last executing test programs: 8.143001187s ago: executing program 0 (id=4020): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r6, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.586101955s ago: executing program 4 (id=4023): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x120c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x11f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfe1, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x205, 0x5, "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"}]}]}, 0x120c}}, 0x0) r2 = syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) r5 = fcntl$dupfd(r4, 0x0, r4) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r5, &(0x7f0000003780)={0x2020}, 0x2020) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 6.847011248s ago: executing program 1 (id=4025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7c78, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200), 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x8094) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x200000, 0x400}, 0x10, 0xffffffffffffffff}, 0x94) sendto$inet6(r5, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408", 0x42, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r3) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x2012, r6, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 6.500695596s ago: executing program 4 (id=4027): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz0\x00', {0x9, 0x7, 0x3, 0x7}, 0x50, [0x1, 0x9, 0x0, 0x1, 0x8, 0xea49, 0xe, 0x1, 0x63, 0x6, 0x6, 0xc, 0x2, 0x9, 0x7ff, 0x6, 0x8001000, 0x7fffffff, 0xbc3, 0x108, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x4010001, 0xffff, 0x0, 0x40004, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x7, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x7, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0x0, 0x7ffc, 0x6, 0x3, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x3], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x9, 0xc, 0x13, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x7, 0x24d, 0x3, 0xfffffff7, 0x4, 0x3, 0x5, 0x0, 0x80, 0x400a1bf, 0x8001, 0x40, 0xa0, 0x4, 0xffffffff, 0x5, 0x10104, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x7, 0x8000, 0x5, 0xc9, 0x3, 0x1, 0x80000000, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24f, 0x1ff, 0x1, 0x5, 0x86, 0x6, 0x200007, 0x8], [0xfffe, 0x9, 0x1a9e1bfa, 0xfffffffc, 0xb, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x8, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x800005, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x11, 0x4, 0xff, 0x140, 0x2, 0x2, 0x5, 0x3, 0x6, 0x9, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x8, 0x3, 0x5, 0xffffff00, 0x100, 0x3fff80, 0x0, 0x0, 0x8, 0xdd, 0x4, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x80000001, 0x1, 0x1, 0xfffffff3, 0xd077, 0x3, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x8, 0x5, 0x80000001, 0x7, 0xd, 0x0, 0xfffffffd, 0x7be, 0x10001, 0x61, 0x10, 0x1002, 0xc, 0x100, 0x8, 0x2, 0x8, 0x15, 0x332a, 0x200, 0x8001, 0x1904, 0x4, 0xc, 0x8, 0x7fb, 0x280, 0x7, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xe, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0xb8, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) 6.497638071s ago: executing program 3 (id=4028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, 0x0, 0x2000, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth1_vlan\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) 6.448322947s ago: executing program 0 (id=4029): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./cgroup/../file0\x00') r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x6, 0x0, 0xfe, 0x7fff0000}, {0x5, 0x5, 0xff, 0x7}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e40)="b364d26dbfbfb1a935288994a97cde05e6c491896929908e9cf9d977556120ef64f18dc9d6ed9a1ceb778078c616e6cee121002ce0975990f3f0d5077083faa0", 0x40}], 0x1, 0x0, 0x0, 0x20008045}}], 0x1, 0x40000) 6.036856198s ago: executing program 4 (id=4030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e", 0x6, 0xfffffffffffffffb) keyctl$update(0x2, r4, &(0x7f0000000000)="11868a0fceae284c00000001000000", 0xf) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbd8, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x28, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.9898625s ago: executing program 1 (id=4031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x30, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x4) 4.989459527s ago: executing program 4 (id=4032): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffffffff, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x2, 0x2c0001) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) sendmsg$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x34) keyctl$revoke(0x3, r3) 4.697689168s ago: executing program 1 (id=4034): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x26, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0xffffeff9, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x74, 0x6, 0x0, 0x1, 0xfffffffffffffffe, 0x1, 0x4}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, &(0x7f0000000480)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0xc021) socket$netlink(0x10, 0x3, 0xa) ftruncate(0xffffffffffffffff, 0x200004) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x403e480765b7c4cf}, 0x4000045) recvmsg$can_bcm(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000540)=""/233, 0xe9}], 0x2}, 0x40000160) setsockopt$inet_int(r1, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4) syz_usb_connect(0x0, 0xe6, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003cb63b206d04b00827e5010203010902d400010000000009040400025a82e500052406000105240001000d240f01060000006e0040000406241a001214052415"], 0x0) listen(r1, 0x400) clock_getres(0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd"], 0x0) 3.577939019s ago: executing program 3 (id=4038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x54, 0x93d, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x2, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x25, 0x18, @val=@netfilter={0x5, 0x0, 0x8}}, 0x20) 3.130658031s ago: executing program 0 (id=4039): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000700), 0x143140, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000740)) 2.968612521s ago: executing program 3 (id=4040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa0}}, 0x0) 2.868302772s ago: executing program 0 (id=4041): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008108e6c92aa73772cc9f1ba1f848110000005e140602000000e10d000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x88500, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x359, "06000000f62402811788c2ffbdc7c772020acd2c0000000002ab0b0018c47240", 0xffffffffffffffff}) ioprio_set$uid(0x0, 0xee00, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xc}, {r3, 0x2046}, {r3, 0x400}, {r2, 0x2000}], 0x4, 0x0, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x2, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x1, 0x8000, 0xe24, 0xe}}) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa02aaaa15ffffffffffff08004500006800000000000290788a010101ac1414bb4434f4930000000000b112fb5653d733bb9c5833b7addd0000090000000000000007ac1414bb00000009e0000001000000016401010100000009e000000100000007440c6693e00000ea2500000111009078e000"], 0x0) getsockopt$MRT6(r4, 0x29, 0xd0, 0xffffffffffffffff, 0x0) 2.734944794s ago: executing program 3 (id=4042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7c78, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200), 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x8094) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x200000, 0x400}, 0x10, 0xffffffffffffffff}, 0x94) sendto$inet6(r5, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408", 0x42, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r3) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x2012, r6, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 2.655040297s ago: executing program 2 (id=4043): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], '\t'}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) tkill(r3, 0x12) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="cb76b1c3"], 0x44}}, 0x0) 2.547788674s ago: executing program 4 (id=4044): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b", 0x9d}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x390}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.352482499s ago: executing program 2 (id=4045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x38c}}, 0x0) 2.224299391s ago: executing program 4 (id=4046): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 2.166954807s ago: executing program 2 (id=4047): r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.970654932s ago: executing program 2 (id=4048): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r1, &(0x7f0000003780)={0x2020}, 0x3f) 1.812500505s ago: executing program 2 (id=4049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x40000000, 0x0) 1.752479607s ago: executing program 0 (id=4050): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) munlockall() syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.588489071s ago: executing program 0 (id=4051): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000001090400eb010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0xed, 0xa8b7ba2762d43937, 0x0, 0x0}, {0xddb, 0x1, 0x0, 0x0}, {0x6, 0xc000, 0x0, 0x0}], 0x3}) 1.550037615s ago: executing program 1 (id=4052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa0}}, 0x0) 1.409601674s ago: executing program 1 (id=4053): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x120c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x11f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfe1, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x205, 0x5, "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"}]}]}, 0x120c}}, 0x0) r2 = syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r6, &(0x7f0000003780)={0x2020}, 0x2020) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 1.368538669s ago: executing program 3 (id=4054): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffffffff, 0xfa11, 0xffffffff}, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x2, 0x2c0001) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x100000000000f7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x34) keyctl$revoke(0x3, r1) 1.237435963s ago: executing program 3 (id=4055): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100)=0x9, 0x4) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) close(0x3) 620.185826ms ago: executing program 2 (id=4056): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x80040af1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012"], 0x3c}, 0x1, 0xba01}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup(r7) 0s ago: executing program 1 (id=4057): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): t=0, SerialNumber=0 [ 683.347433][ T30] audit: type=1326 audit(1762046338.587:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16285 comm="syz.0.3211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 683.372190][ T5840] usb 4-1: config 0 descriptor?? [ 683.439109][ T30] audit: type=1326 audit(1762046338.587:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16285 comm="syz.0.3211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 683.461240][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.511465][T16296] misc userio: No port type given on /dev/userio [ 683.518741][T16296] misc userio: The device must be registered before sending interrupts [ 683.640798][ T5840] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 683.662640][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 683.690305][ T5840] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 683.702130][ T5840] usb 4-1: media controller created [ 683.772552][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 683.794193][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 683.804854][ T5831] usb 2-1: no configurations [ 683.815973][ T5831] usb 2-1: can't read configurations, error -22 [ 683.841282][T16282] dib0700: tx buffer length is larger than 4. Not supported. [ 683.974989][ T5840] DVB: Unable to find symbol dib7000p_attach() [ 683.998710][ T5840] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 684.379621][ T5840] rc_core: IR keymap rc-dib0700-rc5 not found [ 684.385854][ T5840] Registered IR keymap rc-empty [ 684.410769][ T5840] dvb-usb: could not initialize remote control. [ 684.444357][ T5840] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 684.540072][T16306] team0: Device gtp0 is of different type [ 685.338251][ T5840] usb 4-1: USB disconnect, device number 54 [ 685.621560][ T5840] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 686.147301][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.153741][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.305651][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'. [ 686.389546][T16325] vim2m vim2m.0: vidioc_s_fmt queue busy [ 686.909861][T16328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3219'. [ 687.074793][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'. [ 687.792042][T16341] binder: BINDER_SET_CONTEXT_MGR already set [ 687.798189][T16341] binder: 16336:16341 ioctl 4018620d 80000040 returned -16 [ 687.813845][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880207bb000: rx timeout, send abort [ 687.824146][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880207bbc00: rx timeout, send abort [ 687.832691][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880207bb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 687.848393][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880207bbc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 688.086198][T16040] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 688.279516][T16040] usb 1-1: Using ep0 maxpacket: 16 [ 688.344617][T16040] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 688.357413][T16040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.376542][T16040] usb 1-1: Product: syz [ 688.392402][T16040] usb 1-1: Manufacturer: syz [ 688.404800][T16040] usb 1-1: SerialNumber: syz [ 688.683902][T16040] r8152-cfgselector 1-1: Unknown version 0x0000 [ 688.860954][T16040] r8152-cfgselector 1-1: config 0 descriptor?? [ 689.368850][ T6074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.423993][ T6074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.487407][ T6074] bond0 (unregistering): Released all slaves [ 689.672321][ T6074] tipc: Disabling bearer [ 689.677930][ T6074] tipc: Left network mode [ 690.603968][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.611559][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.833375][T16040] r8152-cfgselector 1-1: Unknown version 0x0000 [ 690.840578][T16040] r8152-cfgselector 1-1: bad CDC descriptors [ 690.897851][T16040] r8152-cfgselector 1-1: USB disconnect, device number 52 [ 691.293832][T16369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.326935][T16369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.008588][ T3451] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.057189][ T6083] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.159356][ T6074] hsr_slave_0: left promiscuous mode [ 692.169710][ T6074] hsr_slave_1: left promiscuous mode [ 692.175947][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.176185][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'. [ 692.200722][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.665293][T16405] misc userio: No port type given on /dev/userio [ 692.672652][T16405] misc userio: The device must be registered before sending interrupts [ 693.293728][ T6074] team0 (unregistering): Port device team_slave_1 removed [ 693.350212][ T6074] team0 (unregistering): Port device team_slave_0 removed [ 693.877827][ T30] audit: type=1326 audit(1762046349.697:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16406 comm="syz.1.3241" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x0 [ 693.919686][ T6083] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.097317][ T6083] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.348152][ T6074] IPVS: stop unused estimator thread 0... [ 696.445077][ T30] audit: type=1326 audit(1762046352.267:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 696.467216][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.553980][ T30] audit: type=1326 audit(1762046352.267:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 696.646821][ T30] audit: type=1326 audit(1762046352.307:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 696.668955][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.717573][ T30] audit: type=1326 audit(1762046352.307:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 696.743313][ T30] audit: type=1326 audit(1762046352.307:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.1.3256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 696.840389][ T44] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 697.070204][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 697.098831][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 697.138374][ T44] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 697.170892][ T44] usb 1-1: config 4 has no interface number 0 [ 697.177030][ T44] usb 1-1: config 4 interface 30 has no altsetting 0 [ 697.204921][ T44] usb 1-1: string descriptor 0 read error: -22 [ 697.219568][ T44] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 697.228726][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.259299][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 697.530973][ T44] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 697.538300][ T44] dw2102: su3000_power_ctrl: 1, initialized 0 [ 697.549890][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 697.679078][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 697.717424][ T44] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 697.726873][ T44] usb 1-1: media controller created [ 697.735223][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 697.742151][ T44] dw2102: i2c transfer failed. [ 697.783821][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 697.801681][T16488] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3265'. [ 697.853417][ T44] dw2102: i2c transfer failed. [ 697.858249][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 697.879933][ T44] dw2102: i2c transfer failed. [ 697.900674][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 697.929434][ T44] dw2102: i2c transfer failed. [ 697.934247][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 697.979554][ T5831] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 698.117258][ T30] audit: type=1326 audit(1762046353.937:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16469 comm="syz.1.3260" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x0 [ 698.139070][ T44] dw2102: i2c transfer failed. [ 698.147778][T16494] misc userio: No port type given on /dev/userio [ 698.158726][T16494] misc userio: The device must be registered before sending interrupts [ 698.167591][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 698.194011][ T44] dw2102: i2c transfer failed. [ 698.215862][ T44] dvb-usb: MAC address: 02:02:02:02:02:02 [ 698.250437][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 698.306618][ T5831] usb 4-1: config 0 has an invalid interface number: 223 but max is 0 [ 698.379417][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.465654][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.613316][ T5831] usb 4-1: config 0 has no interface number 0 [ 698.641122][ T5831] usb 4-1: config 0 interface 223 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 698.720293][ T5831] usb 4-1: config 0 interface 223 has no altsetting 0 [ 698.728749][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 698.755498][ T44] dw2102: command 0x0e transfer failed. [ 698.792659][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 698.798652][ T5831] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 698.815022][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.859440][ T44] dw2102: command 0x0e transfer failed. [ 698.865055][ T5831] usb 4-1: Product: syz [ 698.875145][ T5831] usb 4-1: Manufacturer: syz [ 698.879862][ T5831] usb 4-1: SerialNumber: syz [ 698.890164][ T5831] usb 4-1: config 0 descriptor?? [ 698.971665][T16502] netlink: 'syz.1.3269': attribute type 12 has an invalid length. [ 699.169548][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 699.175363][ T44] dw2102: command 0x0e transfer failed. [ 699.181148][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 699.196808][ T44] dw2102: command 0x0e transfer failed. [ 699.301468][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 699.333474][ T44] dw2102: command 0x51 transfer failed. [ 699.355864][ T44] dvb-usb: bulk message failed: -22 (5/0) [ 699.381428][ T44] dw2102: i2c probe for address 0x68 failed. [ 699.405870][ T44] dvb-usb: bulk message failed: -22 (5/0) [ 699.469862][ T44] dw2102: i2c probe for address 0x69 failed. [ 699.483237][ T44] dvb-usb: bulk message failed: -22 (5/0) [ 699.504146][ T44] dw2102: i2c probe for address 0x6a failed. [ 699.527533][ T44] dw2102: probing for demodulator failed. Is the external power switched on? [ 699.548723][ T44] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 699.829561][ T44] rc_core: IR keymap rc-tt-1500 not found [ 699.873402][ T44] Registered IR keymap rc-empty [ 699.931173][ T44] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 699.989044][ T30] audit: type=1326 audit(1762046355.807:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 700.012210][ T44] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input36 [ 700.075802][ T44] dvb-usb: schedule remote query interval to 250 msecs. [ 700.143469][ T30] audit: type=1326 audit(1762046355.817:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 700.182262][ T44] dw2102: su3000_power_ctrl: 0, initialized 1 [ 700.214155][ T44] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 700.269614][ T44] usb 1-1: USB disconnect, device number 53 [ 700.294410][ T30] audit: type=1326 audit(1762046355.827:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 700.675046][ T44] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 700.688027][ T30] audit: type=1326 audit(1762046355.827:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 700.849666][ T30] audit: type=1326 audit(1762046355.827:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 700.871745][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.915632][ T5831] usb 4-1: Can not set alternate setting to 1, error: -71 [ 700.970056][ T5831] synaptics_usb 4-1:0.223: probe with driver synaptics_usb failed with error -71 [ 701.039586][ T5831] usb 4-1: USB disconnect, device number 55 [ 701.199519][ T30] audit: type=1326 audit(1762046355.827:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 701.221632][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.317233][ T30] audit: type=1326 audit(1762046355.837:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 701.469250][ T30] audit: type=1326 audit(1762046355.847:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 701.522286][ T30] audit: type=1326 audit(1762046355.847:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 701.606223][ T30] audit: type=1326 audit(1762046355.847:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 701.710885][T16535] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 701.717425][T16535] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 701.732823][T16535] vhci_hcd vhci_hcd.0: Device attached [ 701.935984][T16538] vhci_hcd: connection closed [ 701.952444][T16389] vhci_hcd: stop threads [ 701.970345][T16389] vhci_hcd: release socket [ 701.992174][T16389] vhci_hcd: disconnect device [ 702.019914][ T5910] usb 36-1: enqueue for inactive port 0 [ 702.450188][T16558] misc userio: No port type given on /dev/userio [ 702.457293][T16558] misc userio: The device must be registered before sending interrupts [ 702.534951][ T5910] usb usb36-port1: attempt power cycle [ 703.171888][ T5910] usb usb36-port1: unable to enumerate USB device [ 703.260126][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 703.306252][T16568] netlink: 'syz.3.3287': attribute type 12 has an invalid length. [ 703.419713][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 703.453807][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 703.469739][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.504233][ T9] usb 2-1: config 0 descriptor?? [ 703.886615][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 703.974922][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 704.000503][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 704.018263][ T9] usb 2-1: media controller created [ 704.100156][T16564] dib0700: tx buffer length is larger than 4. Not supported. [ 704.255303][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 704.626201][ T9] DVB: Unable to find symbol dib7000p_attach() [ 704.636107][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 704.889555][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 704.895830][ T9] Registered IR keymap rc-empty [ 704.902057][ T9] dvb-usb: could not initialize remote control. [ 704.929677][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 705.667509][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 705.667522][ T30] audit: type=1326 audit(1762046361.487:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 705.739304][ T9] usb 2-1: USB disconnect, device number 47 [ 705.926421][ T30] audit: type=1326 audit(1762046361.537:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 705.954190][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 706.218214][ T30] audit: type=1326 audit(1762046361.557:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 706.261712][ T30] audit: type=1326 audit(1762046361.557:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 706.283796][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.401923][ T30] audit: type=1326 audit(1762046361.557:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 706.455353][ T30] audit: type=1326 audit(1762046361.557:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 706.485248][T16606] misc userio: No port type given on /dev/userio [ 706.492065][T16606] misc userio: The device must be registered before sending interrupts [ 706.569480][ T30] audit: type=1326 audit(1762046361.557:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 706.638801][ T30] audit: type=1326 audit(1762046361.557:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 706.661595][ T30] audit: type=1326 audit(1762046361.557:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 706.683747][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.692603][T16612] netlink: 'syz.3.3301': attribute type 12 has an invalid length. [ 706.748786][ T30] audit: type=1326 audit(1762046361.557:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 706.770917][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.877862][T16615] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 706.884404][T16615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 706.899692][T16615] vhci_hcd vhci_hcd.0: Device attached [ 707.054714][T16616] vhci_hcd: connection closed [ 707.055250][ T6065] vhci_hcd: stop threads [ 707.067187][ T6065] vhci_hcd: release socket [ 707.071893][ T6065] vhci_hcd: disconnect device [ 707.086882][T16619] syzkaller0: entered promiscuous mode [ 707.092536][T16619] syzkaller0: entered allmulticast mode [ 707.749600][ T5831] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 707.941852][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 707.995078][ T5831] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 708.068466][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.464097][ T5831] usb 1-1: config 0 has no interface number 0 [ 708.477074][ T5831] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 708.583165][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 708.592829][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.609483][ T5831] usb 1-1: Product: syz [ 708.613696][ T5831] usb 1-1: Manufacturer: syz [ 708.618269][ T5831] usb 1-1: SerialNumber: syz [ 708.624811][ T5831] usb 1-1: config 0 descriptor?? [ 708.636391][T16645] misc userio: No port type given on /dev/userio [ 708.643593][T16645] misc userio: The device must be registered before sending interrupts [ 709.100227][T16653] syzkaller0: entered promiscuous mode [ 709.147702][T16653] syzkaller0: entered allmulticast mode [ 709.285821][T16658] netlink: 'syz.2.3317': attribute type 12 has an invalid length. [ 709.647343][T16672] misc userio: No port type given on /dev/userio [ 709.662517][T16672] misc userio: The device must be registered before sending interrupts [ 710.306447][ T9] usb 1-1: USB disconnect, device number 54 [ 710.963087][T16690] misc userio: No port type given on /dev/userio [ 710.970270][T16690] misc userio: The device must be registered before sending interrupts [ 711.501152][T16694] syzkaller0: entered promiscuous mode [ 711.520077][T16694] syzkaller0: entered allmulticast mode [ 711.653521][T16703] netlink: 'syz.0.3334': attribute type 12 has an invalid length. [ 713.301281][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 713.544589][T16729] netlink: 'syz.2.3342': attribute type 1 has an invalid length. [ 714.139632][ T44] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 714.289596][ T44] usb 4-1: device descriptor read/64, error -71 [ 714.392488][T16739] syzkaller0: entered promiscuous mode [ 714.416830][T16739] syzkaller0: entered allmulticast mode [ 714.529526][ T44] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 714.610118][T16744] netlink: 'syz.2.3347': attribute type 12 has an invalid length. [ 714.659831][ T44] usb 4-1: device descriptor read/64, error -71 [ 714.772601][T16748] misc userio: No port type given on /dev/userio [ 714.780331][T16748] misc userio: The device must be registered before sending interrupts [ 714.797204][ T44] usb usb4-port1: attempt power cycle [ 714.904545][T16753] program syz.0.3351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.139554][ T44] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 715.243021][ T44] usb 4-1: device descriptor read/8, error -71 [ 715.533380][ T44] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 715.560322][ T44] usb 4-1: device descriptor read/8, error -71 [ 715.819054][ T44] usb usb4-port1: unable to enumerate USB device [ 716.838249][T16777] syzkaller0: entered promiscuous mode [ 716.844042][T16777] syzkaller0: entered allmulticast mode [ 718.139606][T16792] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.147306][T16792] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.275710][T16792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.287685][T16792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.615994][T16807] misc userio: No port type given on /dev/userio [ 718.623147][T16807] misc userio: The device must be registered before sending interrupts [ 718.789613][ T44] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 718.808574][T16799] netlink: 'syz.2.3364': attribute type 12 has an invalid length. [ 718.828954][ T6065] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.863542][ T6065] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.883241][ T6065] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.902192][ T6065] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.929560][ T44] usb 4-1: device descriptor read/64, error -71 [ 719.059131][T16809] tipc: Enabled bearer , priority 0 [ 719.074833][T16809] tipc: Resetting bearer [ 719.133441][T16808] tipc: Disabling bearer [ 719.219733][ T44] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 719.442962][T16815] syzkaller0: entered promiscuous mode [ 719.451609][T16815] syzkaller0: entered allmulticast mode [ 719.471548][ T44] usb 4-1: device descriptor read/64, error -71 [ 719.589004][ T44] usb usb4-port1: attempt power cycle [ 719.981511][ T44] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 720.010332][ T44] usb 4-1: device descriptor read/8, error -71 [ 720.250026][ T44] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 720.283856][ T44] usb 4-1: device descriptor read/8, error -71 [ 720.518553][T16831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3374'. [ 720.549128][ T44] usb usb4-port1: unable to enumerate USB device [ 720.842329][T16838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3377'. [ 721.783282][T16854] netlink: 'syz.3.3381': attribute type 12 has an invalid length. [ 721.829502][ T5840] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 721.989490][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 722.002317][ T5840] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 722.002646][T16856] syzkaller0: entered promiscuous mode [ 722.020334][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.023081][T16856] syzkaller0: entered allmulticast mode [ 722.079021][ T5840] usb 1-1: config 0 descriptor?? [ 722.393019][ T5840] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 722.618120][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 722.634896][ T5840] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 722.643388][ T5840] usb 1-1: media controller created [ 722.767500][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'. [ 722.798848][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 723.211259][ T5840] DVB: Unable to find symbol dib7000p_attach() [ 723.244495][ T5840] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 723.305825][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 723.305841][ T30] audit: type=1326 audit(1762046379.127:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 723.334274][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.343269][ T30] audit: type=1326 audit(1762046379.127:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 723.365334][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.372213][ T30] audit: type=1326 audit(1762046379.137:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=294 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 723.942753][ T30] audit: type=1326 audit(1762046379.167:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 723.967026][ T5840] rc_core: IR keymap rc-dib0700-rc5 not found [ 723.978760][ T5840] Registered IR keymap rc-empty [ 723.993384][ T5840] dvb-usb: could not initialize remote control. [ 724.015557][ T5840] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 724.056098][ T30] audit: type=1326 audit(1762046379.167:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 724.065747][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 724.084482][ T44] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 724.117916][ T5840] usb 1-1: USB disconnect, device number 55 [ 724.207417][ T5840] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 724.240096][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 724.250389][ T44] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 724.261659][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.289813][ T44] usb 3-1: config 0 has no interface number 0 [ 724.305566][ T44] usb 3-1: config 0 interface 223 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 724.338084][ T44] usb 3-1: config 0 interface 223 has no altsetting 0 [ 724.378157][ T44] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 724.401429][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.418093][ T44] usb 3-1: Product: syz [ 724.431153][ T44] usb 3-1: Manufacturer: syz [ 724.442907][ T44] usb 3-1: SerialNumber: syz [ 724.479656][ T44] usb 3-1: config 0 descriptor?? [ 724.497977][T16895] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 724.573059][T16902] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3395'. [ 724.588442][T16902] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 725.253945][T16908] netlink: 'syz.1.3396': attribute type 12 has an invalid length. [ 725.368432][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 726.525877][ T44] usb 3-1: Can not set alternate setting to 1, error: -71 [ 726.536175][ T44] synaptics_usb 3-1:0.223: probe with driver synaptics_usb failed with error -71 [ 726.618107][ T44] usb 3-1: USB disconnect, device number 62 [ 726.630768][T16921] tipc: Enabled bearer , priority 0 [ 726.741181][T16921] tipc: Resetting bearer [ 726.778129][T16920] tipc: Disabling bearer [ 727.358620][T16930] team0: Device gtp0 is of different type [ 727.685640][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3405'. [ 727.714526][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3405'. [ 728.388676][T16945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 729.379488][ T44] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 729.529663][ T44] usb 4-1: device descriptor read/64, error -71 [ 729.789544][ T44] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 729.981440][ T44] usb 4-1: device descriptor read/64, error -71 [ 730.139071][T16982] team0: Device gtp0 is of different type [ 730.166430][ T44] usb usb4-port1: attempt power cycle [ 730.529508][ T44] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 730.550375][ T44] usb 4-1: device descriptor read/8, error -71 [ 730.873807][ T44] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 730.960179][ T44] usb 4-1: device descriptor read/8, error -71 [ 731.070092][ T44] usb usb4-port1: unable to enumerate USB device [ 731.141280][T16991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3423'. [ 732.664901][T17010] misc userio: No port type given on /dev/userio [ 732.675346][T17010] misc userio: The device must be registered before sending interrupts [ 734.401091][T17039] syzkaller0: entered promiscuous mode [ 734.406579][T17039] syzkaller0: entered allmulticast mode [ 734.505996][T17041] team0: Device gtp0 is of different type [ 734.997468][T17046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 735.008014][T17046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 735.273627][T17051] netlink: 'syz.2.3440': attribute type 1 has an invalid length. [ 735.484087][T17051] bond1: entered promiscuous mode [ 735.490045][T17051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.224702][T17063] binder: 17062:17063 ioctl 4018620d 0 returned -22 [ 736.423708][T17069] usb usb8: usbfs: process 17069 (syz.2.3446) did not claim interface 0 before use [ 736.619849][T17072] netlink: 'syz.0.3447': attribute type 12 has an invalid length. [ 736.697172][T17075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 736.703718][T17075] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 736.725866][T17075] vhci_hcd vhci_hcd.0: Device attached [ 736.841756][T17077] syzkaller0: entered promiscuous mode [ 736.847424][T17077] syzkaller0: entered allmulticast mode [ 737.087591][T17076] vhci_hcd: connection closed [ 737.088080][ T6065] vhci_hcd: stop threads [ 737.097448][ T44] usb 36-1: SetAddress Request (29) to port 0 [ 737.098014][ T6065] vhci_hcd: release socket [ 737.114821][ T6065] vhci_hcd: disconnect device [ 737.176314][ T44] usb 36-1: new SuperSpeed USB device number 29 using vhci_hcd [ 737.249642][ T44] usb 36-1: enqueue for inactive port 0 [ 737.640573][ T44] usb usb36-port1: attempt power cycle [ 738.049257][T17097] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 738.950742][ T44] usb usb36-port1: unable to enumerate USB device [ 739.080391][T17109] binder: 17107:17109 ioctl 4018620d 0 returned -22 [ 739.444443][T16888] Bluetooth: hci4: command 0x0406 tx timeout [ 739.803580][T17121] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 741.610790][ T5926] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 741.613616][T17141] tipc: Enabling of bearer rejected, failed to enable media [ 741.838877][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3466'. [ 741.851903][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.919173][ T5926] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 741.970327][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 741.980093][ T5926] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 742.013209][T17145] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 742.019744][T17145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 742.032696][T17145] vhci_hcd vhci_hcd.0: Device attached [ 742.076118][ T5926] usb 1-1: Manufacturer: syz [ 742.115263][ T5926] usb 1-1: config 0 descriptor?? [ 742.177358][T17152] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 742.183901][T17152] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 742.193202][T17152] vhci_hcd vhci_hcd.0: Device attached [ 742.219708][T17148] vhci_hcd: connection closed [ 742.229167][ T13] vhci_hcd: stop threads [ 742.238369][ T13] vhci_hcd: release socket [ 742.243700][ T13] vhci_hcd: disconnect device [ 742.463765][T16040] usb 40-1: SetAddress Request (17) to port 0 [ 742.472981][T16040] usb 40-1: new SuperSpeed USB device number 17 using vhci_hcd [ 742.757963][T17153] vhci_hcd: connection reset by peer [ 742.777640][T16389] vhci_hcd: stop threads [ 742.782551][T16389] vhci_hcd: release socket [ 742.790317][T16389] vhci_hcd: disconnect device [ 742.954553][T17162] netlink: 'syz.4.3470': attribute type 12 has an invalid length. [ 743.517408][T17173] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 743.573841][T17175] tipc: Started in network mode [ 743.579007][T17175] tipc: Node identity 4, cluster identity 4711 [ 743.585417][T17175] tipc: Node number set to 4 [ 744.134700][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3476'. [ 744.434959][T17188] tipc: Enabling of bearer rejected, failed to enable media [ 744.544773][ T5831] usb 1-1: USB disconnect, device number 56 [ 744.884352][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056350000: rx timeout, send abort [ 744.892782][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056350800: rx timeout, send abort [ 744.901324][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056350000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 744.915689][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056350800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 744.987620][T17199] netlink: 'syz.2.3482': attribute type 12 has an invalid length. [ 745.607622][T17213] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 746.388631][T17217] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 746.395184][T17217] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 746.404888][T17217] vhci_hcd vhci_hcd.0: Device attached [ 746.504810][T17218] vhci_hcd: connection closed [ 746.508149][T16389] vhci_hcd: stop threads [ 746.540502][T16389] vhci_hcd: release socket [ 746.544961][T16389] vhci_hcd: disconnect device [ 747.099850][T17236] team0: Device gtp0 is of different type [ 747.647912][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.656263][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.667415][T16040] usb 40-1: device descriptor read/8, error -110 [ 748.227686][T16040] usb usb40-port1: attempt power cycle [ 748.246907][T17254] netlink: 'syz.3.3496': attribute type 12 has an invalid length. [ 748.890850][T16040] usb usb40-port1: unable to enumerate USB device [ 750.263363][T17278] misc userio: No port type given on /dev/userio [ 750.270017][T17278] misc userio: The device must be registered before sending interrupts [ 751.349784][T17291] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 751.356414][T17291] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 751.370226][T17291] vhci_hcd vhci_hcd.0: Device attached [ 751.459783][T17293] vhci_hcd: connection closed [ 751.460205][ T6065] vhci_hcd: stop threads [ 751.469164][ T6065] vhci_hcd: release socket [ 751.480219][ T6065] vhci_hcd: disconnect device [ 753.126289][ T30] audit: type=1326 audit(1762046408.927:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 753.195751][ T30] audit: type=1326 audit(1762046408.947:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 753.318347][ T30] audit: type=1326 audit(1762046408.977:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 753.351673][ T30] audit: type=1326 audit(1762046408.977:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 753.438201][ T30] audit: type=1326 audit(1762046408.977:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 753.460365][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.632679][ T30] audit: type=1326 audit(1762046408.977:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 753.768202][ T30] audit: type=1326 audit(1762046408.987:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 753.792761][ T30] audit: type=1326 audit(1762046408.987:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 753.814834][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.872141][ T30] audit: type=1326 audit(1762046408.987:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 753.894487][ C1] vkms_vblank_simulate: vblank timer overrun [ 754.007201][ T30] audit: type=1326 audit(1762046408.987:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.2.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 754.029429][ C1] vkms_vblank_simulate: vblank timer overrun [ 754.779598][T16888] Bluetooth: hci1: command 0x0406 tx timeout [ 754.922755][T17333] misc userio: No port type given on /dev/userio [ 754.930207][T17333] misc userio: The device must be registered before sending interrupts [ 756.208598][T17356] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 756.215123][T17356] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 756.229646][T17356] vhci_hcd vhci_hcd.0: Device attached [ 756.265044][T17357] vhci_hcd: connection closed [ 756.266731][ T6083] vhci_hcd: stop threads [ 756.297128][ T6083] vhci_hcd: release socket [ 756.306648][ T6083] vhci_hcd: disconnect device [ 756.604415][T16040] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 756.769491][T16040] usb 2-1: Using ep0 maxpacket: 16 [ 757.053133][T16040] usb 2-1: config 0 has no interfaces? [ 757.397428][T16040] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 757.569486][T16040] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 757.770406][T16040] usb 2-1: Manufacturer: syz [ 758.069138][T16040] usb 2-1: config 0 descriptor?? [ 758.628002][T17390] misc userio: No port type given on /dev/userio [ 758.634794][T17390] misc userio: The device must be registered before sending interrupts [ 759.049491][T16040] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 759.072930][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 759.072946][ T30] audit: type=1326 audit(1762046414.887:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 759.116770][ T30] audit: type=1326 audit(1762046414.927:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 759.139338][ T30] audit: type=1326 audit(1762046414.947:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 759.162109][ T30] audit: type=1326 audit(1762046414.947:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 759.252188][ T30] audit: type=1326 audit(1762046414.947:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 759.264850][T16040] usb 3-1: Using ep0 maxpacket: 32 [ 759.301386][T16040] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 759.311585][T16040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.317747][ T30] audit: type=1326 audit(1762046414.947:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 759.344661][ T30] audit: type=1326 audit(1762046414.957:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 759.387071][T16040] usb 3-1: config 0 descriptor?? [ 759.655574][ T30] audit: type=1326 audit(1762046414.957:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 759.655682][T16040] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 760.020842][ T30] audit: type=1326 audit(1762046414.957:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 760.065861][ T30] audit: type=1326 audit(1762046414.957:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17397 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 760.088078][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.096383][T16040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 760.180233][ T9] usb 2-1: USB disconnect, device number 48 [ 760.205942][T17411] team0: Device gtp0 is of different type [ 760.253485][T16040] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 760.318035][T16040] usb 3-1: media controller created [ 760.554833][T17421] syzkaller0: entered promiscuous mode [ 760.560769][T17421] syzkaller0: entered allmulticast mode [ 760.612605][T16040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 760.959625][T16040] DVB: Unable to find symbol dib7000p_attach() [ 760.965972][T16040] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 761.201790][T16040] rc_core: IR keymap rc-dib0700-rc5 not found [ 761.238640][T17422] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 761.245171][T17422] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 761.269594][T16040] Registered IR keymap rc-empty [ 761.275688][T16040] dvb-usb: could not initialize remote control. [ 761.292324][T16040] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 761.302161][T17422] vhci_hcd vhci_hcd.0: Device attached [ 761.328055][T17434] vhci_hcd: connection closed [ 761.328329][ T6065] vhci_hcd: stop threads [ 761.411428][ T6065] vhci_hcd: release socket [ 761.426574][ T6065] vhci_hcd: disconnect device [ 761.653447][T16040] usb 3-1: USB disconnect, device number 63 [ 761.765130][T16040] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 762.438951][T17448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3548'. [ 762.459777][T17448] vim2m vim2m.0: vidioc_s_fmt queue busy [ 764.712013][T17486] misc userio: No port type given on /dev/userio [ 764.718829][T17486] misc userio: The device must be registered before sending interrupts [ 765.223419][T17488] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 765.229954][T17488] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 765.556600][T17498] netlink: 'syz.2.3563': attribute type 10 has an invalid length. [ 765.593755][T17498] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.610010][T17488] vhci_hcd vhci_hcd.0: Device attached [ 765.621161][T17495] vhci_hcd: connection closed [ 765.622212][ T6074] vhci_hcd: stop threads [ 765.636096][ T6074] vhci_hcd: release socket [ 765.640775][ T6074] vhci_hcd: disconnect device [ 765.654562][T17498] bond0: (slave team0): Enslaving as an active interface with an up link [ 766.038293][T17501] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.129120][T17501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.148196][T17501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.383640][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'. [ 766.408735][T17492] delete_channel: no stack [ 766.414033][ T6083] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.482300][ T6083] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.516414][ T6083] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.527943][ T6083] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.728259][T17517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3570'. [ 768.826675][T17548] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 768.833206][T17548] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 768.887124][T17548] vhci_hcd vhci_hcd.0: Device attached [ 768.925926][T17557] misc userio: No port type given on /dev/userio [ 768.967568][T17557] misc userio: The device must be registered before sending interrupts [ 769.047397][T17552] vhci_hcd: connection closed [ 769.047713][ T6074] vhci_hcd: stop threads [ 769.060996][ T6074] vhci_hcd: release socket [ 769.065582][ T6074] vhci_hcd: disconnect device [ 769.128228][T17563] netlink: 'syz.4.3586': attribute type 12 has an invalid length. [ 770.447831][T17584] netlink: 'syz.3.3593': attribute type 1 has an invalid length. [ 770.759931][T17586] bond2: (slave bridge2): making interface the new active one [ 770.768250][T17586] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 770.989439][T17601] misc userio: No port type given on /dev/userio [ 770.996497][T17601] misc userio: The device must be registered before sending interrupts [ 772.140120][T17617] netlink: 'syz.0.3601': attribute type 12 has an invalid length. [ 772.189707][T17618] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 772.196234][T17618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 772.235528][T17618] vhci_hcd vhci_hcd.0: Device attached [ 772.482715][T17619] vhci_hcd: connection closed [ 772.489760][ T6083] vhci_hcd: stop threads [ 772.539586][T16040] usb 40-1: SetAddress Request (21) to port 0 [ 772.545716][T16040] usb 40-1: new SuperSpeed USB device number 21 using vhci_hcd [ 772.593778][ T6083] vhci_hcd: release socket [ 772.605107][ T6083] vhci_hcd: disconnect device [ 773.375811][ T5841] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 773.558773][ T5841] usb 3-1: device descriptor read/64, error -71 [ 773.867125][ T5841] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 774.009458][ T5841] usb 3-1: device descriptor read/64, error -71 [ 774.119940][ T5841] usb usb3-port1: attempt power cycle [ 774.468193][ T5841] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 774.550204][ T5841] usb 3-1: device descriptor read/8, error -71 [ 774.799556][ T5841] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 774.820215][ T5841] usb 3-1: device descriptor read/8, error -71 [ 774.940352][T17668] syzkaller0: entered promiscuous mode [ 774.940615][ T5841] usb usb3-port1: unable to enumerate USB device [ 774.945963][T17668] syzkaller0: entered allmulticast mode [ 775.127666][ T5831] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 775.259534][T16888] Bluetooth: hci3: command 0x0406 tx timeout [ 775.289481][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 775.296899][ T5831] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 775.307202][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.319659][ T5831] usb 1-1: config 0 descriptor?? [ 775.530372][ T5831] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 775.548204][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 775.574436][ T5831] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 775.588266][ T5831] usb 1-1: media controller created [ 775.613486][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 775.623916][T17673] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 775.630444][T17673] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 775.672668][T17673] vhci_hcd vhci_hcd.0: Device attached [ 775.722901][ T5831] DVB: Unable to find symbol dib7000p_attach() [ 775.730387][T17662] dib0700: tx buffer length is larger than 4. Not supported. [ 775.770296][ T5831] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 775.832167][ T5831] rc_core: IR keymap rc-dib0700-rc5 not found [ 775.844086][ T5831] Registered IR keymap rc-empty [ 775.855346][ T5831] dvb-usb: could not initialize remote control. [ 775.884793][ T5831] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 775.939516][ T5841] usb 36-1: SetAddress Request (34) to port 0 [ 775.948319][ T5841] usb 36-1: new SuperSpeed USB device number 34 using vhci_hcd [ 776.074968][T17674] vhci_hcd: connection reset by peer [ 776.080776][ T13] vhci_hcd: stop threads [ 776.085060][ T13] vhci_hcd: release socket [ 776.091784][ T13] vhci_hcd: disconnect device [ 776.131824][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 776.131841][ T30] audit: type=1326 audit(1762046431.947:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 776.160910][ T30] audit: type=1326 audit(1762046431.957:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 776.184677][ T30] audit: type=1326 audit(1762046431.987:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 776.301441][ T30] audit: type=1326 audit(1762046431.987:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 776.325251][ T30] audit: type=1326 audit(1762046431.987:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 776.536346][ T30] audit: type=1326 audit(1762046431.987:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 776.679502][ T30] audit: type=1326 audit(1762046431.987:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 776.768026][ T30] audit: type=1326 audit(1762046431.987:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 776.821092][ T30] audit: type=1326 audit(1762046431.987:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 776.997778][ T30] audit: type=1326 audit(1762046431.987:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.2.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 777.484861][T17702] syzkaller0: entered promiscuous mode [ 777.511518][T17702] syzkaller0: entered allmulticast mode [ 777.659992][T16040] usb 40-1: device descriptor read/8, error -110 [ 777.693702][ T5831] usb 1-1: USB disconnect, device number 57 [ 777.793441][ T5831] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 777.844774][T17708] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 778.060746][T16040] usb usb40-port1: attempt power cycle [ 778.261237][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 778.409518][ T5840] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 778.642978][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 778.660819][T16040] usb usb40-port1: unable to enumerate USB device [ 778.677376][ T5840] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 778.685655][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.759619][ T5840] usb 1-1: config 0 has no interface number 0 [ 778.766120][ T5840] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 778.784994][ T5840] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 778.794376][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.802851][ T5840] usb 1-1: Product: syz [ 778.820657][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3634'. [ 778.829668][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3634'. [ 778.838542][ T5840] usb 1-1: Manufacturer: syz [ 778.845512][ T5840] usb 1-1: SerialNumber: syz [ 778.863229][ T5840] usb 1-1: config 0 descriptor?? [ 778.940150][T17731] netlink: 'syz.1.3636': attribute type 29 has an invalid length. [ 779.025249][T17731] netlink: 'syz.1.3636': attribute type 29 has an invalid length. [ 779.219663][T17741] misc userio: No port type given on /dev/userio [ 779.226271][T17741] misc userio: The device must be registered before sending interrupts [ 780.194678][T17746] syzkaller0: entered promiscuous mode [ 780.208043][T17746] syzkaller0: entered allmulticast mode [ 780.358280][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3641'. [ 780.499803][T17750] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3641'. [ 780.510084][T17750] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3641'. [ 780.802267][T17757] tipc: Enabled bearer , priority 0 [ 780.813134][T17757] tipc: Resetting bearer [ 780.866854][T17755] tipc: Disabling bearer [ 781.021547][ T5841] usb 36-1: device descriptor read/8, error -110 [ 781.582163][ T5841] usb usb36-port1: attempt power cycle [ 781.605374][ T9] usb 1-1: USB disconnect, device number 58 [ 782.185654][T17784] syzkaller0: entered promiscuous mode [ 782.200217][ T5841] usb usb36-port1: unable to enumerate USB device [ 782.448400][T17784] syzkaller0: entered allmulticast mode [ 783.395027][T17796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 784.013755][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3665'. [ 784.227557][T17828] tipc: Started in network mode [ 784.232653][T17828] tipc: Node identity 4, cluster identity 4711 [ 784.251890][T17828] tipc: Node number set to 4 [ 784.342526][T17830] misc userio: No port type given on /dev/userio [ 784.400133][T17831] misc userio: The device must be registered before sending interrupts [ 784.653003][T17837] syzkaller0: entered promiscuous mode [ 784.658522][T17837] syzkaller0: entered allmulticast mode [ 786.009542][ T44] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 786.750003][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 786.815975][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'. [ 786.907184][ T44] usb 2-1: config 0 has no interfaces? [ 786.983926][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 786.999322][ T44] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 787.013750][ T44] usb 2-1: Manufacturer: syz [ 787.034869][ T44] usb 2-1: config 0 descriptor?? [ 787.463930][T17875] misc userio: No port type given on /dev/userio [ 787.465257][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3681'. [ 787.483211][T17875] misc userio: The device must be registered before sending interrupts [ 787.488712][T17876] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3681'. [ 787.502043][T17876] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3681'. [ 787.599046][T17880] team0: Device gtp0 is of different type [ 787.913662][T17884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.963935][T17884] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.029903][T17884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.250587][T17893] misc userio: No port type given on /dev/userio [ 788.301029][T17893] misc userio: The device must be registered before sending interrupts [ 788.479636][ T44] usb 2-1: USB disconnect, device number 49 [ 788.941849][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3691'. [ 789.969185][T17921] misc userio: No port type given on /dev/userio [ 790.040618][T17921] misc userio: The device must be registered before sending interrupts [ 790.992729][T17931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 791.383994][T17943] misc userio: No port type given on /dev/userio [ 791.390696][T17943] misc userio: The device must be registered before sending interrupts [ 791.587283][T17946] syzkaller0: entered promiscuous mode [ 791.596300][T17946] syzkaller0: entered allmulticast mode [ 791.803694][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 792.025333][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 792.062685][ T9] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 792.070968][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.082680][ T9] usb 2-1: config 0 has no interface number 0 [ 792.096197][ T9] usb 2-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 792.207008][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 792.225852][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.263376][ T9] usb 2-1: Product: syz [ 792.269824][ T9] usb 2-1: Manufacturer: syz [ 792.274446][ T9] usb 2-1: SerialNumber: syz [ 792.302720][ T9] usb 2-1: config 0 descriptor?? [ 792.403325][T17959] binder: BINDER_SET_CONTEXT_MGR already set [ 792.420109][T17959] binder: 17949:17959 ioctl 4018620d 80000040 returned -16 [ 792.617122][T17962] misc userio: No port type given on /dev/userio [ 792.980563][T17960] syz.4.3707 (17960): drop_caches: 2 [ 793.147367][T17965] misc userio: The device must be registered before sending interrupts [ 793.168484][T17952] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.175967][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.646984][T17952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.703403][T17952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.964638][ T6068] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.992901][ T6068] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.012343][ T6068] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.031652][ T6068] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.249915][ T5841] usb 2-1: USB disconnect, device number 50 [ 794.338019][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3713'. [ 794.368400][T17977] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3713'. [ 794.377519][T17977] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3713'. [ 794.981067][T17989] No memory to map [ 796.040205][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 796.419142][T17992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.444936][T17992] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.454534][T17992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.554273][T18012] binder: 18011:18012 ioctl c0306201 0 returned -14 [ 797.756028][T18014] netlink: 'syz.4.3723': attribute type 1 has an invalid length. [ 800.226215][T18045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.245988][T18045] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.704906][T18045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.016729][T18054] netlink: 'syz.2.3734': attribute type 16 has an invalid length. [ 801.491060][T18064] No memory to map [ 804.130148][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'. [ 804.174887][T18085] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3744'. [ 804.184803][T18085] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3744'. [ 804.295133][T18090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 804.318417][T18086] tipc: Started in network mode [ 804.329719][T18086] tipc: Node identity 4, cluster identity 4711 [ 804.337996][T18086] tipc: Node number set to 4 [ 806.733041][T18113] syzkaller0: entered promiscuous mode [ 806.780243][T18113] syzkaller0: entered allmulticast mode [ 807.441190][T18124] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 807.447721][T18124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 807.463619][T18124] vhci_hcd vhci_hcd.0: Device attached [ 807.733530][T18126] vhci_hcd: connection closed [ 807.734995][ T6074] vhci_hcd: stop threads [ 807.740759][ T9] usb 40-1: SetAddress Request (25) to port 0 [ 807.744409][ T6074] vhci_hcd: release socket [ 807.750853][ T9] usb 40-1: new SuperSpeed USB device number 25 using vhci_hcd [ 807.798792][ T6074] vhci_hcd: disconnect device [ 808.269317][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3760'. [ 808.439543][ T5840] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 808.718422][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 808.790312][ T5840] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 808.798521][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.809217][ T5840] usb 1-1: config 0 has no interface number 0 [ 808.815599][ T5840] usb 1-1: config 0 interface 223 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 808.830506][ T5840] usb 1-1: config 0 interface 223 has no altsetting 0 [ 808.842354][ T5840] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 808.852484][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.869010][ T5840] usb 1-1: Product: syz [ 808.876473][ T5840] usb 1-1: Manufacturer: syz [ 808.884818][ T5840] usb 1-1: SerialNumber: syz [ 808.903917][ T5840] usb 1-1: config 0 descriptor?? [ 809.026338][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.032825][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.170328][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 810.170344][ T30] audit: type=1326 audit(1762046465.997:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.229602][ T30] audit: type=1326 audit(1762046466.007:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.273175][ T30] audit: type=1326 audit(1762046466.007:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.296081][ T30] audit: type=1326 audit(1762046466.007:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.319324][ T30] audit: type=1326 audit(1762046466.007:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.345961][ T30] audit: type=1326 audit(1762046466.007:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.388715][ T30] audit: type=1326 audit(1762046466.007:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.419696][ T30] audit: type=1326 audit(1762046466.007:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.450242][ T30] audit: type=1326 audit(1762046466.007:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.483046][ T30] audit: type=1326 audit(1762046466.007:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18158 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 810.970398][ T5840] usb 1-1: Can not set alternate setting to 1, error: -71 [ 810.978011][ T5840] synaptics_usb 1-1:0.223: probe with driver synaptics_usb failed with error -71 [ 811.007016][ T5840] usb 1-1: USB disconnect, device number 59 [ 811.179010][ T5926] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 811.228897][ T5926] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 812.343330][T18190] No memory to map [ 812.879817][ T9] usb 40-1: device descriptor read/8, error -110 [ 813.320595][ T9] usb usb40-port1: attempt power cycle [ 813.621571][T18203] netlink: 'syz.4.3778': attribute type 1 has an invalid length. [ 813.985851][ T9] usb usb40-port1: unable to enumerate USB device [ 814.119568][ T44] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 814.316272][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 814.374598][ T44] usb 4-1: config 0 has an invalid interface number: 223 but max is 0 [ 814.453194][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.473895][ T44] usb 4-1: config 0 has no interface number 0 [ 814.485738][ T44] usb 4-1: config 0 interface 223 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 814.520342][ T44] usb 4-1: config 0 interface 223 has no altsetting 0 [ 814.576869][T18217] syzkaller0: entered promiscuous mode [ 814.582859][T18217] syzkaller0: entered allmulticast mode [ 814.605983][ T44] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 814.656052][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3782'. [ 814.668335][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.757074][ T44] usb 4-1: Product: syz [ 814.773518][ T44] usb 4-1: Manufacturer: syz [ 814.803462][ T44] usb 4-1: SerialNumber: syz [ 814.810997][ T44] usb 4-1: config 0 descriptor?? [ 816.852690][ T44] usb 4-1: Can not set alternate setting to 1, error: -71 [ 816.899462][ T44] synaptics_usb 4-1:0.223: probe with driver synaptics_usb failed with error -71 [ 816.938978][ T44] usb 4-1: USB disconnect, device number 68 [ 819.188007][T18278] netlink: 'syz.3.3800': attribute type 1 has an invalid length. [ 820.771845][T18304] netlink: 'syz.3.3806': attribute type 12 has an invalid length. [ 820.809573][ T44] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 821.039638][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 821.048827][ T44] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 821.057530][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.069218][ T44] usb 3-1: config 0 has no interface number 0 [ 821.310255][ T44] usb 3-1: config 0 interface 223 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 821.430653][ T44] usb 3-1: config 0 interface 223 has no altsetting 0 [ 821.444715][ T44] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 821.456804][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.520469][ T44] usb 3-1: Product: syz [ 821.524672][ T44] usb 3-1: Manufacturer: syz [ 821.529261][ T44] usb 3-1: SerialNumber: syz [ 821.546445][ T44] usb 3-1: config 0 descriptor?? [ 821.776080][T18310] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 821.954631][ T5831] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 822.349512][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 822.356503][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.368040][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.397047][ T5831] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 822.424407][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.448879][ T5831] usb 1-1: config 0 descriptor?? [ 822.735509][T18322] misc userio: No port type given on /dev/userio [ 822.748191][T18322] misc userio: The device must be registered before sending interrupts [ 822.873822][ T5831] ft260 0003:0403:6030.0012: unknown main item tag 0x7 [ 823.076162][ T5831] ft260 0003:0403:6030.0012: failed to retrieve chip version [ 823.089782][ T5831] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -5 [ 823.390329][ T44] usb 3-1: Can not set alternate setting to 1, error: -71 [ 823.398435][ T44] synaptics_usb 3-1:0.223: probe with driver synaptics_usb failed with error -71 [ 823.409793][ T44] usb 3-1: USB disconnect, device number 68 [ 823.424486][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3813'. [ 823.664136][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 823.664154][ T30] audit: type=1326 audit(1762046479.487:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 823.738141][ T30] audit: type=1326 audit(1762046479.487:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 823.823273][ T30] audit: type=1326 audit(1762046479.497:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 823.969983][ T30] audit: type=1326 audit(1762046479.497:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 824.111474][ T30] audit: type=1326 audit(1762046479.497:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 824.191171][ T30] audit: type=1326 audit(1762046479.497:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 824.220949][ T44] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 824.250741][ T30] audit: type=1326 audit(1762046479.497:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 824.273878][ T30] audit: type=1326 audit(1762046479.497:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 824.299028][ T30] audit: type=1326 audit(1762046479.497:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 824.329698][ T30] audit: type=1326 audit(1762046479.497:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18334 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 824.402555][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 824.411832][ T44] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 824.422229][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.433460][ T44] usb 2-1: config 0 has no interface number 0 [ 824.439743][ T44] usb 2-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 824.536802][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 824.546711][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.556741][ T44] usb 2-1: Product: syz [ 824.567919][ T44] usb 2-1: Manufacturer: syz [ 824.573202][ T44] usb 2-1: SerialNumber: syz [ 824.579831][ T44] usb 2-1: config 0 descriptor?? [ 825.380623][T16040] usb 1-1: USB disconnect, device number 60 [ 825.601225][ T6083] bridge_slave_1: left allmulticast mode [ 825.614337][ T6083] bridge_slave_1: left promiscuous mode [ 825.621993][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.652742][ T6083] bridge_slave_0: left allmulticast mode [ 825.658592][ T6083] bridge_slave_0: left promiscuous mode [ 825.667476][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.091865][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3825'. [ 826.740744][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 826.753152][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 826.762358][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 826.771968][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 826.780915][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 826.905960][ T6083] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 826.948089][ T6083] bond2 (unregistering): (slave bridge2): Releasing active interface [ 827.185722][ T6083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.195680][ T6083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.205216][ T6083] bond0 (unregistering): Released all slaves [ 827.224722][ T6083] bond1 (unregistering): Released all slaves [ 827.245418][ T6083] bond2 (unregistering): Released all slaves [ 827.373733][ T6083] tipc: Left network mode [ 827.845375][T16040] usb 2-1: USB disconnect, device number 51 [ 828.556882][ T6083] hsr_slave_0: left promiscuous mode [ 828.562806][ T6083] hsr_slave_1: left promiscuous mode [ 828.607020][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.729744][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.931402][ T5834] Bluetooth: hci2: command tx timeout [ 828.989235][T16040] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 829.139477][T16040] usb 3-1: Using ep0 maxpacket: 32 [ 829.153834][T16040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.189489][T16040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.219491][T16040] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 829.228579][T16040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.270741][T16040] usb 3-1: config 0 descriptor?? [ 829.685697][T16040] ft260 0003:0403:6030.0013: unknown main item tag 0x7 [ 829.755240][ T6083] team0 (unregistering): Port device team_slave_1 removed [ 829.805399][ T6083] team0 (unregistering): Port device team_slave_0 removed [ 829.882344][T16040] ft260 0003:0403:6030.0013: failed to retrieve chip version [ 829.891759][T16040] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -5 [ 830.409123][T18433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 830.645349][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3838'. [ 830.970236][T18440] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3838'. [ 830.981824][T18440] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 830.999540][T18440] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 831.019507][ T5834] Bluetooth: hci2: command 0x041b tx timeout [ 831.033526][T18440] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 831.141150][T18389] chnl_net:caif_netlink_parms(): no params data found [ 831.747788][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3841'. [ 831.814044][T18389] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.837338][T18389] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.849350][T18389] bridge_slave_0: entered allmulticast mode [ 831.867786][T18389] bridge_slave_0: entered promiscuous mode [ 831.882942][T18389] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.892796][T18389] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.908345][T18389] bridge_slave_1: entered allmulticast mode [ 831.937807][T18389] bridge_slave_1: entered promiscuous mode [ 832.197644][T18389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.279514][ T5840] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 832.327756][T18389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.506131][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 832.521999][T16040] usb 3-1: USB disconnect, device number 69 [ 832.599779][ T5840] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 832.608097][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.650364][ T5840] usb 1-1: config 0 has no interface number 0 [ 832.666752][T18389] team0: Port device team_slave_0 added [ 832.709880][ T5840] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 832.754952][ T5840] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 832.765892][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.777156][ T5840] usb 1-1: Product: syz [ 832.890560][T18389] team0: Port device team_slave_1 added [ 832.896336][ T5840] usb 1-1: Manufacturer: syz [ 832.904231][ T5840] usb 1-1: SerialNumber: syz [ 832.968547][ T5840] usb 1-1: config 0 descriptor?? [ 833.110139][T16888] Bluetooth: hci2: command 0x041b tx timeout [ 833.171158][T18389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.270698][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.331805][T18389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.431911][T18389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.441360][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.485140][T18389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.643027][T18389] hsr_slave_0: entered promiscuous mode [ 833.654454][T18389] hsr_slave_1: entered promiscuous mode [ 833.877985][T18389] debugfs: 'hsr0' already exists in 'hsr' [ 833.905633][T18389] Cannot create hsr debugfs directory [ 834.258794][T18499] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 834.265325][T18499] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 834.273887][T18499] vhci_hcd vhci_hcd.0: Device attached [ 834.395910][T18500] vhci_hcd: connection closed [ 834.400790][ T6074] vhci_hcd: stop threads [ 834.410331][ T6074] vhci_hcd: release socket [ 834.417190][ T6074] vhci_hcd: disconnect device [ 834.948146][ T5840] usb 1-1: USB disconnect, device number 61 [ 835.185952][T16888] Bluetooth: hci2: command 0x041b tx timeout [ 835.661043][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 835.661060][ T30] audit: type=1326 audit(1762046491.487:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 835.735162][ T30] audit: type=1326 audit(1762046491.517:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 835.915900][T18526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3851'. [ 835.962296][ T30] audit: type=1326 audit(1762046491.517:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 836.049531][ T30] audit: type=1326 audit(1762046491.517:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 836.084341][ T30] audit: type=1326 audit(1762046491.517:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 836.168337][ T30] audit: type=1326 audit(1762046491.517:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 836.339500][ T30] audit: type=1326 audit(1762046491.517:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 836.373185][T18536] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 836.379722][T18536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 836.442546][T18536] vhci_hcd vhci_hcd.0: Device attached [ 836.494547][ T30] audit: type=1326 audit(1762046491.517:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 836.623996][ T30] audit: type=1326 audit(1762046491.517:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 836.651145][T18540] vhci_hcd: connection closed [ 836.667711][ T13] vhci_hcd: stop threads [ 836.687081][ T13] vhci_hcd: release socket [ 836.691424][T18389] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 836.698494][ T13] vhci_hcd: disconnect device [ 836.708461][ T30] audit: type=1326 audit(1762046491.517:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.1.3852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 836.749547][T16040] usb 34-1: enqueue for inactive port 0 [ 836.779760][T18389] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 836.805621][T18389] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 836.822130][ T44] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 836.845244][T18389] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 837.000354][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 837.017240][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.036850][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.056516][ T44] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 837.076426][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.144449][T18389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.260081][T16888] Bluetooth: hci2: command 0x041b tx timeout [ 837.329640][ T44] usb 2-1: config 0 descriptor?? [ 837.335131][T16040] usb usb34-port1: attempt power cycle [ 837.416604][T18389] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.705220][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.712477][ T6074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.783636][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.790853][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.880470][ T44] ft260 0003:0403:6030.0014: unknown main item tag 0x7 [ 837.950397][T16040] usb usb34-port1: unable to enumerate USB device [ 838.139637][ T44] ft260 0003:0403:6030.0014: failed to retrieve chip version [ 838.172260][ T44] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -5 [ 838.267492][T18389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.519353][T18389] veth0_vlan: entered promiscuous mode [ 838.776509][T18389] veth1_vlan: entered promiscuous mode [ 838.849488][ T5840] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 839.059444][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 839.087364][ T5840] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 839.101848][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.112961][ T5840] usb 1-1: config 0 has no interface number 0 [ 839.119090][ T5840] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 839.157406][ T5840] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 839.169292][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.177471][ T5840] usb 1-1: Product: syz [ 839.197422][ T5840] usb 1-1: Manufacturer: syz [ 839.202237][ T5840] usb 1-1: SerialNumber: syz [ 839.211096][ T5840] usb 1-1: config 0 descriptor?? [ 839.262658][T18389] veth0_macvtap: entered promiscuous mode [ 839.363207][T18389] veth1_macvtap: entered promiscuous mode [ 839.419016][T18389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.436152][T18389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.460234][ T6077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.544298][ T6077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.596090][ T6077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.616322][ T6077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.900065][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.908348][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.133172][ T6068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.142934][ T6068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.762277][ T9] usb 2-1: USB disconnect, device number 52 [ 841.343352][T18612] syz.3.3823 (18612): drop_caches: 1 [ 841.347264][T18613] syz.3.3823 (18613): drop_caches: 1 [ 841.544571][ T9] usb 1-1: USB disconnect, device number 62 [ 841.653643][T18612] syz.3.3823 (18612): drop_caches: 1 [ 841.837693][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 841.837764][ T30] audit: type=1326 audit(1762046497.657:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 841.873234][ T30] audit: type=1326 audit(1762046497.657:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 841.902805][T18628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3863'. [ 841.914424][ T30] audit: type=1326 audit(1762046497.687:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 841.995639][ T30] audit: type=1326 audit(1762046497.687:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 842.033009][ T30] audit: type=1326 audit(1762046497.687:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 842.063818][ T30] audit: type=1326 audit(1762046497.687:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 842.143207][ T30] audit: type=1326 audit(1762046497.687:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 842.192224][T18635] syzkaller0: entered promiscuous mode [ 842.197737][T18635] syzkaller0: entered allmulticast mode [ 842.205493][ T30] audit: type=1326 audit(1762046497.687:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 842.228814][ T30] audit: type=1326 audit(1762046497.687:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 842.257501][ T30] audit: type=1326 audit(1762046497.687:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18622 comm="syz.3.3865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 842.739518][T16040] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 842.877699][T18658] No memory to map [ 842.909496][T16040] usb 1-1: Using ep0 maxpacket: 32 [ 842.917170][T16040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.936044][T16040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.978001][T16040] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 843.013993][T16040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.150068][T16040] usb 1-1: config 0 descriptor?? [ 843.564772][T16040] ft260 0003:0403:6030.0015: unknown main item tag 0x7 [ 843.751496][T18651] syz.1.3868: vmalloc error: size 141557760, failed to allocated page array size 276480, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 843.771331][T16040] ft260 0003:0403:6030.0015: failed to retrieve chip version [ 843.778920][T16040] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -5 [ 844.030358][T18651] CPU: 0 UID: 0 PID: 18651 Comm: syz.1.3868 Not tainted syzkaller #0 PREEMPT(full) [ 844.030386][T18651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 844.030402][T18651] Call Trace: [ 844.030411][T18651] [ 844.030421][T18651] dump_stack_lvl+0x189/0x250 [ 844.030464][T18651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.030489][T18651] ? __pfx__printk+0x10/0x10 [ 844.030509][T18651] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 844.030534][T18651] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 844.030561][T18651] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 844.030588][T18651] warn_alloc+0x214/0x310 [ 844.030621][T18651] ? __pfx_warn_alloc+0x10/0x10 [ 844.030656][T18651] ? __get_vm_area_node+0x28f/0x300 [ 844.030681][T18651] ? vb2_vmalloc_alloc+0xef/0x340 [ 844.030707][T18651] __vmalloc_node_range_noprof+0x690/0x12d0 [ 844.030762][T18651] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 844.030789][T18651] ? __kasan_kmalloc+0x93/0xb0 [ 844.030818][T18651] vmalloc_user_noprof+0xad/0xf0 [ 844.030838][T18651] ? vb2_vmalloc_alloc+0xef/0x340 [ 844.030854][T18651] vb2_vmalloc_alloc+0xef/0x340 [ 844.030869][T18651] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 844.030884][T18651] __vb2_queue_alloc+0x9c2/0x15a0 [ 844.030917][T18651] vb2_core_reqbufs+0xc31/0x1420 [ 844.030930][T18651] ? kasan_save_track+0x4f/0x80 [ 844.030960][T18651] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 844.030981][T18651] ? vb2_verify_memory_type+0x1fc/0x570 [ 844.030997][T18651] vb2_ioctl_reqbufs+0x4c0/0x830 [ 844.031021][T18651] __video_do_ioctl+0xa59/0xc10 [ 844.031043][T18651] ? __pfx___video_do_ioctl+0x10/0x10 [ 844.031069][T18651] video_usercopy+0x82d/0x1450 [ 844.031091][T18651] ? __pfx___video_do_ioctl+0x10/0x10 [ 844.031107][T18651] ? __pfx_video_usercopy+0x10/0x10 [ 844.031135][T18651] ? __fget_files+0x2a/0x420 [ 844.031150][T18651] v4l2_ioctl+0x18d/0x1e0 [ 844.031168][T18651] v4l2_compat_ioctl32+0x1d7/0x260 [ 844.031190][T18651] __ia32_compat_sys_ioctl+0x543/0x840 [ 844.031210][T18651] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 844.031231][T18651] ? __se_sys_futex_time32+0x360/0x3e0 [ 844.031245][T18651] ? __pfx_do_sys_openat2+0x10/0x10 [ 844.031265][T18651] ? rcu_is_watching+0x15/0xb0 [ 844.031283][T18651] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 844.031303][T18651] ? lockdep_hardirqs_on+0x9c/0x150 [ 844.031323][T18651] __do_fast_syscall_32+0xb6/0x2b0 [ 844.031341][T18651] ? lockdep_hardirqs_on+0x9c/0x150 [ 844.031369][T18651] do_fast_syscall_32+0x34/0x80 [ 844.031387][T18651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 844.031409][T18651] RIP: 0023:0xf7f04539 [ 844.031427][T18651] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 844.031439][T18651] RSP: 002b:00000000f53b455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 844.031455][T18651] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000c0145608 [ 844.031465][T18651] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 844.031474][T18651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 844.031482][T18651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 844.031491][T18651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 844.031513][T18651] [ 844.031530][T18651] Mem-Info: [ 844.385676][T18651] active_anon:7687 inactive_anon:0 isolated_anon:0 [ 844.385676][T18651] active_file:1199 inactive_file:3670 isolated_file:0 [ 844.385676][T18651] unevictable:768 dirty:155 writeback:0 [ 844.385676][T18651] slab_reclaimable:6680 slab_unreclaimable:97553 [ 844.385676][T18651] mapped:34303 shmem:1358 pagetables:1452 [ 844.385676][T18651] sec_pagetables:0 bounce:0 [ 844.385676][T18651] kernel_misc_reclaimable:0 [ 844.385676][T18651] free:1360058 free_pcp:11209 free_cma:0 [ 844.445215][T18651] Node 0 active_anon:30800kB inactive_anon:0kB active_file:4796kB inactive_file:14544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137212kB dirty:628kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12184kB pagetables:5668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 844.482123][T18651] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 844.511946][ C1] vkms_vblank_simulate: vblank timer overrun [ 844.538509][T18651] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 844.573445][T16040] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 844.623898][T18651] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 844.639538][T18651] Node 0 DMA32 free:1529800kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31600kB inactive_anon:0kB active_file:4796kB inactive_file:14544kB unevictable:1536kB writepending:628kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:29476kB local_pcp:16080kB free_cma:0kB [ 844.714493][T18651] lowmem_reserve[]: 0 0 0 0 0 [ 844.749507][T16040] usb 3-1: Using ep0 maxpacket: 32 [ 844.786021][T16040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.808021][T18651] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 844.838105][T18651] lowmem_reserve[]: 0 0 0 0 0 [ 844.843144][T16040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.863724][T18651] Node 1 Normal free:3895072kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14092kB local_pcp:9792kB free_cma:0kB [ 844.906601][T16040] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 844.927362][T16040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.964260][T16040] usb 3-1: config 0 descriptor?? [ 844.979474][T18651] lowmem_reserve[]: 0 0 0 0 0 [ 844.984267][T18651] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 844.997603][T18651] Node 0 DMA32: 1820*4kB (UM) 1187*8kB (UME) 1068*16kB (UME) 940*32kB (UME) 554*64kB (UME) 393*128kB (UME) 303*256kB (UME) 112*512kB (UME) 42*1024kB (UME) 19*2048kB (UM) 284*4096kB (UM) = 1529800kB [ 845.018070][T18651] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 845.033070][T18651] Node 1 Normal: 220*4kB (UE) 70*8kB (UE) 60*16kB (UME) 228*32kB (UE) 83*64kB (UME) 15*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3895072kB [ 845.204274][T18651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.389969][T16040] ft260 0003:0403:6030.0016: unknown main item tag 0x7 [ 845.589107][T16040] ft260 0003:0403:6030.0016: chip code: 6424 8183 [ 845.669693][T18651] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 845.684042][T18651] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.694338][T18651] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 845.705812][T18651] 6227 total pagecache pages [ 845.711634][T18651] 0 pages in swap cache [ 845.716279][T18651] Free swap = 124996kB [ 845.720887][T18651] Total swap = 124996kB [ 845.725207][T18651] 2097051 pages RAM [ 845.729275][T18651] 0 pages HighMem/MovableOnly [ 845.734637][T18651] 424117 pages reserved [ 845.738989][T18651] 0 pages cma reserved [ 845.979971][T16040] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 846.038610][T16040] ft260 0003:0403:6030.0016: failed to retrieve status: -32, no wakeup [ 846.150473][T18691] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.158046][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.202188][T16040] usb 1-1: USB disconnect, device number 63 [ 846.323709][T18674] ft260 0003:0403:6030.0016: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 846.475526][T18691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.501256][T18674] ft260 0003:0403:6030.0016: failed to reset I2C controller: -108 [ 846.513580][T18674] ft260 0003:0403:6030.0016: ft260_i2c_write: failed with -38 [ 846.523523][T18691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.649557][ T5910] usb 3-1: reset high-speed USB device number 70 using dummy_hcd [ 846.761758][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3881'. [ 847.066339][T16389] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.087933][T16389] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.133179][T16389] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.172523][T16389] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.368179][T18720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 847.385609][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.049485][ T44] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 848.060041][T18725] misc userio: No port type given on /dev/userio [ 848.069141][T18725] misc userio: Invalid payload size [ 848.090176][T16040] usb 3-1: USB disconnect, device number 70 [ 848.249698][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 848.257824][ T44] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 848.314311][ T44] usb 1-1: config 0 has no interface number 0 [ 848.379492][ T44] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 848.412287][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.498022][ T44] usb 1-1: Product: syz [ 848.676186][ T44] usb 1-1: Manufacturer: syz [ 848.686315][ T44] usb 1-1: SerialNumber: syz [ 848.723219][ T44] usb 1-1: config 0 descriptor?? [ 848.780650][ T44] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 849.339675][ T44] gspca_sn9c2028: read1 error -110 [ 849.465361][ T44] gspca_sn9c2028: read1 error -32 [ 849.473314][ T44] gspca_sn9c2028: read1 error -32 [ 849.480524][ T44] sn9c2028 1-1:0.119: probe with driver sn9c2028 failed with error -32 [ 849.699692][ T5840] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 849.787361][ T44] usb 1-1: USB disconnect, device number 64 [ 849.861263][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 849.869847][ T5840] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 849.877971][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.888767][ T5840] usb 3-1: config 0 has no interface number 0 [ 849.895077][ T5840] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 849.919840][ T5840] usb 3-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 849.953675][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.964693][ T5840] usb 3-1: Product: syz [ 849.969680][ T5840] usb 3-1: Manufacturer: syz [ 849.974511][ T5840] usb 3-1: SerialNumber: syz [ 850.026936][ T5840] usb 3-1: config 0 descriptor?? [ 850.488955][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 851.138631][T18775] pimreg: entered allmulticast mode [ 851.640016][T18784] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3907'. [ 851.670645][T18786] misc userio: No port type given on /dev/userio [ 851.677944][T18786] misc userio: The device must be registered before sending interrupts [ 852.263415][T18784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.298473][T18784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.415035][ T44] usb 3-1: USB disconnect, device number 71 [ 852.427723][T18784] bond0 (unregistering): Released all slaves [ 852.429083][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 852.429097][ T30] audit: type=1326 audit(1762046508.217:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 852.462019][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.674521][ T30] audit: type=1326 audit(1762046508.217:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 852.696614][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.823698][ T30] audit: type=1326 audit(1762046508.217:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 852.969892][ T30] audit: type=1326 audit(1762046508.217:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 853.050920][ T30] audit: type=1326 audit(1762046508.227:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 853.195617][ T30] audit: type=1326 audit(1762046508.227:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 853.425436][ T30] audit: type=1326 audit(1762046508.227:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 853.472936][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3912'. [ 853.489506][ T30] audit: type=1326 audit(1762046508.227:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 853.521394][ T30] audit: type=1326 audit(1762046508.227:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 853.546665][ T30] audit: type=1326 audit(1762046508.227:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 853.573284][T18806] binder: BINDER_SET_CONTEXT_MGR already set [ 853.579304][T18806] binder: 18803:18806 ioctl 4018620d 80000040 returned -16 [ 853.764481][T18815] netlink: 'syz.2.3918': attribute type 1 has an invalid length. [ 854.366440][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 854.540476][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 854.732143][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3926'. [ 854.753462][ T9] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 854.769564][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.802152][ T9] usb 4-1: config 0 has no interface number 0 [ 854.816618][ T9] usb 4-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 855.070541][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 855.073292][T18843] binder: BINDER_SET_CONTEXT_MGR already set [ 855.085846][T18843] binder: 18842:18843 ioctl 4018620d 80000040 returned -16 [ 855.136812][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.187717][ T9] usb 4-1: Product: syz [ 855.197858][ T9] usb 4-1: Manufacturer: syz [ 855.213881][ T9] usb 4-1: SerialNumber: syz [ 855.239528][ T9] usb 4-1: config 0 descriptor?? [ 856.048925][T18871] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 857.811398][ T5910] usb 4-1: USB disconnect, device number 69 [ 858.154548][T18893] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3944'. [ 858.311693][T18901] misc userio: Invalid payload size [ 858.317621][T18901] misc userio: The device must be registered before sending interrupts [ 858.820295][T18911] misc userio: No port type given on /dev/userio [ 858.830112][T18911] misc userio: The device must be registered before sending interrupts [ 858.950023][T18915] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 858.956558][T18915] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 858.989158][T18915] vhci_hcd vhci_hcd.0: Device attached [ 859.126103][T18917] vhci_hcd: connection closed [ 859.129993][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 859.150487][T16389] vhci_hcd: stop threads [ 859.159699][T16389] vhci_hcd: release socket [ 859.164311][T16389] vhci_hcd: disconnect device [ 859.309545][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 859.317743][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.327976][ T9] usb 1-1: config 0 has no interfaces? [ 859.336532][ T9] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 859.345957][ T9] usb 1-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 859.354705][ T9] usb 1-1: Product: syz [ 859.493333][ T9] usb 1-1: Manufacturer: syz [ 859.516660][T18924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 859.534440][ T9] usb 1-1: SerialNumber: syz [ 859.556610][ T9] usb 1-1: config 0 descriptor?? [ 860.219077][T18930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.230044][T18930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.934005][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3958'. [ 860.983846][T18940] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 860.990394][T18940] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 861.001638][T18940] vhci_hcd vhci_hcd.0: Device attached [ 861.019039][T18950] netlink: 'syz.3.3959': attribute type 1 has an invalid length. [ 861.107586][T18945] vhci_hcd: connection closed [ 861.118521][T16389] vhci_hcd: stop threads [ 861.190599][T16389] vhci_hcd: release socket [ 861.195311][T16389] vhci_hcd: disconnect device [ 861.456820][T18960] No memory to map [ 862.673010][T16040] usb 1-1: USB disconnect, device number 65 [ 865.391177][T19027] syzkaller0: entered promiscuous mode [ 865.411527][T19027] syzkaller0: entered allmulticast mode [ 865.489512][T16040] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 865.650857][T16040] usb 4-1: Using ep0 maxpacket: 32 [ 865.684202][T16040] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 865.692914][T16040] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.713664][T16040] usb 4-1: config 0 has no interface number 0 [ 865.914856][T19034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3985'. [ 865.944331][T16040] usb 4-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 866.111020][T16040] usb 4-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 866.120946][T16040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.129019][T16040] usb 4-1: Product: syz [ 866.133376][T16040] usb 4-1: Manufacturer: syz [ 866.140682][T16040] usb 4-1: SerialNumber: syz [ 866.198680][T16040] usb 4-1: config 0 descriptor?? [ 867.006217][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3992'. [ 867.113739][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3993'. [ 867.888976][T19062] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3995'. [ 868.615475][T16040] usb 4-1: USB disconnect, device number 70 [ 868.736197][T19077] syzkaller0: entered promiscuous mode [ 868.741800][T19077] syzkaller0: entered allmulticast mode [ 868.807869][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4002'. [ 868.902576][T19082] misc userio: No port type given on /dev/userio [ 868.909359][T19082] misc userio: The device must be registered before sending interrupts [ 868.979687][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4003'. [ 869.077087][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4005'. [ 869.659605][T16040] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 869.708744][T19097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4004'. [ 869.809473][T16040] usb 4-1: Using ep0 maxpacket: 16 [ 869.919260][T16040] usb 4-1: config 0 has no interfaces? [ 869.940021][T16040] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 869.952923][T16040] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 869.986454][T16040] usb 4-1: Manufacturer: syz [ 870.068204][T16040] usb 4-1: config 0 descriptor?? [ 870.472151][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.499520][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.450852][T16040] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 871.649473][T16040] usb 3-1: Using ep0 maxpacket: 32 [ 871.659208][T16040] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 871.679811][T16040] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.715277][T16040] usb 3-1: config 0 has no interface number 0 [ 871.734886][T16040] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 871.785970][T16040] usb 3-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 871.809006][T16040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.832649][T16040] usb 3-1: Product: syz [ 871.843528][T16040] usb 3-1: Manufacturer: syz [ 871.855545][T16040] usb 3-1: SerialNumber: syz [ 871.987179][T16040] usb 3-1: config 0 descriptor?? [ 872.464349][T16040] usb 4-1: USB disconnect, device number 71 [ 873.968774][ T5840] usb 3-1: USB disconnect, device number 72 [ 874.372631][T19158] misc userio: No port type given on /dev/userio [ 874.379772][T19158] misc userio: The device must be registered before sending interrupts [ 874.643646][T19164] pimreg: entered allmulticast mode [ 874.840615][T19172] misc userio: No port type given on /dev/userio [ 874.850880][T19172] misc userio: The device must be registered before sending interrupts [ 875.128465][T19174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.137220][T19174] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.147857][T19174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 875.629540][T16040] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 875.982254][T16040] usb 1-1: Using ep0 maxpacket: 16 [ 876.005924][T16040] usb 1-1: config 0 has no interfaces? [ 876.059018][T16040] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 876.089446][T16040] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 876.097488][T16040] usb 1-1: Manufacturer: syz [ 876.152611][T16040] usb 1-1: config 0 descriptor?? [ 876.608689][T19197] macvtap1: entered promiscuous mode [ 876.628504][T19197] macvtap1: entered allmulticast mode [ 876.634069][T19197] veth1_vlan: entered allmulticast mode [ 876.789625][ T5926] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 877.140675][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 877.160772][ T5926] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 877.169028][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.179952][ T5926] usb 2-1: config 0 has no interface number 0 [ 877.200029][ T5926] usb 2-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 877.267215][ T5926] usb 2-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 877.293404][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.312579][ T5926] usb 2-1: Product: syz [ 877.321845][ T5926] usb 2-1: Manufacturer: syz [ 877.333787][ T5926] usb 2-1: SerialNumber: syz [ 877.355697][ T5926] usb 2-1: config 0 descriptor?? [ 877.800104][T16040] usb 1-1: USB disconnect, device number 66 [ 878.387524][T19219] netlink: 'syz.0.4041': attribute type 10 has an invalid length. [ 878.410475][T19219] team0: Device dummy0 is up. Set it down before adding it as a team port [ 878.437237][T19224] misc userio: No port type given on /dev/userio [ 878.444554][T19224] misc userio: The device must be registered before sending interrupts [ 878.466979][T19226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4043'. [ 879.379469][ T44] usb 2-1: USB disconnect, device number 53 [ 879.719489][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 879.880248][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 880.041045][ T9] usb 1-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.052631][ T9] usb 1-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.062719][ T5840] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 880.070952][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 880.078064][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 880.087552][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.111507][ T9] usb 1-1: config 0 descriptor?? [ 880.219623][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 880.226921][ T5840] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 880.236379][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.256926][ T5840] usb 4-1: config 0 descriptor?? [ 880.458961][T19261] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 880.912620][ T5840] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 880.926240][ T9] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 880.935549][ T9] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 880.943333][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 880.956155][ T9] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 880.964220][ T5840] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 880.973998][ T9] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 880.981803][ T5840] usb 4-1: media controller created [ 880.995805][ T9] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 881.035444][ T9] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 881.124869][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 881.159648][T19247] ------------[ cut here ]------------ [ 881.165174][T19247] usb 4-1: BOGUS control dir, pipe 80004880 doesn't match bRequestType c0 [ 881.200041][T19247] WARNING: CPU: 0 PID: 19247 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 881.209959][T19247] Modules linked in: [ 881.214043][T19247] CPU: 0 UID: 0 PID: 19247 Comm: syz.0.4051 Not tainted syzkaller #0 PREEMPT(full) [ 881.223448][T19247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 881.233568][T19247] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 881.239195][T19247] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 40 14 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 0a 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 881.258854][T19247] RSP: 0018:ffffc900036cf660 EFLAGS: 00010246 [ 881.265006][T19247] RAX: 0a11ef8141de9400 RBX: ffff88807d807900 RCX: 0000000000080000 [ 881.273062][T19247] RDX: ffffc9000eea2000 RSI: 0000000000005f0b RDI: 0000000000005f0c [ 881.281505][T19247] RBP: 1ffff1100510f76c R08: 0000000000000003 R09: 0000000000000004 [ 881.289554][T19247] R10: dffffc0000000000 R11: fffffbfff1bba678 R12: ffff88807bb16100 [ 881.297540][T19247] R13: ffff88802887bb60 R14: 0000000080004880 R15: ffff888053156360 [ 881.305686][T19247] FS: 0000000000000000(0000) GS:ffff88812613d000(0063) knlGS:00000000f5476b40 [ 881.314655][T19247] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 881.321271][T19247] CR2: 00007fc818744008 CR3: 000000006f6f0000 CR4: 00000000003526f0 [ 881.329243][T19247] Call Trace: [ 881.332557][T19247] [ 881.335513][T19247] usb_start_wait_urb+0x114/0x4c0 [ 881.340574][T19247] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 881.346128][T19247] usb_control_msg+0x232/0x3e0 [ 881.351006][T19247] dib0700_i2c_xfer+0xba7/0xf70 [ 881.355863][T19247] ? __lock_acquire+0xab9/0xd20 [ 881.360786][T19247] __i2c_transfer+0x874/0x2170 [ 881.365550][T19247] ? i2c_transfer+0x120/0x3a0 [ 881.370249][T19247] ? __pfx___i2c_transfer+0x10/0x10 [ 881.375449][T19247] ? rt_mutex_lock_nested+0x172/0x1e0 [ 881.380877][T19247] ? i2c_transfer+0x120/0x3a0 [ 881.385567][T19247] i2c_transfer+0x25b/0x3a0 [ 881.390156][T19247] ? __pfx_i2c_transfer+0x10/0x10 [ 881.395185][T19247] ? _copy_from_user+0x94/0xb0 [ 881.400014][T19247] i2cdev_ioctl_rdwr+0x460/0x740 [ 881.404956][T19247] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 881.410096][T19247] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 881.415732][T19247] ? __fget_files+0x3a0/0x420 [ 881.420674][T19247] ? __fget_files+0x2a/0x420 [ 881.425292][T19247] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 881.430860][T19247] __ia32_compat_sys_ioctl+0x543/0x840 [ 881.436323][T19247] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 881.442328][T19247] ? __se_sys_futex_time32+0x360/0x3e0 [ 881.447778][T19247] ? __pfx_do_sys_openat2+0x10/0x10 [ 881.453022][T19247] ? rcu_is_watching+0x15/0xb0 [ 881.457784][T19247] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 881.464495][T19247] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.469729][T19247] __do_fast_syscall_32+0xb6/0x2b0 [ 881.474847][T19247] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.480111][T19247] do_fast_syscall_32+0x34/0x80 [ 881.484970][T19247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 881.491346][T19247] RIP: 0023:0xf7f87539 [ 881.495415][T19247] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 881.515107][T19247] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 881.523563][T19247] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 881.531559][T19247] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.539559][T19247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.547613][T19247] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 881.555635][T19247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.563642][T19247] [ 881.566675][T19247] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 881.574002][T19247] CPU: 0 UID: 0 PID: 19247 Comm: syz.0.4051 Not tainted syzkaller #0 PREEMPT(full) [ 881.583364][T19247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 881.593423][T19247] Call Trace: [ 881.596718][T19247] [ 881.599641][T19247] dump_stack_lvl+0x99/0x250 [ 881.604230][T19247] ? __asan_memcpy+0x40/0x70 [ 881.608816][T19247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 881.614000][T19247] ? __pfx__printk+0x10/0x10 [ 881.618592][T19247] vpanic+0x237/0x6d0 [ 881.622564][T19247] ? __pfx_vpanic+0x10/0x10 [ 881.627060][T19247] panic+0xb9/0xc0 [ 881.630775][T19247] ? __pfx_panic+0x10/0x10 [ 881.635186][T19247] __warn+0x31b/0x4b0 [ 881.639156][T19247] ? usb_submit_urb+0x114d/0x18b0 [ 881.644176][T19247] ? usb_submit_urb+0x114d/0x18b0 [ 881.649192][T19247] report_bug+0x2be/0x4f0 [ 881.653511][T19247] ? usb_submit_urb+0x114d/0x18b0 [ 881.658526][T19247] ? usb_submit_urb+0x114d/0x18b0 [ 881.663539][T19247] ? usb_submit_urb+0x114f/0x18b0 [ 881.668550][T19247] handle_bug+0x84/0x160 [ 881.672792][T19247] exc_invalid_op+0x1a/0x50 [ 881.677283][T19247] asm_exc_invalid_op+0x1a/0x20 [ 881.682114][T19247] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 881.687731][T19247] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 40 14 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 0a 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 881.707327][T19247] RSP: 0018:ffffc900036cf660 EFLAGS: 00010246 [ 881.713389][T19247] RAX: 0a11ef8141de9400 RBX: ffff88807d807900 RCX: 0000000000080000 [ 881.721354][T19247] RDX: ffffc9000eea2000 RSI: 0000000000005f0b RDI: 0000000000005f0c [ 881.729313][T19247] RBP: 1ffff1100510f76c R08: 0000000000000003 R09: 0000000000000004 [ 881.737272][T19247] R10: dffffc0000000000 R11: fffffbfff1bba678 R12: ffff88807bb16100 [ 881.745229][T19247] R13: ffff88802887bb60 R14: 0000000080004880 R15: ffff888053156360 [ 881.753225][T19247] usb_start_wait_urb+0x114/0x4c0 [ 881.758264][T19247] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 881.763818][T19247] usb_control_msg+0x232/0x3e0 [ 881.768581][T19247] dib0700_i2c_xfer+0xba7/0xf70 [ 881.773461][T19247] ? __lock_acquire+0xab9/0xd20 [ 881.778300][T19247] __i2c_transfer+0x874/0x2170 [ 881.783064][T19247] ? i2c_transfer+0x120/0x3a0 [ 881.787737][T19247] ? __pfx___i2c_transfer+0x10/0x10 [ 881.792928][T19247] ? rt_mutex_lock_nested+0x172/0x1e0 [ 881.798287][T19247] ? i2c_transfer+0x120/0x3a0 [ 881.802956][T19247] i2c_transfer+0x25b/0x3a0 [ 881.807460][T19247] ? __pfx_i2c_transfer+0x10/0x10 [ 881.812477][T19247] ? _copy_from_user+0x94/0xb0 [ 881.817234][T19247] i2cdev_ioctl_rdwr+0x460/0x740 [ 881.822170][T19247] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 881.827277][T19247] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 881.832908][T19247] ? __fget_files+0x3a0/0x420 [ 881.837606][T19247] ? __fget_files+0x2a/0x420 [ 881.842183][T19247] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 881.847722][T19247] __ia32_compat_sys_ioctl+0x543/0x840 [ 881.853180][T19247] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 881.859154][T19247] ? __se_sys_futex_time32+0x360/0x3e0 [ 881.864604][T19247] ? __pfx_do_sys_openat2+0x10/0x10 [ 881.869796][T19247] ? rcu_is_watching+0x15/0xb0 [ 881.874551][T19247] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 881.881221][T19247] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.886413][T19247] __do_fast_syscall_32+0xb6/0x2b0 [ 881.891528][T19247] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.896722][T19247] do_fast_syscall_32+0x34/0x80 [ 881.901566][T19247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 881.907887][T19247] RIP: 0023:0xf7f87539 [ 881.911950][T19247] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 881.931547][T19247] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 881.939990][T19247] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 881.947953][T19247] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.955914][T19247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.963872][T19247] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 881.971926][T19247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.979907][T19247] [ 881.983176][T19247] Kernel Offset: disabled [ 881.987514][T19247] Rebooting in 86400 seconds..