1: SerialNumber: syz [ 114.119661][ T4232] usb 3-1: SerialNumber: syz [ 114.134771][ T4232] usb 3-1: config 0 descriptor?? [ 114.147823][ T5020] usb 4-1: config 0 descriptor?? [ 114.201676][ T4232] usb-storage 3-1:0.102: USB Mass Storage device detected [ 114.209972][ T5020] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 114.231850][ T4232] usb-storage 3-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 114.243031][ T4232] usb-storage 3-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 114.243031][ T4232] Please send a copy of this message to and [ 115.014299][ T5204] tipc: Enabled bearer , priority 0 [ 115.041783][ T5204] device syzkaller0 entered promiscuous mode [ 115.080909][ T5192] udc-core: couldn't find an available UDC or it's busy [ 115.087878][ T5192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.100693][ T5203] tipc: Resetting bearer [ 115.183572][ T5203] tipc: Disabling bearer [ 115.216931][ T4786] usb 3-1: USB disconnect, device number 10 [ 115.354192][ T5208] netlink: 'syz.4.279': attribute type 1 has an invalid length. [ 115.438491][ T5213] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.451301][ T5213] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 115.462270][ T5213] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 115.484301][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 115.493642][ T5212] tipc: Enabled bearer , priority 0 [ 115.501180][ T5212] device syzkaller0 entered promiscuous mode [ 115.540854][ T5212] tipc: Resetting bearer [ 115.566048][ T5210] tipc: Resetting bearer [ 115.612157][ T5210] tipc: Disabling bearer [ 115.627174][ T5020] gspca_sonixj: reg_w1 err -71 [ 115.632433][ T5020] sonixj: probe of 4-1:0.0 failed with error -71 [ 115.646568][ T5020] usb 4-1: USB disconnect, device number 6 [ 115.709385][ T5216] device syzkaller0 entered promiscuous mode [ 115.898884][ T5230] tipc: Enabled bearer , priority 0 [ 115.906664][ T5230] device syzkaller0 entered promiscuous mode [ 115.937156][ T5230] tipc: Resetting bearer [ 115.945674][ T5229] tipc: Resetting bearer [ 115.959940][ T5229] tipc: Disabling bearer [ 116.155861][ T5236] tipc: Enabled bearer , priority 0 [ 116.163692][ T5236] device syzkaller0 entered promiscuous mode [ 116.185727][ T5235] tipc: Resetting bearer [ 116.207540][ T5235] tipc: Disabling bearer [ 116.218290][ T5240] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 116.241838][ T5240] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.254346][ T5240] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 116.265680][ T5240] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 116.297115][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 116.598500][ T5255] tipc: Enabled bearer , priority 0 [ 116.659390][ T5259] device syzkaller0 entered promiscuous mode [ 116.700993][ T5255] tipc: Resetting bearer [ 116.741224][ T5254] tipc: Resetting bearer [ 116.766492][ T5254] tipc: Disabling bearer [ 117.367647][ T5271] tipc: Enabled bearer , priority 0 [ 117.385506][ T5271] device syzkaller0 entered promiscuous mode [ 117.421651][ T5271] tipc: Resetting bearer [ 117.448246][ T5270] tipc: Resetting bearer [ 117.473768][ T5270] tipc: Disabling bearer [ 117.873727][ T5263] syz.2.297 (5263): drop_caches: 2 [ 117.880653][ T5020] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.163390][ T5020] usb 5-1: Using ep0 maxpacket: 8 [ 118.490610][ T5020] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 118.512026][ T5278] tipc: Enabled bearer , priority 0 [ 118.519643][ T5020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.519937][ T5278] device syzkaller0 entered promiscuous mode [ 118.543806][ T5020] usb 5-1: Product: syz [ 118.560918][ T5020] usb 5-1: Manufacturer: syz [ 118.616869][ T5020] usb 5-1: SerialNumber: syz [ 118.642549][ T5277] tipc: Resetting bearer [ 118.650127][ T5020] usb 5-1: config 0 descriptor?? [ 118.678879][ T5277] tipc: Disabling bearer [ 118.702384][ T5020] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 119.561122][ T5275] udc-core: couldn't find an available UDC or it's busy [ 119.575747][ T5275] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.663943][ T26] audit: type=1326 audit(1757692948.053:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f33b8ba9 code=0x7ffc0000 [ 119.686117][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.739213][ T26] audit: type=1326 audit(1757692948.083:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f33b8ba9 code=0x7ffc0000 [ 119.835720][ T26] audit: type=1326 audit(1757692948.093:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f33b8ba9 code=0x7ffc0000 [ 119.909077][ T26] audit: type=1326 audit(1757692948.093:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f33b8ba9 code=0x7ffc0000 [ 119.939349][ T26] audit: type=1326 audit(1757692948.093:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fa3f33b8ba9 code=0x7ffc0000 [ 119.965870][ T26] audit: type=1326 audit(1757692948.093:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f33b8ba9 code=0x7ffc0000 [ 119.998460][ T26] audit: type=1326 audit(1757692948.093:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f33b8ba9 code=0x7ffc0000 [ 120.020899][ T5309] tipc: Enabled bearer , priority 0 [ 120.039668][ T5309] device syzkaller0 entered promiscuous mode [ 120.057056][ T5308] tipc: Resetting bearer [ 120.080411][ T5020] gspca_sonixj: reg_w1 err -71 [ 120.085267][ T5020] sonixj: probe of 5-1:0.0 failed with error -71 [ 120.093825][ T26] audit: type=1326 audit(1757692948.093:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa3f33b8ba9 code=0x7ffc0000 [ 120.117889][ T5020] usb 5-1: USB disconnect, device number 5 [ 120.129251][ T26] audit: type=1326 audit(1757692948.093:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa3f33b8ba9 code=0x7ffc0000 [ 120.163587][ T5308] tipc: Disabling bearer [ 120.212133][ T5311] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 120.755765][ T5323] tipc: Enabled bearer , priority 0 [ 120.809434][ T5323] device syzkaller0 entered promiscuous mode [ 120.860364][ T5020] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.889481][ T5323] tipc: Resetting bearer [ 120.930071][ T5322] tipc: Resetting bearer [ 120.979049][ T5322] tipc: Disabling bearer [ 121.030198][ T5330] device syzkaller0 entered promiscuous mode [ 121.210432][ T5020] usb 4-1: Using ep0 maxpacket: 8 [ 121.264455][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 121.390492][ T5020] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.480427][ T5020] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 121.489221][ T5020] usb 4-1: config 4 has no interface number 0 [ 121.512322][ T5020] usb 4-1: config 4 interface 30 has no altsetting 0 [ 121.581713][ T5344] tipc: Enabled bearer , priority 0 [ 121.619180][ T5344] device syzkaller0 entered promiscuous mode [ 121.660043][ T5343] tipc: Resetting bearer [ 121.690691][ T5343] tipc: Disabling bearer [ 121.760347][ T4786] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 121.780518][ T5020] usb 4-1: string descriptor 0 read error: -22 [ 121.797985][ T5020] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 121.821119][ T5020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.891789][ T5020] dw2102: su3000_identify_state [ 121.910297][ T5020] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 121.917483][ T5020] dw2102: su3000_power_ctrl: 1, initialized 0 [ 121.936963][ T5020] dvb-usb: bulk message failed: -22 (2/0) [ 121.966424][ T5020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.000451][ T4786] usb 1-1: Using ep0 maxpacket: 16 [ 122.011460][ T5020] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 122.025869][ T26] audit: type=1326 audit(1757692950.413:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b8b14ba9 code=0x7ffc0000 [ 122.059946][ T5020] usb 4-1: media controller created [ 122.065751][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 122.074981][ T5020] dw2102: i2c transfer failed. [ 122.079790][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 122.086045][ T5020] dw2102: i2c transfer failed. [ 122.097926][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 122.113986][ T5020] dw2102: i2c transfer failed. [ 122.120535][ T4786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.144410][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 122.160336][ T4786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.170187][ T5020] dw2102: i2c transfer failed. [ 122.194303][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 122.194330][ T4786] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 122.220256][ T5020] dw2102: i2c transfer failed. [ 122.225173][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 122.226904][ T4786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.239631][ T5020] dw2102: i2c transfer failed. [ 122.250013][ T5020] dvb-usb: MAC address: 02:02:02:02:02:02 [ 122.276995][ T5020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.292245][ T4786] usb 1-1: config 0 descriptor?? [ 122.341736][ T5020] dvb-usb: bulk message failed: -22 (3/0) [ 122.356543][ T5020] dw2102: command 0x0e transfer failed. [ 122.369631][ T5020] dvb-usb: bulk message failed: -22 (3/0) [ 122.384159][ T5020] dw2102: command 0x0e transfer failed. [ 122.720321][ T5020] dvb-usb: bulk message failed: -22 (3/0) [ 122.726100][ T5020] dw2102: command 0x0e transfer failed. [ 122.808408][ T5020] dvb-usb: bulk message failed: -22 (3/0) [ 122.837633][ T5020] dw2102: command 0x0e transfer failed. [ 122.878191][ T5020] dvb-usb: bulk message failed: -22 (1/0) [ 122.905770][ T5020] dw2102: command 0x51 transfer failed. [ 122.920403][ T5020] dvb-usb: bulk message failed: -22 (5/0) [ 122.936470][ T4786] usbhid 1-1:0.0: can't add hid device: -32 [ 122.946956][ T4786] usbhid: probe of 1-1:0.0 failed with error -32 [ 122.953471][ T5020] dw2102: i2c probe for address 0x68 failed. [ 122.985846][ T5020] dvb-usb: bulk message failed: -22 (5/0) [ 123.033590][ T5020] dw2102: i2c probe for address 0x69 failed. [ 123.046687][ T5020] dvb-usb: bulk message failed: -22 (5/0) [ 123.098055][ T5020] dw2102: i2c probe for address 0x6a failed. [ 123.118362][ T5020] dw2102: probing for demodulator failed. Is the external power switched on? [ 123.148861][ T5020] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 123.420452][ T5020] rc_core: IR keymap rc-tt-1500 not found [ 123.426999][ T5020] Registered IR keymap rc-empty [ 123.455745][ T5020] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 123.504018][ T5020] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input12 [ 123.562402][ T5020] dvb-usb: schedule remote query interval to 250 msecs. [ 123.597229][ T5020] dw2102: su3000_power_ctrl: 0, initialized 1 [ 123.617545][ T5020] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 123.667504][ T5020] usb 4-1: USB disconnect, device number 7 [ 123.791834][ T5020] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 124.110437][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.145192][ T5361] binder: transaction release 72 bad handle 1, ret = -22 [ 124.221270][ T5020] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.360350][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 124.381260][ T4195] usb 1-1: USB disconnect, device number 10 [ 124.384749][ T5364] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.396618][ T5364] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.405479][ T5364] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.414352][ T5364] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.453953][ T5364] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.462988][ T5364] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.472263][ T5364] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.481296][ T5364] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.619160][ T5369] tipc: Enabled bearer , priority 0 [ 124.657940][ T5369] tipc: Resetting bearer [ 124.690775][ T5020] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.699194][ T5020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.709440][ T4231] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 124.723864][ T5368] tipc: Disabling bearer [ 124.724690][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.739396][ T4231] usb 5-1: Product: syz [ 124.748938][ T4231] usb 5-1: Manufacturer: syz [ 124.755394][ T4231] usb 5-1: SerialNumber: syz [ 124.808359][ T4231] usb 5-1: config 0 descriptor?? [ 124.820425][ T5020] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.829513][ T5020] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.835701][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 124.857924][ T5020] usb 4-1: Manufacturer: syz [ 124.866317][ T5020] usb 4-1: config 0 descriptor?? [ 124.902568][ T4231] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 125.040479][ T5020] rc_core: IR keymap rc-hauppauge not found [ 125.046515][ T5020] Registered IR keymap rc-empty [ 125.053436][ T5020] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 125.065795][ T5020] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 125.069370][ T5380] tipc: Enabled bearer , priority 0 [ 125.098241][ T5380] device syzkaller0 entered promiscuous mode [ 125.160287][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 125.169564][ T5379] tipc: Resetting bearer [ 125.205714][ T5379] tipc: Disabling bearer [ 125.225847][ T5370] chnl_net:caif_netlink_parms(): no params data found [ 125.434640][ T4199] block nbd2: Receive control failed (result -107) [ 125.455828][ T5388] block nbd2: shutting down sockets [ 125.559759][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.573210][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.587555][ T5370] device bridge_slave_0 entered promiscuous mode [ 125.625222][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.661333][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.674020][ T5370] device bridge_slave_1 entered promiscuous mode [ 125.751917][ T5359] udc-core: couldn't find an available UDC or it's busy [ 125.787297][ T5359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 125.812813][ T5370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.850074][ T5370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.010858][ T5370] team0: Port device team_slave_0 added [ 126.061002][ T5370] team0: Port device team_slave_1 added [ 126.140113][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.167076][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.193628][ T5370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.211513][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.218585][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.244505][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.251813][ T5370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.339484][ T5370] device hsr_slave_0 entered promiscuous mode [ 126.356259][ T5370] device hsr_slave_1 entered promiscuous mode [ 126.370560][ T4231] gspca_sonixj: reg_w1 err -71 [ 126.375493][ T4231] sonixj: probe of 5-1:0.0 failed with error -71 [ 126.385741][ T5370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.393459][ T4231] usb 5-1: USB disconnect, device number 6 [ 126.410419][ T5370] Cannot create hsr debugfs directory [ 126.543922][ T2360] usb 4-1: USB disconnect, device number 8 [ 126.630517][ T4195] Bluetooth: hci5: command 0x0409 tx timeout [ 126.737071][ T5370] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.763644][ T5370] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.774832][ T5370] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.785728][ T5370] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.558634][ T5418] tipc: Enabled bearer , priority 0 [ 127.586559][ T5418] tipc: Resetting bearer [ 127.634587][ T5416] tipc: Disabling bearer [ 127.654026][ T5419] tipc: Enabled bearer , priority 0 [ 127.664950][ T5419] device syzkaller0 entered promiscuous mode [ 127.687760][ T5370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.712972][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.726950][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.745262][ T5419] tipc: Resetting bearer [ 127.764519][ T5370] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.827498][ T5417] tipc: Resetting bearer [ 127.843035][ T5417] tipc: Disabling bearer [ 127.854967][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.866450][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.875622][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.882744][ T5413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.890793][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.904696][ T5424] tipc: Enabled bearer , priority 0 [ 127.913398][ T5424] device syzkaller0 entered promiscuous mode [ 127.920901][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.929723][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.947867][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.955018][ T5413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.970763][ T5424] tipc: Resetting bearer [ 127.984820][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.996753][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.007101][ T5423] tipc: Resetting bearer [ 128.021323][ T5423] tipc: Disabling bearer [ 128.038563][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.048431][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.057363][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.077113][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.086660][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.115714][ T5413] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.177225][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.192237][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.209435][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.218907][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.228943][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.273651][ T5413] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.347219][ T5413] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.460895][ T5413] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.552189][ T4239] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 128.571252][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.579298][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.711234][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 128.799387][ T5370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.699468][ T5413] tipc: Left network mode [ 129.790699][ T4239] usb 5-1: Using ep0 maxpacket: 8 [ 130.131246][ T4239] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 130.150434][ T4239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.190419][ T4239] usb 5-1: Product: syz [ 130.194890][ T4239] usb 5-1: Manufacturer: syz [ 130.199636][ T4239] usb 5-1: SerialNumber: syz [ 130.222045][ T4239] usb 5-1: config 0 descriptor?? [ 130.296409][ T4239] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 130.508520][ T5438] chnl_net:caif_netlink_parms(): no params data found [ 130.551277][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 130.617937][ T5468] tipc: Enabled bearer , priority 0 [ 130.649182][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.666947][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.712473][ T5477] tipc: Resetting bearer [ 130.727576][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.737147][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.752481][ T5471] tipc: Enabled bearer , priority 0 [ 130.760535][ T5466] tipc: Disabling bearer [ 130.770648][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.779295][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.790040][ T5370] device veth0_vlan entered promiscuous mode [ 130.790508][ T4195] Bluetooth: hci5: command 0x040f tx timeout [ 130.833333][ T5471] device syzkaller0 entered promiscuous mode [ 130.858329][ T5370] device veth1_vlan entered promiscuous mode [ 130.885681][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.898594][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.924949][ T5438] device bridge_slave_0 entered promiscuous mode [ 130.942371][ T5471] tipc: Resetting bearer [ 130.966939][ T5467] tipc: Resetting bearer [ 130.984550][ T5467] tipc: Disabling bearer [ 131.008818][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.019242][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.027846][ T5438] device bridge_slave_1 entered promiscuous mode [ 131.048233][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.057209][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.065481][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.075639][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.109415][ T5370] device veth0_macvtap entered promiscuous mode [ 131.146792][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.148890][ T5431] udc-core: couldn't find an available UDC or it's busy [ 131.180050][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.190412][ T5431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.258548][ T5438] team0: Port device team_slave_0 added [ 131.272040][ T5370] device veth1_macvtap entered promiscuous mode [ 131.293582][ T5438] team0: Port device team_slave_1 added [ 131.406017][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.406635][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.416234][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.416252][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.416274][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.417879][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.417891][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.417910][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.418756][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.418805][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.418814][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.418826][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.418834][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.418845][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.418854][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.418865][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.419897][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.444056][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.444715][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.452962][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.452985][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.452997][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.453011][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.453023][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.453036][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.453047][ T5370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.453061][ T5370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.454050][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.454132][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.454726][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.457984][ T5370] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.542098][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.676724][ T4239] gspca_sonixj: reg_w1 err -71 [ 131.689131][ T5370] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.689232][ T5370] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.689259][ T5370] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.824268][ T4239] sonixj: probe of 5-1:0.0 failed with error -71 [ 131.876638][ T4239] usb 5-1: USB disconnect, device number 7 [ 131.924103][ T5438] device hsr_slave_0 entered promiscuous mode [ 131.954137][ T5438] device hsr_slave_1 entered promiscuous mode [ 131.962205][ T5438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.971003][ T5438] Cannot create hsr debugfs directory [ 132.008658][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 132.079191][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.104596][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.129590][ T5413] device hsr_slave_0 left promiscuous mode [ 132.150206][ T5413] device hsr_slave_1 left promiscuous mode [ 132.159611][ T5413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.179475][ T5413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.204197][ T5413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.216421][ T5413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.249530][ T5413] device bridge_slave_1 left promiscuous mode [ 132.258132][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.277574][ T5413] device bridge_slave_0 left promiscuous mode [ 132.284346][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.308231][ T5413] device veth1_macvtap left promiscuous mode [ 132.316810][ T5413] device veth0_macvtap left promiscuous mode [ 132.324236][ T5413] device veth1_vlan left promiscuous mode [ 132.330196][ T5413] device veth0_vlan left promiscuous mode [ 132.459609][ T5413] bond2 (unregistering): Released all slaves [ 132.488770][ T5413] bond1 (unregistering): Released all slaves [ 132.630396][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 132.642709][ T5413] team0 (unregistering): Port device team_slave_1 removed [ 132.657904][ T5413] team0 (unregistering): Port device team_slave_0 removed [ 132.675621][ T5413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.689516][ T5413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.754370][ T5413] bond0 (unregistering): Released all slaves [ 132.792427][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.798920][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.821498][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.838535][ T5526] tipc: Enabled bearer , priority 0 [ 132.894562][ T4786] Bluetooth: hci5: command 0x0419 tx timeout [ 132.919859][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.929752][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.940080][ T5526] tipc: Disabling bearer [ 132.963704][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.797399][ T5544] tipc: Enabled bearer , priority 0 [ 133.835403][ T5545] tipc: Resetting bearer [ 133.863188][ T5541] tipc: Disabling bearer [ 133.882053][ T5438] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.893924][ T5438] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.929693][ T5438] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.992441][ T5438] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.130680][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 134.284343][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.327578][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.354009][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.366317][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 134.382172][ T5438] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.389600][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 134.414434][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.427604][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.458790][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.465949][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.498989][ T5580] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 134.536086][ T13] usb 6-1: config 0 has an invalid interface number: 102 but max is 0 [ 134.557049][ T13] usb 6-1: config 0 has no interface number 0 [ 134.591881][ T5582] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 134.604519][ T5582] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 134.615027][ T5582] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 134.654765][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.710706][ T4786] Bluetooth: hci1: command 0x040f tx timeout [ 134.722006][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.743318][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.753319][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.760464][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.760583][ T13] usb 6-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 134.776545][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.803739][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.811888][ T4239] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 134.828697][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.839750][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.846460][ T13] usb 6-1: Product: syz [ 134.855201][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.867266][ T13] usb 6-1: Manufacturer: syz [ 134.877044][ T13] usb 6-1: SerialNumber: syz [ 134.894290][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.907278][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.916940][ T13] usb 6-1: config 0 descriptor?? [ 134.921035][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.932669][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.942437][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.973168][ T5438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.974077][ T13] usb-storage 6-1:0.102: USB Mass Storage device detected [ 135.002352][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.016961][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.046254][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.070479][ T4239] usb 4-1: Using ep0 maxpacket: 8 [ 135.107015][ T13] usb-storage 6-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 135.126881][ T13] usb-storage 6-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 135.126881][ T13] Please send a copy of this message to and [ 135.222080][ T5593] device syzkaller0 entered promiscuous mode [ 135.430538][ T4239] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 135.479634][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.510617][ T4239] usb 4-1: Product: syz [ 135.528396][ T4239] usb 4-1: Manufacturer: syz [ 135.538469][ T4239] usb 4-1: SerialNumber: syz [ 135.631272][ T4239] usb 4-1: config 0 descriptor?? [ 135.692610][ T4239] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 135.724977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.765484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.820552][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.874381][ T4247] Bluetooth: hci1: command 0x0419 tx timeout [ 137.025765][ T5629] tipc: Enabled bearer , priority 0 [ 137.102866][ T5616] udc-core: couldn't find an available UDC or it's busy [ 137.124381][ T5623] tipc: Resetting bearer [ 137.180517][ T5616] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 137.280980][ T5622] tipc: Disabling bearer [ 137.990471][ T4239] gspca_sonixj: reg_w1 err -71 [ 138.042037][ T4239] sonixj: probe of 4-1:0.0 failed with error -71 [ 138.118474][ T4239] usb 4-1: USB disconnect, device number 9 [ 138.427775][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.486740][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.702362][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.721404][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.806172][ T5438] device veth0_vlan entered promiscuous mode [ 138.831890][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.875930][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.900986][ T4231] usb 6-1: USB disconnect, device number 2 [ 138.907123][ T5658] tipc: Enabled bearer , priority 0 [ 140.498067][ T5670] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 140.506153][ T5670] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 140.800232][ C0] sched: RT throttling activated [ 140.822151][ T5652] tipc: Disabling bearer [ 140.826346][ T4247] tipc: Node number set to 3105488842 [ 141.002613][ T5438] device veth1_vlan entered promiscuous mode [ 141.050660][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.158882][ T5438] device veth0_macvtap entered promiscuous mode [ 141.207634][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.231598][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.261325][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.291086][ T5685] tipc: Enabled bearer , priority 0 [ 141.300444][ T5438] device veth1_macvtap entered promiscuous mode [ 141.308136][ T5690] device syzkaller0 entered promiscuous mode [ 141.642090][ T5690] tipc: Resetting bearer [ 141.782378][ T5684] tipc: Resetting bearer [ 142.030163][ T5684] tipc: Disabling bearer [ 142.092789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.115865][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.137810][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.156301][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.169513][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.187738][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.199427][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.217128][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.230373][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.249408][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.257417][ T5704] device syzkaller0 entered promiscuous mode [ 142.275754][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.291097][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.310787][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.326257][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.350325][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.379344][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.425132][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.460274][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.470175][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.505517][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.541621][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.612165][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.631018][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.650544][ T5438] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.659871][ T5438] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.676783][ T5438] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.702831][ T5438] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.013857][ T441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.038269][ T441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.106143][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.148483][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.179070][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.201713][ T5729] tipc: Enabled bearer , priority 0 [ 143.231584][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.248574][ T5729] device syzkaller0 entered promiscuous mode [ 143.400341][ T5729] tipc: Resetting bearer [ 143.509275][ T5728] tipc: Resetting bearer [ 143.633975][ T5728] tipc: Disabling bearer [ 143.663751][ T5740] tipc: Enabled bearer , priority 0 [ 143.699625][ T5735] tipc: Resetting bearer [ 144.415328][ T5734] tipc: Disabling bearer [ 144.613716][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 145.010463][ T5761] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 145.210316][ T5020] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.520431][ T4195] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.770350][ T4195] usb 1-1: Using ep0 maxpacket: 8 [ 145.950460][ T4195] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.030922][ T5020] usb 4-1: Using ep0 maxpacket: 16 [ 146.040870][ T4195] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 146.067444][ T4195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.100361][ T4195] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 146.110926][ T4195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 146.121285][ T4195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 146.190602][ T5020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.220049][ T5020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.232534][ T5020] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 146.281568][ T5020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.300387][ T4195] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 146.307641][ T5020] usb 4-1: config 0 descriptor?? [ 146.313848][ T4195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.332226][ T4195] usb 1-1: Product: syz [ 146.344087][ T4195] usb 1-1: Manufacturer: syz [ 146.356333][ T4195] usb 1-1: SerialNumber: syz [ 146.375299][ T4195] usb 1-1: config 0 descriptor?? [ 146.400581][ T5769] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.407786][ T5769] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.685387][ T4195] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 146.776479][ T4195] usb 1-1: USB disconnect, device number 11 [ 146.808006][ T4401] udevd[4401]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.891709][ T5799] tipc: Started in network mode [ 146.919209][ T5799] tipc: Node identity d29702137e91, cluster identity 4711 [ 146.958952][ T5799] tipc: Enabled bearer , priority 0 [ 146.980453][ T5020] usbhid 4-1:0.0: can't add hid device: -32 [ 146.986521][ T5020] usbhid: probe of 4-1:0.0 failed with error -32 [ 147.006507][ T5803] device syzkaller0 entered promiscuous mode [ 147.131556][ T5799] tipc: Resetting bearer [ 147.543718][ T5797] tipc: Resetting bearer [ 147.544979][ T5812] binder_alloc: 5755: binder_alloc_buf, no vma [ 147.645421][ T5797] tipc: Disabling bearer [ 147.900031][ T5816] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.986009][ T5822] device syzkaller0 entered promiscuous mode [ 148.810913][ T4239] usb 4-1: USB disconnect, device number 10 [ 148.860662][ T5831] tipc: Enabled bearer , priority 0 [ 148.897457][ T5831] device syzkaller0 entered promiscuous mode [ 148.947104][ T5831] tipc: Resetting bearer [ 149.008885][ T5830] tipc: Resetting bearer [ 149.033788][ T5830] tipc: Disabling bearer [ 149.357384][ T4239] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.052139][ T5872] tipc: Enabled bearer , priority 0 [ 151.084890][ T4239] usb 4-1: Using ep0 maxpacket: 16 [ 151.093537][ T5872] device syzkaller0 entered promiscuous mode [ 151.134313][ T5872] tipc: Resetting bearer [ 151.160482][ T5870] tipc: Resetting bearer [ 151.190206][ T5870] tipc: Disabling bearer [ 151.217605][ T4239] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 151.231541][ T4239] usb 4-1: config 0 has no interface number 0 [ 151.239057][ T5878] device syzkaller0 entered promiscuous mode [ 151.350499][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.450736][ T4239] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 151.480274][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.480447][ T5889] tipc: Started in network mode [ 151.507874][ T4239] usb 4-1: Product: syz [ 151.520272][ T4239] usb 4-1: Manufacturer: syz [ 151.539316][ T5889] tipc: Node identity 12df404b051a, cluster identity 4711 [ 151.545246][ T4239] usb 4-1: SerialNumber: syz [ 151.556533][ T5889] tipc: Enabled bearer , priority 0 [ 151.573808][ T5890] device syzkaller0 entered promiscuous mode [ 151.576489][ T4239] usb 4-1: config 0 descriptor?? [ 151.621571][ T5889] tipc: Resetting bearer [ 151.628770][ T5892] tipc: Enabled bearer , priority 0 [ 151.636812][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 151.642461][ T5886] tipc: Resetting bearer [ 151.652598][ T4239] usb-storage 4-1:0.102: USB Mass Storage device detected [ 151.661501][ T5886] tipc: Disabling bearer [ 151.662374][ T4239] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 151.670513][ T5101] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 151.677934][ T4239] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 151.677934][ T4239] Please send a copy of this message to and [ 151.712016][ T5892] device syzkaller0 entered promiscuous mode [ 151.764200][ T5900] tipc: Resetting bearer [ 151.831500][ T5891] tipc: Resetting bearer [ 151.850638][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.877804][ T5891] tipc: Disabling bearer [ 151.940621][ T5101] usb 5-1: Using ep0 maxpacket: 16 [ 151.970692][ T23] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 151.999677][ T23] usb 1-1: config 4 has no interface number 0 [ 152.009836][ T23] usb 1-1: config 4 interface 30 has no altsetting 0 [ 152.060607][ T5101] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.180363][ T5101] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.190603][ T5101] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 152.202948][ T5101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.098539][ T5101] usb 5-1: config 0 descriptor?? [ 153.250597][ T23] usb 1-1: string descriptor 0 read error: -22 [ 153.258584][ T23] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 153.295374][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.123490][ T23] usb 1-1: can't set config #4, error -71 [ 154.168141][ T23] usb 1-1: USB disconnect, device number 12 [ 154.671223][ T5101] usbhid 5-1:0.0: can't add hid device: -32 [ 154.682823][ T5101] usbhid: probe of 5-1:0.0 failed with error -32 [ 154.868988][ T5933] tipc: Enabled bearer , priority 0 [ 154.882465][ T5933] device syzkaller0 entered promiscuous mode [ 154.930088][ T5933] tipc: Resetting bearer [ 154.964803][ T5932] tipc: Resetting bearer [ 154.987310][ T5932] tipc: Disabling bearer [ 155.025621][ T5936] binder_alloc: 5882: binder_alloc_buf, no vma [ 155.067586][ T4195] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.161895][ T5943] binder: transaction release 94 bad handle 1, ret = -22 [ 155.330349][ T4195] usb 1-1: Using ep0 maxpacket: 16 [ 155.450424][ T4195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 156.207674][ T4231] usb 5-1: USB disconnect, device number 8 [ 156.430580][ T4195] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.450363][ T4195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.550335][ T4195] usb 1-1: Product: syz [ 156.586907][ T4195] usb 1-1: Manufacturer: syz [ 157.374680][ T4195] usb 1-1: SerialNumber: syz [ 157.393134][ T4195] usb 1-1: config 0 descriptor?? [ 157.442496][ T4195] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 157.461679][ T4195] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 157.553331][ T4239] usb 4-1: USB disconnect, device number 11 [ 157.596187][ T5976] netlink: 'syz.6.466': attribute type 1 has an invalid length. [ 157.670489][ T5101] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.720522][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.466'. [ 157.845700][ T5990] binder: transaction release 100 bad handle 1, ret = -22 [ 157.994202][ T5995] tipc: Enabled bearer , priority 0 [ 158.019668][ T5995] device syzkaller0 entered promiscuous mode [ 158.070313][ T5101] usb 5-1: Using ep0 maxpacket: 8 [ 158.085504][ T5995] tipc: Resetting bearer [ 158.102537][ T5991] tipc: Resetting bearer [ 158.129270][ T5991] tipc: Disabling bearer [ 158.165969][ T4195] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 158.620767][ T5101] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.642683][ T6009] device syzkaller0 entered promiscuous mode [ 158.680415][ T4239] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 158.794426][ T5101] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 158.816818][ T5101] usb 5-1: config 4 has no interface number 0 [ 158.830317][ T5101] usb 5-1: config 4 interface 30 has no altsetting 0 [ 159.060305][ T4239] usb 6-1: Using ep0 maxpacket: 16 [ 159.430744][ T4239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.462809][ T4239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.650125][ T4195] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 159.659864][ T4195] em28xx 1-1:0.0: board has no eeprom [ 159.756592][ T4239] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 159.774127][ T4239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.782979][ T5101] usb 5-1: string descriptor 0 read error: -71 [ 159.789244][ T5101] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 159.794244][ T4239] usb 6-1: config 0 descriptor?? [ 159.799494][ T4195] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 159.850376][ T4195] em28xx 1-1:0.0: dvb set to bulk mode. [ 159.856871][ T5101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.874112][ T13] em28xx 1-1:0.0: Binding DVB extension [ 159.934662][ T4195] usb 1-1: USB disconnect, device number 13 [ 159.945347][ T4195] em28xx 1-1:0.0: Disconnecting em28xx [ 159.951359][ T5101] usb 5-1: can't set config #4, error -71 [ 159.971692][ T5101] usb 5-1: USB disconnect, device number 9 [ 159.987560][ T13] em28xx 1-1:0.0: Registering input extension [ 160.018381][ T4195] em28xx 1-1:0.0: Closing input extension [ 160.030452][ T4786] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 160.166255][ T4195] em28xx 1-1:0.0: Freeing device [ 160.280472][ T4786] usb 7-1: Using ep0 maxpacket: 16 [ 160.400568][ T4786] usb 7-1: config 0 has an invalid interface number: 102 but max is 0 [ 160.418603][ T4786] usb 7-1: config 0 has no interface number 0 [ 160.611129][ T4786] usb 7-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 160.634395][ T4786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.682130][ T4786] usb 7-1: Product: syz [ 160.687107][ T4786] usb 7-1: Manufacturer: syz [ 160.697033][ T4786] usb 7-1: SerialNumber: syz [ 160.707505][ T4786] usb 7-1: config 0 descriptor?? [ 160.812803][ T4786] usb-storage 7-1:0.102: USB Mass Storage device detected [ 160.853220][ T4786] usb-storage 7-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 160.870652][ T4786] usb-storage 7-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 160.870652][ T4786] Please send a copy of this message to and [ 161.020733][ T6039] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 161.170682][ T4239] usbhid 6-1:0.0: can't add hid device: -71 [ 161.183206][ T4239] usbhid: probe of 6-1:0.0 failed with error -71 [ 161.400192][ T4239] usb 6-1: USB disconnect, device number 3 [ 162.178931][ T6063] binder: transaction release 112 bad handle 1, ret = -22 [ 163.083265][ T6073] tipc: Enabled bearer , priority 0 [ 163.132009][ T6073] device syzkaller0 entered promiscuous mode [ 163.230879][ T6073] tipc: Resetting bearer [ 163.281595][ T6071] tipc: Resetting bearer [ 163.328330][ T6071] tipc: Disabling bearer [ 164.700417][ T4239] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 165.845302][ T4239] usb 1-1: Using ep0 maxpacket: 8 [ 166.050543][ T4239] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.208105][ T4239] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 166.226693][ T4239] usb 1-1: config 4 has no interface number 0 [ 166.230675][ T4254] usb 7-1: USB disconnect, device number 2 [ 166.311329][ T4239] usb 1-1: config 4 interface 30 has no altsetting 0 [ 167.200409][ T4239] usb 1-1: string descriptor 0 read error: -71 [ 167.206720][ T4239] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 167.240335][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.270583][ T4239] usb 1-1: can't set config #4, error -71 [ 167.277953][ T4239] usb 1-1: USB disconnect, device number 14 [ 167.340316][ T5020] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 167.670398][ T5020] usb 6-1: Using ep0 maxpacket: 16 [ 167.793579][ T6130] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 167.910769][ T5020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.937959][ T5020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.015785][ T5020] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 168.063673][ T5020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.098387][ T6142] binder: BINDER_SET_CONTEXT_MGR already set [ 168.128017][ T6142] binder: 6138:6142 ioctl 4018620d 2000000002c0 returned -16 [ 168.152157][ T5020] usb 6-1: config 0 descriptor?? [ 168.770469][ T5020] usbhid 6-1:0.0: can't add hid device: -71 [ 168.776523][ T5020] usbhid: probe of 6-1:0.0 failed with error -71 [ 168.818258][ T5020] usb 6-1: USB disconnect, device number 4 [ 169.273683][ T4231] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 169.540371][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 169.820970][ T4231] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 169.873993][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.940490][ T5020] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 169.996106][ T4231] usb 4-1: Product: syz [ 170.054952][ T4231] usb 4-1: Manufacturer: syz [ 170.115970][ T4231] usb 4-1: SerialNumber: syz [ 170.240373][ T5020] usb 7-1: Using ep0 maxpacket: 16 [ 170.278914][ T4231] usb 4-1: config 0 descriptor?? [ 170.381063][ T5020] usb 7-1: config 0 has an invalid interface number: 102 but max is 0 [ 170.429364][ T5020] usb 7-1: config 0 has no interface number 0 [ 170.442809][ T4231] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 170.691084][ T5020] usb 7-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 170.746825][ T5020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.790333][ T5020] usb 7-1: Product: syz [ 170.804815][ T5020] usb 7-1: Manufacturer: syz [ 170.875970][ T5020] usb 7-1: SerialNumber: syz [ 170.915556][ T5020] usb 7-1: config 0 descriptor?? [ 170.951903][ T6196] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 170.991433][ T5020] usb-storage 7-1:0.102: USB Mass Storage device detected [ 171.029311][ T5020] usb-storage 7-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 171.051100][ T5020] usb-storage 7-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 171.051100][ T5020] Please send a copy of this message to and [ 171.054644][ T6196] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.182224][ T6196] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 171.220137][ T6196] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 171.254247][ T6164] udc-core: couldn't find an available UDC or it's busy [ 171.263414][ T6164] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.429791][ T6215] tipc: Enabled bearer , priority 0 [ 171.505624][ T6215] device syzkaller0 entered promiscuous mode [ 171.571543][ T6222] binder: BINDER_SET_CONTEXT_MGR already set [ 171.604138][ T6215] netem: change failed [ 171.611923][ T6222] binder: 6221:6222 ioctl 4018620d 2000000002c0 returned -16 [ 171.657006][ T6215] tipc: Resetting bearer [ 171.708819][ T6214] tipc: Resetting bearer [ 171.750438][ T4231] gspca_sonixj: reg_w1 err -71 [ 171.750811][ T6214] tipc: Disabling bearer [ 171.755305][ T4231] sonixj: probe of 4-1:0.0 failed with error -71 [ 171.839649][ T4231] usb 4-1: USB disconnect, device number 12 [ 171.948648][ T6229] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 172.330426][ T4786] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 172.930310][ T4786] usb 6-1: Using ep0 maxpacket: 16 [ 173.050573][ T4786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.075751][ T4786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.102222][ T4786] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 173.132812][ T4786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.181063][ T4786] usb 6-1: config 0 descriptor?? [ 173.752654][ T5017] usb 7-1: USB disconnect, device number 3 [ 173.800453][ T4786] usbhid 6-1:0.0: can't add hid device: -71 [ 173.807821][ T4786] usbhid: probe of 6-1:0.0 failed with error -71 [ 173.835173][ T4786] usb 6-1: USB disconnect, device number 5 [ 174.385601][ T6272] tipc: Enabled bearer , priority 0 [ 174.411409][ T6272] device syzkaller0 entered promiscuous mode [ 174.474381][ T6272] tipc: Resetting bearer [ 174.495099][ T6271] tipc: Resetting bearer [ 174.518499][ T6271] tipc: Disabling bearer [ 174.705753][ T6274] tipc: Enabled bearer , priority 0 [ 174.718769][ T6274] device syzkaller0 entered promiscuous mode [ 174.736403][ T6274] netem: change failed [ 174.756941][ T6274] tipc: Resetting bearer [ 174.766048][ T6273] tipc: Resetting bearer [ 174.792608][ T6273] tipc: Disabling bearer [ 174.963182][ T6278] binder: BINDER_SET_CONTEXT_MGR already set [ 174.970420][ T6278] binder: 6277:6278 ioctl 4018620d 2000000002c0 returned -16 [ 175.094747][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 175.340353][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 175.610312][ T5101] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 175.830668][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 175.845696][ T4299] Bluetooth: hci0: command 0x0406 tx timeout [ 175.870519][ T5101] usb 7-1: Using ep0 maxpacket: 8 [ 175.986604][ T4299] Bluetooth: hci4: command 0x0406 tx timeout [ 176.060614][ T5101] usb 7-1: unable to get BOS descriptor or descriptor too short [ 176.141815][ T4299] Bluetooth: hci3: command 0x0406 tx timeout [ 176.201150][ T5101] usb 7-1: config 4 has an invalid interface number: 30 but max is 0 [ 176.360352][ T5101] usb 7-1: config 4 has no interface number 0 [ 176.386992][ T5101] usb 7-1: config 4 interface 30 has no altsetting 0 [ 176.415703][ T23] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 176.431823][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.439991][ T23] usb 1-1: Product: syz [ 176.444272][ T23] usb 1-1: Manufacturer: syz [ 176.455462][ T23] usb 1-1: SerialNumber: syz [ 176.466158][ T23] usb 1-1: config 0 descriptor?? [ 176.542617][ T23] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 176.770646][ T1107] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 176.960426][ T5101] usb 7-1: string descriptor 0 read error: -22 [ 176.966733][ T5101] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 176.990277][ T5101] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.050481][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 177.062545][ T5101] dw2102: su3000_identify_state [ 177.151830][ T5101] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 177.170899][ T1107] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 177.195316][ T1107] usb 4-1: config 0 has no interface number 0 [ 177.306082][ T5101] dw2102: su3000_power_ctrl: 1, initialized 0 [ 177.400899][ T1107] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 177.410465][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.418865][ T1107] usb 4-1: Product: syz [ 177.429131][ T1107] usb 4-1: Manufacturer: syz [ 177.434898][ T1107] usb 4-1: SerialNumber: syz [ 177.450681][ T5101] dvb-usb: bulk message failed: -22 (2/0) [ 177.452728][ T1107] usb 4-1: config 0 descriptor?? [ 177.457100][ T6276] udc-core: couldn't find an available UDC or it's busy [ 177.513066][ T1107] usb-storage 4-1:0.102: USB Mass Storage device detected [ 177.520302][ T6276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.753251][ T5101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.773398][ T6280] dvb-usb: bulk message failed: -22 (4/0) [ 177.779905][ T6280] dw2102: i2c transfer failed. [ 177.808358][ T1107] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 177.830854][ T5101] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 177.839839][ T5101] usb 7-1: media controller created [ 177.870339][ T1107] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 177.870339][ T1107] Please send a copy of this message to and [ 177.921582][ T6280] dvb-usb: bulk message failed: -22 (3/0) [ 177.956311][ T6309] binder: BINDER_SET_CONTEXT_MGR already set [ 177.979196][ T6280] dw2102: i2c transfer failed. [ 178.000432][ T6309] binder: 6308:6309 ioctl 4018620d 200000004a80 returned -16 [ 178.030528][ T23] gspca_sonixj: reg_w1 err -71 [ 178.035451][ T23] sonixj: probe of 1-1:0.0 failed with error -71 [ 178.038402][ T5101] dvb-usb: bulk message failed: -22 (6/0) [ 178.049679][ T5101] dw2102: i2c transfer failed. [ 178.088234][ T23] usb 1-1: USB disconnect, device number 15 [ 178.088627][ T5101] dvb-usb: bulk message failed: -22 (6/0) [ 178.140471][ T5101] dw2102: i2c transfer failed. [ 178.162971][ T5101] dvb-usb: bulk message failed: -22 (6/0) [ 178.190392][ T5101] dw2102: i2c transfer failed. [ 178.200265][ T5101] dvb-usb: bulk message failed: -22 (6/0) [ 178.218962][ T5101] dw2102: i2c transfer failed. [ 178.236761][ T5101] dvb-usb: bulk message failed: -22 (6/0) [ 178.270654][ T5101] dw2102: i2c transfer failed. [ 178.291017][ T5101] dvb-usb: bulk message failed: -22 (6/0) [ 178.324466][ T5101] dw2102: i2c transfer failed. [ 178.348815][ T5101] dvb-usb: MAC address: 02:02:02:02:02:02 [ 179.286086][ T5101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.197216][ T6322] tipc: Enabled bearer , priority 0 [ 180.315517][ T6323] device syzkaller0 entered promiscuous mode [ 180.353352][ T5101] dvb-usb: bulk message failed: -22 (3/0) [ 180.359228][ T5101] dw2102: command 0x0e transfer failed. [ 180.364854][ T5101] dvb-usb: bulk message failed: -22 (3/0) [ 180.370728][ T5101] dw2102: command 0x0e transfer failed. [ 180.530350][ T4254] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 180.554892][ T6282] tipc: Resetting bearer [ 180.690385][ T5101] dvb-usb: bulk message failed: -22 (3/0) [ 180.696558][ T5101] dw2102: command 0x0e transfer failed. [ 180.786828][ T5101] dvb-usb: bulk message failed: -22 (3/0) [ 180.793512][ T4254] usb 5-1: Using ep0 maxpacket: 16 [ 180.882506][ T5101] dw2102: command 0x0e transfer failed. [ 180.940797][ T4254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.974016][ T5101] dvb-usb: bulk message failed: -22 (1/0) [ 181.027811][ T4254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.067682][ T5101] dw2102: command 0x51 transfer failed. [ 181.205034][ T1107] tipc: Node number set to 2886074899 [ 181.216290][ T5101] dvb-usb: bulk message failed: -22 (5/0) [ 181.230382][ T4254] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 181.243278][ T5101] dw2102: i2c probe for address 0x68 failed. [ 181.255029][ T4254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.264542][ T5101] dvb-usb: bulk message failed: -22 (5/0) [ 181.277281][ T5101] dw2102: i2c probe for address 0x69 failed. [ 181.290702][ T4254] usb 5-1: config 0 descriptor?? [ 181.299218][ T5101] dvb-usb: bulk message failed: -22 (5/0) [ 181.323088][ T5101] dw2102: i2c probe for address 0x6a failed. [ 181.337214][ T5101] dw2102: probing for demodulator failed. Is the external power switched on? [ 181.365697][ T5101] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 181.384811][ T6282] tipc: Disabling bearer [ 181.590596][ T5101] rc_core: IR keymap rc-tt-1500 not found [ 181.596632][ T5101] Registered IR keymap rc-empty [ 181.734898][ T6342] usb usb8: usbfs: process 6342 (syz.5.544) did not claim interface 7 before use [ 182.480884][ T5101] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 182.491789][ T5101] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input15 [ 182.520385][ T4254] usbhid 5-1:0.0: can't add hid device: -71 [ 182.526615][ T4254] usbhid: probe of 5-1:0.0 failed with error -71 [ 182.601988][ T5101] dvb-usb: schedule remote query interval to 250 msecs. [ 182.648201][ T5101] dw2102: su3000_power_ctrl: 0, initialized 1 [ 182.654862][ T4254] usb 5-1: USB disconnect, device number 10 [ 182.680734][ T5101] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 182.730449][ T5101] usb 7-1: USB disconnect, device number 4 [ 182.812383][ T13] usb 4-1: USB disconnect, device number 13 [ 182.866441][ T6352] tipc: Enabling of bearer rejected, failed to enable media [ 183.017289][ T5101] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 184.150587][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 184.490504][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 184.880792][ T13] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 184.922486][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.971932][ T13] usb 4-1: Product: syz [ 184.988465][ T13] usb 4-1: Manufacturer: syz [ 184.998363][ T13] usb 4-1: SerialNumber: syz [ 185.041421][ T13] usb 4-1: config 0 descriptor?? [ 185.090128][ T6374] tipc: Enabled bearer , priority 0 [ 185.122644][ T13] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 185.148953][ T6377] tipc: Enabled bearer , priority 0 [ 185.156576][ T6377] device syzkaller0 entered promiscuous mode [ 185.164690][ T6374] device syzkaller0 entered promiscuous mode [ 186.150847][ T1107] tipc: Node number set to 398803019 [ 186.240354][ T21] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 186.361937][ T6379] netem: change failed [ 186.368612][ T6382] tipc: Resetting bearer [ 186.383281][ T6373] tipc: Resetting bearer [ 186.416251][ T6373] tipc: Disabling bearer [ 186.455815][ T6376] tipc: Resetting bearer [ 186.485305][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 186.499926][ T6376] tipc: Disabling bearer [ 186.610645][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.633079][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.691375][ T21] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 186.741252][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.871884][ T21] usb 1-1: config 0 descriptor?? [ 187.028589][ T13] gspca_sonixj: reg_w1 err -71 [ 187.080933][ T4239] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 187.081165][ T13] sonixj: probe of 4-1:0.0 failed with error -71 [ 187.460751][ T4239] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 187.467195][ T13] usb 4-1: USB disconnect, device number 14 [ 187.479403][ T4239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.536776][ T4239] usb 7-1: config 0 descriptor?? [ 187.590739][ T21] usbhid 1-1:0.0: can't add hid device: -32 [ 187.603458][ T21] usbhid: probe of 1-1:0.0 failed with error -32 [ 187.644869][ T21] usb 1-1: USB disconnect, device number 16 [ 187.676176][ T6401] tipc: Enabled bearer , priority 0 [ 187.754078][ T6399] tipc: Disabling bearer [ 187.960634][ T4239] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 188.039877][ T4239] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 188.250717][ T4239] [drm:udl_init] *ERROR* Selecting channel failed [ 188.711168][ T4239] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 188.730279][ T4239] [drm] Initialized udl on minor 2 [ 188.737074][ T6413] binder: BINDER_SET_CONTEXT_MGR already set [ 188.750631][ T6413] binder: 6412:6413 ioctl 4018620d 2000000002c0 returned -16 [ 188.778819][ T4239] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 188.787442][ T6416] tipc: Enabled bearer , priority 0 [ 188.797148][ T4239] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 188.812346][ T4239] usb 7-1: USB disconnect, device number 5 [ 188.835888][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 188.850072][ T6416] device syzkaller0 entered promiscuous mode [ 188.860089][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 188.871174][ T13] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 188.872205][ T1107] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 188.924699][ T6415] tipc: Resetting bearer [ 188.964655][ T6415] tipc: Disabling bearer [ 189.140593][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 189.240528][ T1107] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.249531][ T6427] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 189.271849][ T13] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 189.312002][ T13] usb 4-1: config 0 has no interface number 0 [ 189.364741][ T6429] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 189.427198][ T6431] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.493545][ T13] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 189.500358][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 189.509591][ T6431] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 189.520844][ T4239] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 189.528611][ T6431] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 189.532451][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.607661][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 189.631741][ T13] usb 4-1: Product: syz [ 189.635992][ T13] usb 4-1: Manufacturer: syz [ 189.657531][ T13] usb 4-1: SerialNumber: syz [ 189.759661][ T1107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.824721][ T13] usb 4-1: config 0 descriptor?? [ 189.869001][ T4239] usb 7-1: Using ep0 maxpacket: 8 [ 190.653668][ T13] usb 4-1: can't set config #0, error -71 [ 190.664940][ T13] usb 4-1: USB disconnect, device number 15 [ 190.710627][ T4239] usb 7-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 190.720012][ T1107] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 190.733391][ T1107] usb 5-1: config 4 has no interface number 0 [ 190.855780][ T4239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.871715][ T1107] usb 5-1: config 4 interface 30 has no altsetting 0 [ 190.882657][ T6446] binder: BINDER_SET_CONTEXT_MGR already set [ 190.885450][ T4239] usb 7-1: Product: syz [ 190.910829][ T4239] usb 7-1: Manufacturer: syz [ 191.595056][ T6446] binder: 6442:6446 ioctl 4018620d 200000004a80 returned -16 [ 191.733108][ T4239] usb 7-1: SerialNumber: syz [ 191.749977][ T4239] usb 7-1: config 0 descriptor?? [ 191.872560][ T4239] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 192.260414][ T4239] gspca_sonixj: reg_w1 err -71 [ 192.265405][ T4239] sonixj: probe of 7-1:0.0 failed with error -71 [ 192.340538][ T1107] usb 5-1: string descriptor 0 read error: -71 [ 192.347436][ T1107] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 192.370470][ T4239] usb 7-1: USB disconnect, device number 6 [ 192.384906][ T5101] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 192.403981][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.570407][ T1107] usb 5-1: can't set config #4, error -71 [ 192.583467][ T1107] usb 5-1: USB disconnect, device number 11 [ 193.024916][ T5101] usb 6-1: Using ep0 maxpacket: 16 [ 193.097835][ T6477] binder: BINDER_SET_CONTEXT_MGR already set [ 193.119921][ T6465] tipc: Enabled bearer , priority 0 [ 193.134929][ T6477] binder: 6476:6477 ioctl 4018620d 2000000002c0 returned -16 [ 193.155630][ T6465] device syzkaller0 entered promiscuous mode [ 193.163114][ T5101] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.197284][ T5101] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.248369][ T5101] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 193.293861][ T5101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.340573][ T6421] tipc: Resetting bearer [ 193.352480][ T5101] usb 6-1: config 0 descriptor?? [ 193.385261][ T6421] tipc: Disabling bearer [ 193.516382][ T6484] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 193.621700][ T6486] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.634600][ T6486] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 193.645071][ T6486] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 193.693020][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 193.975240][ T5101] usbhid 6-1:0.0: can't add hid device: -32 [ 193.990832][ T5101] usbhid: probe of 6-1:0.0 failed with error -32 [ 194.228198][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 194.228213][ T26] audit: type=1326 audit(1757693022.613:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a8af54ba9 code=0x7ffc0000 [ 194.236234][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.236310][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.317872][ T6497] tipc: Enabled bearer , priority 0 [ 194.339904][ T6497] device syzkaller0 entered promiscuous mode [ 194.410897][ T6497] tipc: Resetting bearer [ 194.417076][ T26] audit: type=1326 audit(1757693022.673:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f1a8af54ba9 code=0x7ffc0000 [ 194.467786][ T6495] tipc: Resetting bearer [ 194.512370][ T26] audit: type=1326 audit(1757693022.673:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a8af54ba9 code=0x7ffc0000 [ 194.534590][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.544483][ T6495] tipc: Disabling bearer [ 194.599815][ T26] audit: type=1326 audit(1757693022.673:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a8af54ba9 code=0x7ffc0000 [ 194.632751][ T1107] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 195.370373][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 195.652740][ T2360] usb 6-1: USB disconnect, device number 6 [ 195.851243][ T1107] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 195.886774][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.939161][ T1107] usb 4-1: Product: syz [ 195.962349][ T1107] usb 4-1: Manufacturer: syz [ 196.015225][ T1107] usb 4-1: SerialNumber: syz [ 196.069481][ T1107] usb 4-1: config 0 descriptor?? [ 196.145819][ T1107] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 196.629876][ T6520] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 196.713107][ T6524] binder: BINDER_SET_CONTEXT_MGR already set [ 196.733533][ T6523] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 196.752478][ T6524] binder: 6522:6524 ioctl 4018620d 2000000002c0 returned -16 [ 196.767347][ T6523] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 196.779685][ T6523] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 196.826174][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 196.828851][ T6528] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.247555][ T6498] udc-core: couldn't find an available UDC or it's busy [ 197.270893][ T6498] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 197.980481][ T1107] gspca_sonixj: reg_w1 err -71 [ 197.985470][ T1107] sonixj: probe of 4-1:0.0 failed with error -71 [ 198.869331][ T1107] usb 4-1: USB disconnect, device number 16 [ 199.930289][ T4786] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 199.991624][ T4247] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 200.350472][ T4786] usb 1-1: Using ep0 maxpacket: 16 [ 200.498122][ T6566] binder: 6559:6566 ioctl c0306201 200000000080 returned -14 [ 201.690509][ T4247] usb 7-1: config 0 interface 0 has no altsetting 0 [ 201.697147][ T6565] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 201.697870][ T4786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.717956][ T4247] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 201.738416][ T4247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.755152][ T6571] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 201.760385][ T4786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.774801][ T4786] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 201.785057][ T4247] usb 7-1: config 0 descriptor?? [ 201.791983][ T4786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.830920][ T6573] binder: BINDER_SET_CONTEXT_MGR already set [ 201.842272][ T4786] usb 1-1: config 0 descriptor?? [ 201.858527][ T6575] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.879526][ T6573] binder: 6572:6573 ioctl 4018620d 2000000002c0 returned -16 [ 201.909036][ T6575] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 201.935947][ T6575] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 202.165720][ T4247] (null): keene_cmd_main failed (-71) [ 202.208987][ T4247] video4linux radio48: keene_cmd_main failed (-71) [ 203.464136][ T4247] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 203.477985][ T4247] usb 7-1: USB disconnect, device number 7 [ 203.530758][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 203.550503][ T4786] usbhid 1-1:0.0: can't add hid device: -71 [ 203.556595][ T4786] usbhid: probe of 1-1:0.0 failed with error -71 [ 203.658412][ T4786] usb 1-1: USB disconnect, device number 17 [ 204.593762][ T6609] device syzkaller0 entered promiscuous mode [ 205.120079][ T6614] vivid-009: kernel_thread() failed [ 205.159243][ T6617] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 205.281350][ T6621] netlink: 180 bytes leftover after parsing attributes in process `syz.4.626'. [ 205.869852][ T4247] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 206.480356][ T2360] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 206.663887][ T4247] usb 6-1: Using ep0 maxpacket: 16 [ 206.740330][ T2360] usb 5-1: Using ep0 maxpacket: 16 [ 206.784049][ T4247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.809992][ T4247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.853283][ T4247] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 206.884162][ T4247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.900548][ T2360] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 206.917151][ T4247] usb 6-1: config 0 descriptor?? [ 206.927773][ T2360] usb 5-1: config 0 has no interface number 0 [ 206.970387][ T2360] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 207.018687][ T2360] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 207.069433][ T2360] usb 5-1: config 0 interface 41 has no altsetting 0 [ 207.116390][ T6636] netlink: 'syz.3.631': attribute type 1 has an invalid length. [ 207.183289][ T6638] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 207.212731][ T6638] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 207.224897][ T6638] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 207.292852][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 207.310639][ T2360] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 207.320066][ T2360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.356672][ T2360] usb 5-1: Product: syz [ 207.361263][ T2360] usb 5-1: Manufacturer: syz [ 207.365873][ T2360] usb 5-1: SerialNumber: syz [ 207.385621][ T2360] usb 5-1: config 0 descriptor?? [ 207.520456][ T4247] usbhid 6-1:0.0: can't add hid device: -71 [ 207.526484][ T4247] usbhid: probe of 6-1:0.0 failed with error -71 [ 207.570573][ T6625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 207.577694][ T6625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 207.601487][ T4247] usb 6-1: USB disconnect, device number 7 [ 208.087518][ T6625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 208.207832][ T6625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 208.596174][ T6652] tipc: Enabling of bearer rejected, failed to enable media [ 208.782894][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 208.940344][ T6669] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 208.950439][ T2360] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 209.360279][ T5020] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 209.370279][ T4239] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 209.410347][ T4247] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 209.620316][ T4239] usb 7-1: Using ep0 maxpacket: 8 [ 209.625459][ T5020] usb 6-1: Using ep0 maxpacket: 8 [ 209.660269][ T4247] usb 4-1: Using ep0 maxpacket: 16 [ 209.772045][ T4239] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.780385][ T4247] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 209.788578][ T4239] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.815455][ T4247] usb 4-1: config 0 has no interface number 0 [ 209.818736][ T4239] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.832323][ T5020] usb 6-1: unable to get BOS descriptor or descriptor too short [ 209.858143][ T4239] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.891536][ T4239] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.913084][ T4239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.940505][ T5020] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 209.949879][ T5020] usb 6-1: config 4 has no interface number 0 [ 209.956713][ T5020] usb 6-1: config 4 interface 30 has no altsetting 0 [ 209.990617][ T4247] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 210.000686][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.009756][ T4247] usb 4-1: Product: syz [ 210.015320][ T4247] usb 4-1: Manufacturer: syz [ 210.020486][ T4247] usb 4-1: SerialNumber: syz [ 210.035624][ T4247] usb 4-1: config 0 descriptor?? [ 210.090491][ T4247] usb-storage 4-1:0.102: USB Mass Storage device detected [ 210.144736][ T4247] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 210.170424][ T4247] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 210.170424][ T4247] Please send a copy of this message to and [ 210.293928][ T4239] usb 7-1: GET_CAPABILITIES returned 0 [ 210.304597][ T5020] usb 6-1: string descriptor 0 read error: -22 [ 210.319827][ T4239] usbtmc 7-1:16.0: can't read capabilities [ 210.326074][ T5020] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 210.342415][ T5020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.173124][ T5020] dw2102: su3000_identify_state [ 211.230421][ T5020] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 211.250488][ T2360] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 211.303767][ T5020] dw2102: su3000_power_ctrl: 1, initialized 0 [ 211.320483][ T2360] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 211.343094][ T5020] dvb-usb: bulk message failed: -22 (2/0) [ 211.362432][ T2360] CoreChips: probe of 5-1:0.41 failed with error -71 [ 211.371590][ T5020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.412036][ T2360] usb 5-1: USB disconnect, device number 12 [ 211.440544][ T5020] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 211.454438][ T5020] usb 6-1: media controller created [ 211.465842][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 211.480107][ T5020] dw2102: i2c transfer failed. [ 211.493882][ T6668] dvb-usb: bulk message failed: -22 (4/0) [ 211.508623][ T6668] dw2102: i2c transfer failed. [ 211.575770][ T6668] dvb-usb: bulk message failed: -22 (3/0) [ 211.594442][ T6668] dw2102: i2c transfer failed. [ 211.606003][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 211.615588][ T5020] dw2102: i2c transfer failed. [ 211.635167][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 211.645131][ T5020] dw2102: i2c transfer failed. [ 211.657048][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 211.704242][ T5020] dw2102: i2c transfer failed. [ 211.721707][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 211.733282][ T6701] binder: BINDER_SET_CONTEXT_MGR already set [ 211.742921][ T6701] binder: 6700:6701 ioctl 4018620d 200000004a80 returned -16 [ 211.754233][ T5020] dw2102: i2c transfer failed. [ 211.759339][ T5020] dvb-usb: bulk message failed: -22 (6/0) [ 211.785086][ T5020] dw2102: i2c transfer failed. [ 211.793679][ T5020] dvb-usb: MAC address: 02:02:02:02:02:02 [ 211.844248][ T5020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.893789][ T5020] dvb-usb: bulk message failed: -22 (3/0) [ 211.913379][ T5020] dw2102: command 0x0e transfer failed. [ 211.924043][ T5020] dvb-usb: bulk message failed: -22 (3/0) [ 211.935343][ T5020] dw2102: command 0x0e transfer failed. [ 212.260431][ T5020] dvb-usb: bulk message failed: -22 (3/0) [ 212.268289][ T5020] dw2102: command 0x0e transfer failed. [ 212.294187][ T2360] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 212.309805][ T5020] dvb-usb: bulk message failed: -22 (3/0) [ 212.334078][ T5020] dw2102: command 0x0e transfer failed. [ 212.346647][ T5101] usb 7-1: USB disconnect, device number 8 [ 212.352256][ T5020] dvb-usb: bulk message failed: -22 (1/0) [ 212.387647][ T5020] dw2102: command 0x51 transfer failed. [ 212.428544][ T5020] dvb-usb: bulk message failed: -22 (5/0) [ 212.445351][ T5020] dw2102: i2c probe for address 0x68 failed. [ 212.460994][ T6706] tipc: Enabled bearer , priority 0 [ 212.477900][ T5020] dvb-usb: bulk message failed: -22 (5/0) [ 212.522054][ T6706] device syzkaller0 entered promiscuous mode [ 212.522316][ T5020] dw2102: i2c probe for address 0x69 failed. [ 212.540305][ T2360] usb 5-1: Using ep0 maxpacket: 16 [ 212.565798][ T5020] dvb-usb: bulk message failed: -22 (5/0) [ 212.596214][ T5020] dw2102: i2c probe for address 0x6a failed. [ 212.598354][ T6706] tipc: Resetting bearer [ 212.608900][ T5020] dw2102: probing for demodulator failed. Is the external power switched on? [ 212.640411][ T5020] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 212.660937][ T2360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.685420][ T6705] tipc: Resetting bearer [ 212.702741][ T2360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.732664][ T2360] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 212.756796][ T2360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.807330][ T2360] usb 5-1: config 0 descriptor?? [ 212.828823][ T6705] tipc: Disabling bearer [ 212.980402][ T5020] rc_core: IR keymap rc-tt-1500 not found [ 212.986294][ T5020] Registered IR keymap rc-empty [ 213.025278][ T5020] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 213.059632][ T5020] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input16 [ 213.104744][ T5020] dvb-usb: schedule remote query interval to 250 msecs. [ 213.124770][ T5020] dw2102: su3000_power_ctrl: 0, initialized 1 [ 213.137591][ T5020] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 213.180520][ T5020] usb 6-1: USB disconnect, device number 8 [ 213.286060][ T5020] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 213.554382][ T2360] usbhid 5-1:0.0: can't add hid device: -32 [ 213.561025][ T2360] usbhid: probe of 5-1:0.0 failed with error -32 [ 214.545759][ T4247] usb 4-1: USB disconnect, device number 17 [ 215.860635][ T5101] usb 5-1: USB disconnect, device number 13 [ 216.121927][ T6772] tipc: Enabled bearer , priority 0 [ 216.139844][ T6746] device syzkaller0 entered promiscuous mode [ 216.277338][ T6773] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 216.348462][ T6772] tipc: Resetting bearer [ 216.391575][ T5101] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 216.430356][ T1325] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 216.477795][ T6745] tipc: Resetting bearer [ 216.517765][ T6745] tipc: Disabling bearer [ 216.640333][ T5101] usb 4-1: Using ep0 maxpacket: 8 [ 216.722386][ T6802] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 216.750333][ T1325] usb 7-1: Using ep0 maxpacket: 8 [ 216.856680][ T6804] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 216.910514][ T1325] usb 7-1: unable to get BOS descriptor or descriptor too short [ 216.930895][ T5101] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 216.954669][ T5101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.971441][ T5101] usb 4-1: Product: syz [ 216.980325][ T5101] usb 4-1: Manufacturer: syz [ 216.989429][ T5101] usb 4-1: SerialNumber: syz [ 217.000345][ T1325] usb 7-1: config 4 has an invalid interface number: 30 but max is 0 [ 217.016375][ T1325] usb 7-1: config 4 has no interface number 0 [ 217.023355][ T5101] usb 4-1: config 0 descriptor?? [ 217.035208][ T1325] usb 7-1: config 4 interface 30 has no altsetting 0 [ 217.082510][ T5101] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 217.090532][ T6804] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 217.121582][ T6804] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 217.320761][ T1325] usb 7-1: string descriptor 0 read error: -22 [ 217.330499][ T1325] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 217.358405][ T1325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.432421][ T1325] dw2102: su3000_identify_state [ 217.440454][ T1325] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 217.460812][ T1325] dw2102: su3000_power_ctrl: 1, initialized 0 [ 217.484229][ T1325] dvb-usb: bulk message failed: -22 (2/0) [ 217.506843][ T1325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.551129][ T1325] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 217.590476][ T1325] usb 7-1: media controller created [ 217.595793][ T1325] dvb-usb: bulk message failed: -22 (6/0) [ 217.640075][ T1325] dw2102: i2c transfer failed. [ 217.655481][ T1325] dvb-usb: bulk message failed: -22 (6/0) [ 217.670394][ T1325] dw2102: i2c transfer failed. [ 217.682945][ T1325] dvb-usb: bulk message failed: -22 (6/0) [ 217.697857][ T1325] dw2102: i2c transfer failed. [ 217.722946][ T1325] dvb-usb: bulk message failed: -22 (6/0) [ 217.761231][ T1325] dw2102: i2c transfer failed. [ 217.777359][ T1325] dvb-usb: bulk message failed: -22 (6/0) [ 217.805258][ T1325] dw2102: i2c transfer failed. [ 217.826808][ T1325] dvb-usb: bulk message failed: -22 (6/0) [ 217.853327][ T1325] dw2102: i2c transfer failed. [ 217.873002][ T6826] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 217.885056][ T1325] dvb-usb: MAC address: 02:02:02:02:02:02 [ 217.938166][ T6777] udc-core: couldn't find an available UDC or it's busy [ 217.949189][ T1325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.959982][ T6777] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.006599][ T1325] dvb-usb: bulk message failed: -22 (3/0) [ 218.032741][ T1325] dw2102: command 0x0e transfer failed. [ 218.047350][ T1325] dvb-usb: bulk message failed: -22 (3/0) [ 218.180859][ T1325] dw2102: command 0x0e transfer failed. [ 219.055352][ T1325] dvb-usb: bulk message failed: -22 (3/0) [ 219.062557][ T1325] dw2102: command 0x0e transfer failed. [ 219.068193][ T1325] dvb-usb: bulk message failed: -22 (3/0) [ 219.074376][ T1325] dw2102: command 0x0e transfer failed. [ 219.079989][ T1325] dvb-usb: bulk message failed: -22 (1/0) [ 219.086096][ T1325] dw2102: command 0x51 transfer failed. [ 219.091879][ T1325] dvb-usb: bulk message failed: -22 (5/0) [ 219.097647][ T1325] dw2102: i2c probe for address 0x68 failed. [ 219.110258][ T1325] dvb-usb: bulk message failed: -22 (5/0) [ 219.173365][ T1325] dw2102: i2c probe for address 0x69 failed. [ 219.179401][ T1325] dvb-usb: bulk message failed: -22 (5/0) [ 219.260263][ T1325] dw2102: i2c probe for address 0x6a failed. [ 219.266303][ T1325] dw2102: probing for demodulator failed. Is the external power switched on? [ 219.290468][ T5101] gspca_sonixj: reg_w1 err -71 [ 219.295358][ T5101] sonixj: probe of 4-1:0.0 failed with error -71 [ 219.305631][ T6834] tipc: Enabled bearer , priority 0 [ 219.332428][ T5101] usb 4-1: USB disconnect, device number 18 [ 219.341152][ T6834] device syzkaller0 entered promiscuous mode [ 219.360639][ T1325] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 219.405989][ T6838] netlink: 'syz.5.682': attribute type 1 has an invalid length. [ 219.460086][ T6842] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.472968][ T6842] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 219.488403][ T6842] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 219.520473][ T6834] tipc: Resetting bearer [ 219.539852][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'. [ 219.558345][ T6833] tipc: Resetting bearer [ 219.560367][ T1325] rc_core: IR keymap rc-tt-1500 not found [ 219.574032][ T1325] Registered IR keymap rc-empty [ 219.585410][ T1325] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 219.595979][ T1325] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input17 [ 219.616359][ T6833] tipc: Disabling bearer [ 219.626285][ T1325] dvb-usb: schedule remote query interval to 250 msecs. [ 219.633411][ T1325] dw2102: su3000_power_ctrl: 0, initialized 1 [ 219.639588][ T1325] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 219.688888][ T1325] usb 7-1: USB disconnect, device number 9 [ 219.783075][ T1325] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 220.417591][ T6861] tipc: Enabling of bearer rejected, failed to enable media [ 220.984187][ T6877] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 221.047941][ T6878] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 221.910984][ T6886] tipc: Enabled bearer , priority 0 [ 221.944722][ T6886] device syzkaller0 entered promiscuous mode [ 221.982895][ T6886] tipc: Resetting bearer [ 222.005940][ T6885] tipc: Resetting bearer [ 222.030010][ T6885] tipc: Disabling bearer [ 222.060326][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 223.666825][ T6911] tipc: Enabling of bearer rejected, failed to enable media [ 224.850799][ T6936] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 224.870638][ T6939] netlink: 'syz.5.707': attribute type 3 has an invalid length. [ 224.904285][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.707'. [ 225.126493][ T6946] netlink: 'syz.4.709': attribute type 1 has an invalid length. [ 226.427429][ T6946] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.470557][ T6946] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 226.498363][ T6946] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 226.736688][ T6961] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 226.746258][ T6961] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 227.521965][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 227.570918][ T6963] tipc: Enabled bearer , priority 0 [ 227.601356][ T6963] device syzkaller0 entered promiscuous mode [ 227.654350][ T6963] tipc: Resetting bearer [ 227.695587][ T6962] tipc: Resetting bearer [ 227.742460][ T6962] tipc: Disabling bearer [ 227.916970][ T6973] tipc: Enabling of bearer rejected, failed to enable media [ 228.709572][ T6994] binder: transaction release 209 bad handle 1, ret = -22 [ 230.065322][ T7010] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 231.160705][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 231.255232][ T7022] tipc: Enabled bearer , priority 0 [ 231.278879][ T7022] device syzkaller0 entered promiscuous mode [ 231.343446][ T7022] tipc: Resetting bearer [ 232.377178][ T7021] tipc: Resetting bearer [ 232.388732][ T5017] tipc: Node number set to 3250823747 [ 232.460411][ T7021] tipc: Disabling bearer [ 232.578691][ T7031] tipc: Enabled bearer , priority 0 [ 232.619110][ T7031] tipc: Resetting bearer [ 232.658963][ T7030] tipc: Disabling bearer [ 232.730328][ T5017] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 232.831417][ T7035] tipc: Enabled bearer , priority 0 [ 232.873246][ T7035] tipc: Resetting bearer [ 232.907914][ T7034] tipc: Disabling bearer [ 233.000423][ T5017] usb 4-1: Using ep0 maxpacket: 16 [ 233.350494][ T5017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.370424][ T5017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.400311][ T5017] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 233.410326][ T4247] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 233.471342][ T5017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.484962][ T5017] usb 4-1: config 0 descriptor?? [ 233.590313][ T7043] ------------[ cut here ]------------ [ 233.599796][ T7043] trace type BPF program uses run-time allocation [ 233.607169][ T7043] WARNING: CPU: 0 PID: 7043 at kernel/bpf/verifier.c:11746 check_map_prog_compatibility+0x6cf/0x870 [ 233.619865][ T7043] Modules linked in: [ 233.624900][ T7043] CPU: 1 PID: 7043 Comm: syz.4.738 Not tainted syzkaller #0 [ 233.632415][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.648518][ T7043] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 233.650320][ T4247] usb 1-1: Using ep0 maxpacket: 8 [ 233.661316][ T7043] Code: ff e8 c5 e2 ef ff 48 c7 c6 00 2b 11 8a e9 0d fd ff ff e8 b4 e2 ef ff c6 05 d9 03 ce 0b 01 48 c7 c7 60 27 11 8a e8 71 3f 16 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 233.681947][ T7043] RSP: 0018:ffffc90003d0f450 EFLAGS: 00010246 [ 233.688297][ T7043] RAX: aac2b6b65ab2ec00 RBX: 0000000000000001 RCX: 0000000000080000 [ 233.696711][ T7043] RDX: ffffc9000e37a000 RSI: 0000000000004d6b RDI: 0000000000004d6c [ 233.705024][ T7043] RBP: ffff88807537c000 R08: dffffc0000000000 R09: ffffed10172067b0 [ 233.714347][ T7043] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffffc90001326038 [ 233.726833][ T7043] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000264c07 [ 233.735134][ T7043] FS: 00007faf472486c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 233.745628][ T7043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.752842][ T7043] CR2: 00007faf47227d58 CR3: 000000004999f000 CR4: 00000000003506e0 [ 233.761030][ T7043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.769401][ T7043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.778138][ T7043] Call Trace: [ 233.781589][ T7043] [ 233.784648][ T7043] resolve_pseudo_ldimm64+0x691/0x1030 [ 233.790518][ T7043] ? check_attach_btf_id+0xe60/0xe60 [ 233.799210][ T7043] ? bpf_check+0x2672/0xf090 [ 233.806962][ T7043] bpf_check+0x30a4/0xf090 [ 233.812088][ T7043] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 233.818215][ T7043] ? bpf_get_btf_vmlinux+0x10/0x10 [ 233.828286][ T7043] ? finish_lock_switch+0x12f/0x280 [ 233.835029][ T7043] ? lockdep_hardirqs_on+0x94/0x140 [ 233.843872][ T7043] ? finish_lock_switch+0x12f/0x280 [ 233.849740][ T7043] ? finish_task_switch+0x1e4/0x640 [ 233.855266][ T7043] ? __switch_to_asm+0x34/0x60 [ 233.860531][ T7043] ? __schedule+0x11c3/0x4390 [ 233.865399][ T7043] ? verify_lock_unused+0x140/0x140 [ 233.870820][ T7043] ? verify_lock_unused+0x140/0x140 [ 233.876150][ T7043] ? release_firmware_map_entry+0x190/0x190 [ 233.882383][ T7043] ? preempt_schedule_irq+0xd0/0x150 [ 233.887773][ T7043] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 233.894144][ T7043] ? lock_chain_count+0x20/0x20 [ 233.899111][ T7043] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 233.905098][ T7043] ? lockdep_hardirqs_on+0x94/0x140 [ 233.911084][ T7043] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 233.916902][ T7043] ? ktime_get_with_offset+0x242/0x320 [ 233.922548][ T7043] ? memset+0x1e/0x40 [ 233.926681][ T7043] ? bpf_obj_name_cpy+0x190/0x1d0 [ 233.932844][ T7043] bpf_prog_load+0x1043/0x1550 [ 233.937903][ T7043] ? map_freeze+0x350/0x350 [ 233.942622][ T7043] ? __might_fault+0xb7/0x110 [ 233.947410][ T7043] ? __might_fault+0xb3/0x110 [ 233.953145][ T7043] ? bpf_lsm_bpf+0x5/0x10 [ 233.957585][ T7043] ? security_bpf+0x7a/0xa0 [ 233.961069][ T4247] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 233.971908][ T7043] __sys_bpf+0x4c2/0x670 [ 233.976418][ T7043] ? bpf_link_show_fdinfo+0x340/0x340 [ 233.977345][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.990997][ T7043] ? vtime_user_exit+0x2dc/0x400 [ 233.996075][ T7043] __x64_sys_bpf+0x78/0x90 [ 233.996092][ T4247] usb 1-1: Product: syz [ 233.996111][ T4247] usb 1-1: Manufacturer: syz [ 234.009874][ T7043] do_syscall_64+0x4c/0xa0 [ 234.014769][ T4247] usb 1-1: SerialNumber: syz [ 234.014920][ T7043] ? clear_bhb_loop+0x30/0x80 [ 234.023627][ T4247] usb 1-1: config 0 descriptor?? [ 234.029391][ T7043] ? clear_bhb_loop+0x30/0x80 [ 234.034382][ T7043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.043668][ T7043] RIP: 0033:0x7faf48fe0ba9 [ 234.048220][ T7043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.062267][ T4247] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 234.074570][ T7043] RSP: 002b:00007faf47248038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.084125][ T7043] RAX: ffffffffffffffda RBX: 00007faf49227fa0 RCX: 00007faf48fe0ba9 [ 234.092546][ T7043] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 234.100937][ T5017] usbhid 4-1:0.0: can't add hid device: -32 [ 234.103177][ T7043] RBP: 00007faf49063e19 R08: 0000000000000000 R09: 0000000000000000 [ 234.106923][ T5017] usbhid: probe of 4-1:0.0 failed with error -32 [ 234.129608][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.147249][ T7043] R13: 00007faf49228038 R14: 00007faf49227fa0 R15: 00007ffe86002ef8 [ 234.159316][ T7043] [ 234.162675][ T7043] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.169968][ T7043] CPU: 1 PID: 7043 Comm: syz.4.738 Not tainted syzkaller #0 [ 234.177251][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.187313][ T7043] Call Trace: [ 234.190708][ T7043] [ 234.193638][ T7043] dump_stack_lvl+0x168/0x230 [ 234.198319][ T7043] ? show_regs_print_info+0x20/0x20 [ 234.203583][ T7043] ? load_image+0x3b0/0x3b0 [ 234.208094][ T7043] panic+0x2c9/0x7f0 [ 234.212074][ T7043] ? bpf_jit_dump+0xd0/0xd0 [ 234.216628][ T7043] ? check_map_prog_compatibility+0x6cf/0x870 [ 234.222718][ T7043] __warn+0x248/0x2b0 [ 234.226701][ T7043] ? check_map_prog_compatibility+0x6cf/0x870 [ 234.232797][ T7043] report_bug+0x1b7/0x2e0 [ 234.237148][ T7043] handle_bug+0x3a/0x70 [ 234.241299][ T7043] exc_invalid_op+0x16/0x40 [ 234.245797][ T7043] asm_exc_invalid_op+0x16/0x20 [ 234.250656][ T7043] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 234.257419][ T7043] Code: ff e8 c5 e2 ef ff 48 c7 c6 00 2b 11 8a e9 0d fd ff ff e8 b4 e2 ef ff c6 05 d9 03 ce 0b 01 48 c7 c7 60 27 11 8a e8 71 3f 16 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 234.277113][ T7043] RSP: 0018:ffffc90003d0f450 EFLAGS: 00010246 [ 234.283188][ T7043] RAX: aac2b6b65ab2ec00 RBX: 0000000000000001 RCX: 0000000000080000 [ 234.291245][ T7043] RDX: ffffc9000e37a000 RSI: 0000000000004d6b RDI: 0000000000004d6c [ 234.299209][ T7043] RBP: ffff88807537c000 R08: dffffc0000000000 R09: ffffed10172067b0 [ 234.307174][ T7043] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffffc90001326038 [ 234.315149][ T7043] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000264c07 [ 234.323391][ T7043] resolve_pseudo_ldimm64+0x691/0x1030 [ 234.328859][ T7043] ? check_attach_btf_id+0xe60/0xe60 [ 234.334143][ T7043] ? bpf_check+0x2672/0xf090 [ 234.338743][ T7043] bpf_check+0x30a4/0xf090 [ 234.343163][ T7043] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 234.349148][ T7043] ? bpf_get_btf_vmlinux+0x10/0x10 [ 234.354265][ T7043] ? finish_lock_switch+0x12f/0x280 [ 234.359457][ T7043] ? lockdep_hardirqs_on+0x94/0x140 [ 234.364650][ T7043] ? finish_lock_switch+0x12f/0x280 [ 234.369854][ T7043] ? finish_task_switch+0x1e4/0x640 [ 234.375048][ T7043] ? __switch_to_asm+0x34/0x60 [ 234.379813][ T7043] ? __schedule+0x11c3/0x4390 [ 234.384494][ T7043] ? verify_lock_unused+0x140/0x140 [ 234.389715][ T7043] ? verify_lock_unused+0x140/0x140 [ 234.394920][ T7043] ? release_firmware_map_entry+0x190/0x190 [ 234.400825][ T7043] ? preempt_schedule_irq+0xd0/0x150 [ 234.406114][ T7043] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 234.412094][ T7043] ? lock_chain_count+0x20/0x20 [ 234.416944][ T7043] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 234.422572][ T7043] ? lockdep_hardirqs_on+0x94/0x140 [ 234.427767][ T7043] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 234.433441][ T7043] ? ktime_get_with_offset+0x242/0x320 [ 234.438901][ T7043] ? memset+0x1e/0x40 [ 234.442900][ T7043] ? bpf_obj_name_cpy+0x190/0x1d0 [ 234.447925][ T7043] bpf_prog_load+0x1043/0x1550 [ 234.452697][ T7043] ? map_freeze+0x350/0x350 [ 234.457199][ T7043] ? __might_fault+0xb7/0x110 [ 234.461967][ T7043] ? __might_fault+0xb3/0x110 [ 234.466649][ T7043] ? bpf_lsm_bpf+0x5/0x10 [ 234.470982][ T7043] ? security_bpf+0x7a/0xa0 [ 234.475487][ T7043] __sys_bpf+0x4c2/0x670 [ 234.479733][ T7043] ? bpf_link_show_fdinfo+0x340/0x340 [ 234.485109][ T7043] ? vtime_user_exit+0x2dc/0x400 [ 234.490064][ T7043] __x64_sys_bpf+0x78/0x90 [ 234.494481][ T7043] do_syscall_64+0x4c/0xa0 [ 234.498891][ T7043] ? clear_bhb_loop+0x30/0x80 [ 234.503561][ T7043] ? clear_bhb_loop+0x30/0x80 [ 234.508235][ T7043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.514240][ T7043] RIP: 0033:0x7faf48fe0ba9 [ 234.518681][ T7043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.538475][ T7043] RSP: 002b:00007faf47248038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.546895][ T7043] RAX: ffffffffffffffda RBX: 00007faf49227fa0 RCX: 00007faf48fe0ba9 [ 234.554865][ T7043] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 234.562926][ T7043] RBP: 00007faf49063e19 R08: 0000000000000000 R09: 0000000000000000 [ 234.570979][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.578947][ T7043] R13: 00007faf49228038 R14: 00007faf49227fa0 R15: 00007ffe86002ef8 [ 234.586926][ T7043] [ 234.590153][ T7043] Kernel Offset: disabled [ 234.594637][ T7043] Rebooting in 86400 seconds..