last executing test programs: 25m19.49362542s ago: executing program 32 (id=49): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"3c2413a7e64a0200f2e2ad2366f24000", r5}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="8fdbce9249a22d948a9f5c71c3f16d6a039c3b0b07000000411dff724ba4a7a162d314083dc0", 0x26, 0x8080, &(0x7f0000000280)={0xa, 0x4e22, 0xa, @mcast1, 0x9b46}, 0x1c) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 24m0.126436248s ago: executing program 33 (id=171): openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x1) socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x18, r5, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$IPVS_CMD_DEL_DEST(r3, 0x0, 0x4000000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800000, 0x0) 23m31.168846619s ago: executing program 34 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x27c4}}, './file0/../file0\x00'}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) io_uring_enter(r4, 0x847ba, 0x3f00, 0xe, 0x0, 0x0) 14m51.265415645s ago: executing program 35 (id=1158): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x8000, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000500)={0x3, 0x5, 0xd, 0x9}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x5}}, 0x20) 10m31.955986859s ago: executing program 2 (id=1681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000003c0)='GPL\x00'}, 0x9a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x5, &(0x7f00000006c0)=[{}, {}, {@fixed}, {@none}, {@none}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='rxrpc_s\x00', r3) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="98d0", 0x2, r3) syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r4, &(0x7f0000000400)=""/122, 0xfffffffffffffccd, 0xfd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40e00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000440)="21cb", 0x2) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1) socket$inet_smc(0x2b, 0x1, 0x0) 10m29.24467344s ago: executing program 2 (id=1688): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r1, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x15d}, 0x18) 10m26.077326506s ago: executing program 2 (id=1690): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x2, 0x3, &(0x7f0000000000)={0x3, "7f4db02b9364453861def264ebcddff888df0437600c9212862e488cc2a19de8ee"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10m24.469087966s ago: executing program 2 (id=1695): bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) 10m22.164673764s ago: executing program 2 (id=1699): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x2, 0x3, &(0x7f0000000000)={0x3, "7f4db02b9364453861def264ebcddff888df0437600c9212862e488cc2a19de8ee"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f00008c9000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x100300) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10m11.510111682s ago: executing program 2 (id=1705): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) 9m54.728128484s ago: executing program 36 (id=1705): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) 8m38.373893793s ago: executing program 8 (id=2092): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) alarm(0x0) 8m38.1623661s ago: executing program 8 (id=2093): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18500000000005080000000000000000950000000004000000521fc1dd730733f76e0cecdae59a406f34744fa4d10d4907002e98c327b48b766ee1e20db1e1f3ae10a759d3f29de1c88c7c91e352b537a33f22fee7dc000000000000fb83c9a87458f8d22a295e28d4c979d74db99780b33709fd1a5dd10fbf2f8d1d3b352209b840eee701cb92b4408075752c59ef644e4c792f5780aea7fd0305d9bd0d88231ce7a1ad5def343d0be1a3698b03fbd247fe4212b4965bc6ca544f589311c88fd67fb7b17ce708434b955ad830017ad89ae3f578c4458a65488a16f5e95c28010400000000000005c33dcd84bd4c"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x80) 8m38.047165814s ago: executing program 8 (id=2094): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xa, 0x1, 0x0, 0x0, @binary="9f00d4f3d24d"}]}, 0x20}}, 0x0) 8m38.01940106s ago: executing program 8 (id=2095): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) 8m37.783169883s ago: executing program 8 (id=2097): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x78, 0x0, &(0x7f0000000400)=[@enter_looper, @enter_looper, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x801, 0x2}}, 0x0}}, @decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x3}, @clear_death], 0x4c, 0x0, &(0x7f0000000200)="f5b1bfea429bdbc697c59e15311f98e892b2fa9af8bebb4650649f8b646ea68394af338a7b2550dfeb079761cc909178771bc48953910e9e3a52e4bab1bd6766928f94301a4af0ed7933f651"}) 8m37.570295321s ago: executing program 8 (id=2101): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048801}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 8m37.465334744s ago: executing program 9 (id=2102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x3a, 0xe, 0x7, 0x26, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m35.188303347s ago: executing program 9 (id=2105): setresuid(0xee00, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) 8m34.999272353s ago: executing program 9 (id=2107): mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='\"r_']) 8m34.969675186s ago: executing program 9 (id=2108): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/120, 0x78}], 0x1, 0x8, 0x9) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) 8m34.893378833s ago: executing program 9 (id=2109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000580)={0x20, 0x5, 0x5}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xb, 0x8, 0x7, 0x8, 0x2, 0x6, 0x9c3, 0x8000, 0xa, 0xffffffffffffffff, 0x800081, 0xfffffffffffffffd, 0x152, 0x6, 0x100005fbe, 0x6], 0x4, 0x211c07}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m33.719289125s ago: executing program 9 (id=2115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}}, 0x0) 8m33.688889721s ago: executing program 6 (id=2117): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x3000)=nil) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r1, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004340)={0x2020}, 0x2020) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8m33.506652427s ago: executing program 6 (id=2118): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r0, 0x20, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 8m33.184971949s ago: executing program 6 (id=2120): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f00000025c0)) 8m33.142413226s ago: executing program 6 (id=2121): r0 = getpgrp(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0) 8m33.034350563s ago: executing program 6 (id=2122): timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_gettime(r0, &(0x7f0000000040)) 8m32.963251822s ago: executing program 6 (id=2123): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x0, 0x1, 0xd, 0x5, 0xf5, 0xef, 0x0, 0xdc, 0x8, 0xfc, 0x7ffffffd, 0x6, 0xd, 0x8, 0xaed, [0x81, 0xb]}}) 8m22.372694839s ago: executing program 37 (id=2101): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048801}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 8m17.908321382s ago: executing program 38 (id=2123): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x0, 0x1, 0xd, 0x5, 0xf5, 0xef, 0x0, 0xdc, 0x8, 0xfc, 0x7ffffffd, 0x6, 0xd, 0x8, 0xaed, [0x81, 0xb]}}) 8m17.791786957s ago: executing program 39 (id=2115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}}, 0x0) 6m36.753121479s ago: executing program 5 (id=2267): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x1f, 0xffffc000, 0x8004}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a5401, 0x0) dup3(r5, r1, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x351a, 0x100, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x100}]}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000280)={0x1, 0x8000000000000001, 0xfffffffffffffffb}) socket$nl_generic(0x10, 0x3, 0x10) 6m32.643278244s ago: executing program 5 (id=2268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="60000000090603815116680000000200050000040900020073797a3100000000050001000700000038000700"], 0x60}, 0x1, 0x0, 0x0, 0x140449c7}, 0x40080) 6m32.432058947s ago: executing program 5 (id=2269): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8, 0x700, 0x5, 0x1ff, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x67, 0x0, 0xa, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}}) 6m32.180188967s ago: executing program 5 (id=2270): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) poll(0x0, 0x0, 0x7) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getlink={0x20, 0x12, 0xee279624cde2f6fd, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xac01, 0xc6c5}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b800"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 6m30.319216835s ago: executing program 5 (id=2271): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, 0xffffffffffffffff, 0x80000) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 6m28.840782353s ago: executing program 5 (id=2272): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x9, 0xd15}) 6m13.670460926s ago: executing program 40 (id=2272): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x9, 0xd15}) 12.983076017s ago: executing program 1 (id=3798): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0xfffffffffffffe90, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2cc57362b802ee7cfe1b1af0019df64c32564e3dfde4987fa98dc5f2d12771d5e3688d202548bde976ea3d7f4cd1db469beddec8a6fec61c7395f8f4131d6ff9137ea3822f9faebb19734dfbf70bc95cac42c01e00c6e18cac419d6c73174d593fe725b51ef75f5e938a0eb0a129cbae42b28ce07d8b7a4b09afa7193e4ede172c3b82c3010fc276e62616f12e18f3277a1c7b627cb3bd3a4ed6c0301fe8635dde556c1add8357a0b83c333acc435be9b508c345975fb68237bc52c9129408d49dc63888e735e4acca4388747168eb6a31bae099264dcca82df387290b38341caa178d3035cbfe59fd6f91da1f249d22ad35f4b4564564b3506a969600a2575bb2c9290ccdf7a570f1c3e2830f16c0e15823", 0x112}], 0x1) 11.827843614s ago: executing program 4 (id=3809): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) shutdown(r0, 0x1) 11.630084232s ago: executing program 4 (id=3811): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) ioctl$FS_IOC_SETFSLABEL(r1, 0x4c02, &(0x7f0000000280)="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") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 11.435322863s ago: executing program 4 (id=3812): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 11.427866224s ago: executing program 3 (id=3813): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x2e, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) dup3(r0, r0, 0x80000) r5 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="75764169432797fa9d5a46aa3a", 0xd}], 0x1}}], 0x1, 0xc001) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.199352688s ago: executing program 4 (id=3814): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="8000000010000104000000800300000000000000", @ANYRES32=0x0, @ANYBLOB="fa90817dbcb5f31a4c001280110001006272696467655f736c6176650000000034000580050019000300000005000600030000000500040001000000050021000000000005001e00fe00000008002200", @ANYRES32, @ANYBLOB="140003006272696467655f736c6176655f30"], 0x80}, 0x1, 0x0, 0x0, 0x200448b4}, 0x4040) 10.796556616s ago: executing program 4 (id=3815): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044082, 0x0) syz_open_procfs(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0xa9ea, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) 10.415544611s ago: executing program 4 (id=3816): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="000101000040000000", 0x9}], 0x1}, 0x4004) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/6, 0x6}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 9.517084412s ago: executing program 1 (id=3818): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x200040c0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 9.372993219s ago: executing program 1 (id=3820): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff86"], 0xfdef) 8.687235731s ago: executing program 1 (id=3824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) sendto$inet6(r3, &(0x7f0000003380)="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", 0xffffffffffffff48, 0x22000040, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff83, 0x0, 0x0}, &(0x7f0000000c00)=0x40) 8.322533717s ago: executing program 7 (id=3827): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@remote, @rand_addr, 0x0}, &(0x7f0000000480)=0xc) sendto$packet(r3, &(0x7f0000000240)="cdbbf80d2e09cd398a054f01d3af0bef2dcaa58e1536933f7aecca32aebe7775e660b68fd7d14d09412d9e1a6de6b10eb2b484852830a6a1a1593532e186516fa92a4acd7ea2e203e0c81dfddf2734a34e413c3e8ebd5c41185d39e25f7c2beea67db1", 0x63, 0x40050, &(0x7f00000004c0)={0x11, 0x18, r4, 0x1, 0x77, 0x6, @local}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x5, @private2, 0x4}], 0x2c) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8}) 7.658886164s ago: executing program 1 (id=3829): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24000081) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 7.479189685s ago: executing program 3 (id=3830): ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000001d00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x60}}, 0x8000) 6.858101794s ago: executing program 3 (id=3831): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.11080958s ago: executing program 3 (id=3834): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="000101000040000000", 0x9}], 0x1}, 0x4004) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/6, 0x6}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 5.981468574s ago: executing program 7 (id=3835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 5.828571875s ago: executing program 7 (id=3836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040) 5.708791023s ago: executing program 7 (id=3837): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x415a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 4.799158083s ago: executing program 3 (id=3838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) sendto$inet6(r3, &(0x7f0000003380)="4bc32a49c5fee590838631f81d2d501b780e3376f11cd3e5af0a450233e74156f6bbf53a14d2e74c8e46115c0a4d4a0375317c4d988a690e37262cb48b591bfdb4ff738f0be31f3f33d65ec0256e00d937043394bbc296a55f0ffd3f8ae817bd0629ddb50766c7e739e656e5e24b5a077cb64f8b1b75a3368c7908668352513b274701ff080031e7427c786ca327f124645e97e4b67c7eda72388d008dbecae8227565c52c02500c1953cff47c07baeaa70ccda20f6ad15db93d0225f72ac9f7c32387b0e50de6f698decf584671232331c524c1e775c4b13e0e379e8253b0ff8fc05238f9a7dada66771b3c485d00532858ad4e137742e6adf72eec34b0ba8821c67f9d2726e98a6074617100882dc2711fb2e477cc76a1ff9b47d93ca2fa42e52f483bd2aa530974ff3fd29a170adadb10241abb8ddff7fdbe53765ee6239d7896be7db752b5046cc5b4b36b2a9c0b3c154915d90ccbf46675a81826b348a5c986a4d1c4488f6e24545619c829e7f6c4ae68d1a86bb2e700728086f30659178c7ba222b71f5786d77f12f221cd20b9fbd24801abcd64eaa605ca9da167fb06b11b9e637f6e727253d7090699972818e0e69159e07393634fd13310a648768d17013063d34b2d68a20469891d0f24285a44ea4dc4aaadf3e326c7645fb569ee78dca1ec46d7942a42bd675ed1dbb3b537a24d57b76583df434bb57f38c0b4c2b6414f4511fb0126a3e17e06c65ec6023b8198ddc4b59707132affdb3123a930192d8a1a1d346501958faf24a8090b0454b7fd4fbe7f3afd8e70150edc2d3b6d799b45010dfd621c39d1e32e19f7c1554abf55e4cb0f450d129c4eaef1a1b7431ad30fc0d6ce6b973f2aa0f1dd2599d8284fb79deff298aae73388cd0ae4fccda5cff46b058fac08debb67bb9bc5eea5a6d28cff2d046a5afb09fb608bab362ef021fefc8d05e9619ea57959a884873b3a887a5e08123d564c5349c4c15c2ece77f0e4d0e4c88a516978afe85c014ff344668d4cd97681bae2ab6aecdc6f4a4c705c43d400f691ef6f5c926a8c51d9cd4d0fc15769c5b20662cfbef41d9cc3d62b9d68795907729d33133f3287f2ab5cce83e35fb0e358bb64a60675308f568a25c2327eebaaac30e6e282464d5547daf53eee7190e1e5a40f7d2e327858099bc5a7eff7f79859a074aaad5d6bdd8164c627ea59784fe40f1467bd17ded380e21bca5d7d0bb59aa681740d4e371e632862cdb8868c4d706a228704dd94d8687e07708b8a4742fb0caa260523e515bfd7ddcae9aff8e487aac73232c6a2bf63663c644f4451e209d720b0bd678b27b673443937d80958f94fd747be9f0df02950c2de593ea6978062aba26d12eda852f37cdfc18d3b96b08ac3eaffa2efb619db6ee789446b30fd5915480bc24990c536359d64f06e39f59e8cbafc28451fb95eefa265e038f43af933d288578be9ecf26495e6da011d91d5578c46b4a4bcbcf649eced6ac16f6623e67afd80c35dffe6b6aadd4bfbbfcd2f248455b8b1ce0f10f628999d8f56ae47e2fbb744bfb7962a3548240c286277db000d2b0e403d13fea75c7a789dec2a29e51e20a037a5156cfc547a7688f1926d8476a5d5bb64b4a82132a3bcadd080503f72e04e7d55ece7d5bbf24ee9fae2abace69fddbc3604c04a0a82408a7dc035e2512082397323cbf6ac5a01c07baa604bbd6315ad2592491a5397ef1c736f5fae08426ad14753fa0ea774f0397a77399bc5a7c9529f7a7b48313f426796346f77f7e975f8c2704bc61ce89f8f462ba69b68de5bbfaefae6b749d68af86334552a37f02b18671eb6ebf58cc77fde6d93a2b859c49113634afa77d33d2655675697b3ba142b94a18cda12773ed4391e4f80e7caf1c429eb4bbf2d2c982ea62aba0c94cfa2280d12e411edba880debe919d334d58492ce78ee93fafb0b6ef8202b5cb1d8ca7c6eba88751ddfad35db2ef8089e14cc30fa7e963394cbdfd4a39053c69e94b9bb44bb445d77b7a0965e3428142405ef3aa26426fcb8e26423b5342a1ea0bfd28448605e7c4346916a152839c23f1e3d463078830f55cfee3d719080be97cc6b6acd9effda875b18df23c07e55cd732d25d0c32b04c38b2c4cec8e9b57548cb7c153c2ac2043aaa49267c179f1485acb449823fd3f379953adaba9209ce052ee6470529ef6c044efdb9ec79c0da170e1a986706da2f191f735e8c9c27a433f06ad910b552ec871c20202bf39c13e3601a65facb32fb7ef2a85d12345b67409bd14c1e26c028676cef27d47e51deb5c8b616d7ec0dd837ad4fc4800ce78f83e5075bef6d3ef784519908712d411d6af598dda6ea13f20fb2ba8f4a85d1c8df3cc7dfe0a8e8d5b2d696e2b51d835c255d97873dae579a69cc3c9f8d50f282250142f78b562cd59325b010fdf5e103cc05f09295ecd5ad1bdbd195ba895bd38e5f3f8abe520a442f98c9b0df2e1bf30771be8c0ba86d59579a9ceda056c2b3b6d51ea5cd584750f45ccb7c9adc37ea8750ff035778da2cd9eac640e1121c4afac6f796a2a6d1892ce896f201a08cfa422bdbfabc34dad9e34352856160037d3485c344900ebb6d331d35fcb1c143d0f32e8393a712cb5fe7002561c4bb11051492e65d4291c92c0545a926a798d7a23e806796fed6534d67cdf9857f7123d4dd1ebdb88d545201d75d1c9ba5456b7fb52af56652cb2537c0a5f82ad02f084edcaa66254f9a0a01eb7c5b9606c4c93594f1e636ab15d96f58b11ee9f7a16b6765a146bac6a98da6b47ecc87974a1c732c1194008c5f3514d0c1f42ba7b284b07b23a3b0fe9073dcec4b2d4ea397ef3984753b134d60515ed774118b46f21cd2f2c60b87f54e9335fa30517fe8c360f0803031a91302ba8f44e82d13c58736881ecf4cb643e7bf9585193f4d1e95e08c18c47d460e2edf2a0f1ed39c2e7800cfbffa0d9a09b108d8a5eab9ed409b61458e9d46bceab006e2df77505af41ff7dc0ee67748ec729ee09c11c229ac7ef447712c220ae2ef5612ae45299ca04cc3a26cc09a259c1dbc9a4291bd6589ce6eedc156df97d1bb7eea68ee273bb4c4d8ca0c515299aa53260e58760864b1ec4f386ad0367a08bfa47ffca6af5705097d1657c94d5d7736e7157d8f7137416480933be3f325708f6f947ea08c94cf4489e0f5e40b5e03bebf427f08bf6bea963b6b1338f91384755681044e00fbbff94b8d21a874b12be4294173c65f2f4e56427e840a5703e289f8314f705cf74e1d98ff88105967bd42d62a63a897fbe9a50ff08dd122c3ce1445b21aab0502b6fb47577604a0508249d8422b71eedc58fa678646922050d46d5e69d8612ff7bbb741c19ede0600917b7f84e44e580334db385ef5e5600a73bfdebcb037cea14f50eb7466db1e51d03d61923804ebfef38735452893486cf5a9e6ecc54526a2c998e3b5b41d5d8477c7e9b756876c8748dd10f44f315a5ccc578ec38a6799846ec1fac57bdfe4f9bc65b31d1e7de7cd9fc2f163cb513d790bd1dbb9b5a5cd46efecbbaba6bf504c23ca744ee36704f0b873896da1f9ac7089c28136e19b3c31ea3ac44f0bf8af4bdeb9a917370c78d11ab838282787cdc45b35f604bddf6c65f4079bd7606a40f219bbe940e25e6a54a8b9850ea0decb10013ae99aa920303f35f6283c0211e1b0000008000000000cc53babc28b29c5aee0f626c48d58b092644823fc0b71a57d7125bc35ddf9ec7019d89a3497aa65fb4f34b169c535ce30d695dbb88f278e730d2e4f1394ed4b843885d8fa33b39152398fd2f6bb77520a84e4135e1995e9568bc4d3e60b98e1452ada5893bfc1a7574570a09fa21064ad12aa22af9195fe351cd34a5e3adac29da4669e09a00008d17c4b564f2ed0a7844c840a729fed5c106861f479fedf326d93b39f186c40e4fc59e064c6d090cc9ecf27630ab471817e3bf8acfa1518c6f0f6b2f4c0905e9249af04c8019d3fe12acd69e0a3085e01d673ffa5f2bb6d26717f6e8a4a110ac2b0f11de3a0bdb7b838f0d156c06395bbb9294cb0e293f43baf60df683b35c4ff83bfd71b74fb25762079843d6484fa76a610b8cd6affeaf1930a47aa9aec77fee8b6b6a806527597f769570bb62af13a9da2d81254e102134e256f15126d21a7e5e6865989b1eb5c9752d059bea9eff27f7fed5f0ed40413ac11c20e68aa43baf4fc6a59e049e6bdb3ea3ebc5734b0ad0c6c9be761c5c248d2b50584ddfa2399884b091894f19061f4eb9ffa86097c11ee9fdb04d4ca44f91edded8e541adfab1b71c93305e85a41ca5f4eb9cf15820bf677694325c9c55cb443a7cb5e3d18157bd01bb23c1ede5dd5babc2751bead25b2f18860a085584ebf5211d67f74fd70edbecdbbf435d71db84fa96b9878a4166e2b0cc492f0f9eb82ad4fb4cdd5644e20f296feaa8f147e0e20a7c0f37767bf2a47fee3141447043fd990bb39dd56153eee38d05538b43627891f057a07526bf6848e171247549f53e0ba495a108f99e412a178e12001135e27b0184542ac579e0e22987b6b60fe5fc07954587556a53e1b326888d482f519c2e65f57193cb7f328e865db95b757d370200cb643a4da7596a13391d7b1017d842ecacaac3b0a3f53f388301374ad9033ff34d7d18db497c78a1ec8661c8e78e1d498f5a615649f3ecfe2c8ef3ee616ae455a42a06aacd64f1b2904dd111acd54d349dbb2ea2acf9e8fad483a53eb211018f6f2245c519c50fb3453b956c49a05a140b7270939f4f8216da940564f7facc9a83adae647c9fd43790577ed43dbe77420459a74237593fd5b703c0d4076ab1accd9ba686e621f189071a66df608f7db2dfb1b08137f2f91413e670f3835dd7bca62a078c1cd14683ed4d9ff8d9025477aacffcc38c330c3940ce55ba0742d8ffb4e0a3220177529978390e19167e40dede952fc0cb5e6e8ad6863c6160f517d714bcf18256eb9d0eec8413dbec13a7bd637a77e328d4db8f61493eb0f26eca93137fc4420e0c5bd8d4a1b700bf0608daddec7d40d24751f88f2dc89b8a04ae03d3349511a50f989b02cbfacf2c0455a9c8f034d671972368ceed715f3dfc2e9a143ff5c6275c8b714aee89c48c6b10aaf007e363ae17765dffea8b265a27793f55b86c214bbce2b3745f392109ece5688bdccd6dccf33407932dac4a18783b2d26d6dafeff39146397a4e89d2fb32d27c8b86e02b6ffa8fb91499f51d481ade5aa2e89bf5d24cdb95771574c777df39144316c6d6fcd9d8fb2fcec5823adfea0550014dfd2b5a3f7e23116359d12bee8362b5b96c7816583dabda95117b089f37cb3f682aeafec74dd62ca9ed9f1e56f7789e3b1ea9fcd0e3362ce0819f7b73d5e6b73162452eb69a1625a74926e6f4ee83e443e22f035e28f8bb19cfdc79c4e623356d022866edaf6d75c1938b86aa475670015433496f6455e4178072f05210d023ddb30dbaa5c8549fe893880e9da44d7ef99bc67940e73823962c8cc5e5e2708e22ddf27b863e360b372b57771099ab70fb51538bb0f42684e9b8bee428a9292869ad2bda5c554653e592066acd8e8547987f8e734e9e63ce39aae30439d4a0d7d88c8c5b2ee3727b6e8f22e96b9571ac2290edf3aa74e5cd54f464417773ef295e90d43042ee731d129179bef03fafc424b38118b5bfaa2051da04fbe8c84ddb142b8b80a599e419c09e0946268a52c352e74a8c3ff5b4e554dfcb1ae8b9a7f16ff823022ba5cd25ba70b6d6f620c5b2eff4a318c2c14a8150ab2ffeff7e2ee6e9e7f856496", 0xffffffffffffff48, 0x22000040, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff83, 0x0, 0x0}, &(0x7f0000000c00)=0x40) 4.081410239s ago: executing program 1 (id=3839): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "520cb365", {0x1, 0x17a, 0x1, 0x14, 0x7f}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\x00', {0x3, 0x0, 0x0, 0xd, 0x2, 0x8, 0xdd}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000002c0)=[0x0]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) 3.797082405s ago: executing program 7 (id=3840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x44640, 0x184) recvfrom$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffff9c, 0x0, 0x20800, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000012c0)={@loopback, @loopback}, 0x8) read$msr(r4, &(0x7f00000014c0)=""/4060, 0x45) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x4000001) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa00000000000008004500001400"], 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x78, 0x0, &(0x7f0000000400)=[@enter_looper, @enter_looper, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x6, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x801, 0x2}}, 0x0}}, @decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x3}, @clear_death], 0x4c, 0x0, &(0x7f0000000200)="f5b1bfea429bdbc697c59e15311f98e892b2fa9af8bebb4650649f8b646ea68394af338a7b2550dfeb079761cc909178771bc48953910e9e3a52e4bab1bd6766928f94301a4af0ed7933f651"}) 3.551314842s ago: executing program 3 (id=3841): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$kcm(0x21, 0x2, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0xa8340, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d70102030109021200"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) 2.455242384s ago: executing program 7 (id=3842): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0xfffffffffffffe90, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x112}], 0x1) 2.441970437s ago: executing program 0 (id=3843): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) 2.319402719s ago: executing program 0 (id=3844): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="a3f6fb7fca0000000000000000000000000000000000000000d2774699ecb045000c0bb32db9da189b8527e19a4e16a0c8baf31352902bf0d30f"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.783167146s ago: executing program 0 (id=3845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 1.586010817s ago: executing program 0 (id=3846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040) 1.218151356s ago: executing program 0 (id=3847): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) ioctl$FS_IOC_SETFSLABEL(r1, 0x4c02, &(0x7f0000000280)="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") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 0 (id=3848): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24000081) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) kernel console output (not intermixed with test programs): 5][ T8336] dvb-usb: error while querying for an remote control event. [ 1400.532265][ T6431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.574303][ T8336] dvb-usb: bulk message failed: -22 (1/0) [ 1400.574342][ T8336] dvb-usb: error while querying for an remote control event. [ 1400.625310][ T6431] bond0 (unregistering): Released all slaves [ 1400.703472][T15311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.731166][ T8336] dvb-usb: bulk message failed: -22 (1/0) [ 1400.731204][ T8336] dvb-usb: error while querying for an remote control event. [ 1400.792160][T15429] team0: Cannot enslave team device to itself [ 1400.798264][ T8336] usb 5-1: USB disconnect, device number 32 [ 1400.940610][ T8336] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1402.033779][T10251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.034005][T10251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.201694][ T6431] hsr_slave_0: left promiscuous mode [ 1402.224398][ T6431] hsr_slave_1: left promiscuous mode [ 1402.225358][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.272910][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.231753][ T6431] team0 (unregistering): Port device team_slave_1 removed [ 1403.392547][ T6431] team0 (unregistering): Port device team_slave_0 removed [ 1404.104404][T10251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.104764][T10251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.176572][T15311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.250679][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.250924][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.365417][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.365596][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.591188][T15328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.769609][T15328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.816940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1404.876500][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.876657][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.916771][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.916991][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.180488][ C0] vkms_vblank_simulate: vblank timer overrun [ 1405.332165][ C0] vkms_vblank_simulate: vblank timer overrun [ 1405.533743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1405.959974][T15486] kvm: pic: non byte write [ 1405.998476][T15309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.334170][T15311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.393784][T15309] veth0_vlan: entered promiscuous mode [ 1406.419072][T15309] veth1_vlan: entered promiscuous mode [ 1406.429478][T15328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.571966][T15309] veth0_macvtap: entered promiscuous mode [ 1406.924594][T15311] veth0_vlan: entered promiscuous mode [ 1406.939218][T15498] tipc: Enabling of bearer rejected, failed to enable media [ 1406.974921][T15309] veth1_macvtap: entered promiscuous mode [ 1407.113374][T15311] veth1_vlan: entered promiscuous mode [ 1407.238966][T15309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.334001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.432406][T15309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.498499][T15311] veth0_macvtap: entered promiscuous mode [ 1407.504524][ T767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.514468][ T767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.519377][ T767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.538242][ T767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.541325][T15311] veth1_macvtap: entered promiscuous mode [ 1407.918068][T15311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.035028][T15311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.113077][ T767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.161136][T12109] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1408.217501][ T767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.231048][ T767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.231836][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.231856][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.235354][T15328] veth0_vlan: entered promiscuous mode [ 1408.236286][ T767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.341059][T12109] usb 5-1: device descriptor read/64, error -71 [ 1408.429566][T15328] veth1_vlan: entered promiscuous mode [ 1408.478267][ T767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.478289][ T767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.592355][T12109] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1408.708269][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.708293][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.721263][T12109] usb 5-1: device descriptor read/64, error -71 [ 1408.831795][T12109] usb usb5-port1: attempt power cycle [ 1408.833239][T15328] veth0_macvtap: entered promiscuous mode [ 1409.020428][T15328] veth1_macvtap: entered promiscuous mode [ 1409.048795][T10251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.048817][T10251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.150577][T15328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.177225][T15328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.181698][T12109] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1409.221976][ T767] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.227488][ T767] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.232644][ T767] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.239381][ T767] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.331546][T12109] usb 5-1: device descriptor read/8, error -71 [ 1409.581341][T12109] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1409.634108][T12109] usb 5-1: device descriptor read/8, error -71 [ 1409.741468][T12109] usb usb5-port1: unable to enumerate USB device [ 1410.164548][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.164565][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.560579][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.560603][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.351277][ T8334] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1411.650780][ T8334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.650802][ T8334] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1411.650842][ T8334] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1411.650859][ T8334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.738101][ T8334] usb 5-1: config 0 descriptor?? [ 1411.823922][ T8334] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1411.823979][ T8334] dvb-usb: bulk message failed: -22 (3/0) [ 1411.834405][ T8334] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1411.835693][ T8334] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1411.835757][ T8334] usb 5-1: media controller created [ 1411.839172][ T8334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1411.967409][ T8334] dvb-usb: bulk message failed: -22 (6/0) [ 1411.967467][ T8334] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1411.987150][ T8334] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 1411.994118][ T8334] dvb-usb: schedule remote query interval to 150 msecs. [ 1411.994142][ T8334] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1412.125127][T15540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.125583][T15540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.153446][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1412.153481][ T9] dvb-usb: error while querying for an remote control event. [ 1412.154851][T15540] netlink: 'syz.4.2312': attribute type 10 has an invalid length. [ 1412.157637][T15540] team0: Cannot enslave team device to itself [ 1412.158010][T15540] dvb-usb: bulk message failed: -22 (2/0) [ 1412.158087][T15540] dvb-usb: bulk message failed: -22 (4/0) [ 1412.206872][ T8328] usb 5-1: USB disconnect, device number 37 [ 1412.437507][ T8328] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1412.613177][ T8338] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1412.842354][ T8338] usb 4-1: Using ep0 maxpacket: 32 [ 1412.845166][ T8338] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1412.845188][ T8338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.849346][ T8338] usb 4-1: config 0 descriptor?? [ 1413.011221][ T8328] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1413.165009][ T8328] usb 5-1: Using ep0 maxpacket: 16 [ 1413.167244][ T8328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.167263][ T8328] usb 5-1: config 0 has no interfaces? [ 1413.167285][ T8328] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1413.167303][ T8328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.229908][ T8328] usb 5-1: config 0 descriptor?? [ 1413.337166][ T8338] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1413.550939][ T8334] usb 5-1: USB disconnect, device number 38 [ 1413.580245][ T8338] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1413.580296][ T8338] dib0700: firmware download failed at 7 with -22 [ 1413.649916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.327504][ T5870] usb 4-1: USB disconnect, device number 5 [ 1417.445113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.646921][ C0] vkms_vblank_simulate: vblank timer overrun [ 1418.309903][T15631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2347'. [ 1419.374261][T15642] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1419.375245][T15642] Error validating options; rc = [-22] [ 1420.134647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1422.373577][T15666] netlink: 'syz.0.2359': attribute type 1 has an invalid length. [ 1425.337085][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 1426.001123][ T8338] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1426.152915][ T8338] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1426.152947][ T8338] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1426.155221][ T8338] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1426.155243][ T8338] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1426.155258][ T8338] usb 2-1: Product: syz [ 1426.155269][ T8338] usb 2-1: Manufacturer: syz [ 1426.155280][ T8338] usb 2-1: SerialNumber: syz [ 1426.211602][ T8338] usb 2-1: config 0 descriptor?? [ 1426.238152][ T8338] usb 2-1: selecting invalid altsetting 0 [ 1426.859453][ T8338] usb 2-1: USB disconnect, device number 3 [ 1428.705321][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.705436][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.185610][T15728] netlink: 'syz.3.2381': attribute type 16 has an invalid length. [ 1429.856026][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 1432.803025][T15759] ptrace attach of "./syz-executor exec"[15219] was attempted by "./syz-executor exec"[15759] [ 1433.615061][T15767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1434.001146][T12536] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1434.184048][T12536] usb 5-1: Using ep0 maxpacket: 32 [ 1434.185569][T12536] usb 5-1: no configurations [ 1434.185582][T12536] usb 5-1: can't read configurations, error -22 [ 1434.554818][T12536] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1434.701122][T12536] usb 5-1: Using ep0 maxpacket: 32 [ 1434.702198][T12536] usb 5-1: no configurations [ 1434.702215][T12536] usb 5-1: can't read configurations, error -22 [ 1434.702684][T12536] usb usb5-port1: attempt power cycle [ 1435.061093][T12536] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1435.117563][T12536] usb 5-1: Using ep0 maxpacket: 32 [ 1435.118271][T12536] usb 5-1: no configurations [ 1435.118282][T12536] usb 5-1: can't read configurations, error -22 [ 1435.273541][T12536] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1435.301190][T12536] usb 5-1: Using ep0 maxpacket: 32 [ 1435.302049][T12536] usb 5-1: no configurations [ 1435.302066][T12536] usb 5-1: can't read configurations, error -22 [ 1435.302472][T12536] usb usb5-port1: unable to enumerate USB device [ 1435.481099][T12109] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 1435.648544][T12109] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1435.648606][T12109] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1435.648636][T12109] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1435.648664][T12109] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1435.648692][T12109] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1435.650305][T12109] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1435.650360][T12109] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1435.650389][T12109] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1435.650418][T12109] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1435.650446][T12109] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1435.653722][T12109] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1435.653778][T12109] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1435.653807][T12109] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1435.653838][T12109] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1435.653870][T12109] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1435.666949][T12109] usb 1-1: string descriptor 0 read error: -22 [ 1435.667138][T12109] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1435.667170][T12109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.709110][T12109] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1436.056301][T15784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.056662][T15784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.146276][T12109] usb 1-1: USB disconnect, device number 4 [ 1436.485366][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 1436.521650][T15478] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1436.928565][T15478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.928594][T15478] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1436.928850][T15478] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1436.928876][T15478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.935938][T15478] usb 2-1: config 0 descriptor?? [ 1436.944070][T15478] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1436.944122][T15478] dvb-usb: bulk message failed: -22 (3/0) [ 1437.009864][T15478] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1437.020722][T15478] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1437.039670][T15478] usb 2-1: media controller created [ 1437.063572][T15478] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1437.114489][T15478] dvb-usb: bulk message failed: -22 (6/0) [ 1437.114584][T15478] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1437.157936][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.158240][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.159099][T15794] netlink: 'syz.1.2398': attribute type 10 has an invalid length. [ 1437.224679][T15804] dibusb: i2c wr: len=8192 is too big! [ 1437.224679][T15804] [ 1437.240308][T15478] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 1437.453844][T15794] team0: Cannot enslave team device to itself [ 1437.573353][T15478] dvb-usb: schedule remote query interval to 150 msecs. [ 1437.573371][T15478] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1437.580070][T15478] usb 2-1: USB disconnect, device number 4 [ 1437.760763][T15478] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1439.453964][ T8328] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1439.615981][ T8328] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1439.616049][ T8328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.623902][ T8328] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1439.623940][ T8328] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1439.623963][ T8328] usb 2-1: Manufacturer: syz [ 1439.641688][ T8328] usb 2-1: config 0 descriptor?? [ 1439.790129][T15828] netlink: 'syz.3.2409': attribute type 1 has an invalid length. [ 1439.901197][ T8328] rc_core: IR keymap rc-hauppauge not found [ 1439.901220][ T8328] Registered IR keymap rc-empty [ 1439.904849][ T8328] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1439.908065][ T8328] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 1440.138395][ T6688] usb 2-1: USB disconnect, device number 5 [ 1443.466603][T15872] netlink: 'syz.4.2425': attribute type 1 has an invalid length. [ 1444.148038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.043281][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.241868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.011433][T15910] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2439'. [ 1447.057387][T15910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.058804][T15910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.098433][T15914] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2439'. [ 1450.246915][T15965] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2457'. [ 1450.246941][T15965] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2457'. [ 1450.246960][T15965] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2457'. [ 1450.247005][T15965] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2457'. [ 1451.634318][T15981] pim6reg: entered allmulticast mode [ 1452.003638][T15995] vivid-000: disconnect [ 1452.027723][T15992] vivid-000: reconnect [ 1453.656588][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2468'. [ 1456.213927][T16014] netlink: 'syz.1.2471': attribute type 1 has an invalid length. [ 1457.104237][T16004] bond_slave_0: entered promiscuous mode [ 1457.104302][T16004] bond_slave_1: entered promiscuous mode [ 1457.126093][T16004] macvtap1: entered promiscuous mode [ 1457.126117][T16004] bond0: entered promiscuous mode [ 1457.126831][T16004] macvtap1: entered allmulticast mode [ 1457.126849][T16004] bond0: entered allmulticast mode [ 1457.126862][T16004] bond_slave_0: entered allmulticast mode [ 1457.126882][T16004] bond_slave_1: entered allmulticast mode [ 1457.128732][T16004] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1457.241978][T16005] bond0: left allmulticast mode [ 1457.241998][T16005] bond_slave_0: left allmulticast mode [ 1457.242013][T16005] bond_slave_1: left allmulticast mode [ 1457.242042][T16005] bond0: left promiscuous mode [ 1457.242704][T16005] bond_slave_0: left promiscuous mode [ 1457.242752][T16005] bond_slave_1: left promiscuous mode [ 1457.331576][T16014] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1458.150420][ C0] vkms_vblank_simulate: vblank timer overrun [ 1458.267335][ C0] vkms_vblank_simulate: vblank timer overrun [ 1458.742027][ C0] vkms_vblank_simulate: vblank timer overrun [ 1459.251795][T16060] loop4: detected capacity change from 0 to 1 [ 1459.473207][T16060] Dev loop4: unable to read RDB block 1 [ 1459.473275][T16060] loop4: unable to read partition table [ 1459.473535][T16060] loop4: partition table beyond EOD, truncated [ 1459.473550][T16060] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 1461.875324][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 1462.989521][T16094] binder: 16092:16094 ioctl 4018620d 0 returned -22 [ 1463.196625][T16098] bridge: RTM_NEWNEIGH with invalid ether address [ 1463.741066][ T8334] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1463.966837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.001177][ T8334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.001206][ T8334] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1464.001263][ T8334] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1464.001287][ T8334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.064839][ T8334] usb 2-1: config 0 descriptor?? [ 1464.090096][ T8334] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1464.090151][ T8334] dvb-usb: bulk message failed: -22 (3/0) [ 1464.193694][ T8334] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1464.210099][ T8334] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1464.210164][ T8334] usb 2-1: media controller created [ 1464.236026][ T8334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1464.387261][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.387726][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.418652][ T8334] dvb-usb: bulk message failed: -22 (6/0) [ 1464.418744][ T8334] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1464.420099][T16106] netlink: 'syz.1.2502': attribute type 10 has an invalid length. [ 1464.420140][T16106] team0: Cannot enslave team device to itself [ 1464.420703][T16106] dvb-usb: bulk message failed: -22 (2/0) [ 1464.420832][T16106] dvb-usb: bulk message failed: -22 (4/0) [ 1464.499803][ T8334] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 1464.516755][ T8334] dvb-usb: schedule remote query interval to 150 msecs. [ 1464.517629][ T8334] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1464.540155][ T8334] usb 2-1: USB disconnect, device number 6 [ 1464.806316][ T8334] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1465.710392][T16133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1465.881309][T16136] netlink: 'syz.7.2513': attribute type 1 has an invalid length. [ 1465.881345][T16136] netlink: 'syz.7.2513': attribute type 1 has an invalid length. [ 1465.884729][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2513'. [ 1466.009490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1467.811407][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2524'. [ 1468.339386][ T8328] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1468.561180][ T8328] usb 1-1: Using ep0 maxpacket: 8 [ 1471.194893][ T8328] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1471.195947][ T8328] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1471.195975][ T8328] usb 1-1: can't read configurations, error -71 [ 1471.831306][T12109] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 1472.055937][T12109] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1472.056002][T12109] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1472.056034][T12109] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1472.057050][T12109] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1472.057084][T12109] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1472.152823][T12109] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1472.152889][T12109] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1472.152919][T12109] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1472.152947][T12109] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1472.152984][T12109] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1472.163641][T12109] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1472.163711][T12109] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1472.163746][T12109] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1472.163776][T12109] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1472.163810][T12109] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1472.552422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.668798][T12109] usb 2-1: string descriptor 0 read error: -22 [ 1472.668969][T12109] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1472.668994][T12109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.793501][T12109] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1472.946635][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.947099][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.104066][ T8336] usb 2-1: USB disconnect, device number 7 [ 1473.591102][ T8338] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1473.771148][ T8338] usb 5-1: Using ep0 maxpacket: 32 [ 1473.773031][ T8338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.773049][ T8338] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1473.773075][ T8338] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1473.773099][ T8338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.784128][ T8338] usb 5-1: config 0 descriptor?? [ 1474.022470][ T8338] usb 5-1: USB disconnect, device number 43 [ 1475.887183][T16262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2561'. [ 1475.887202][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2561'. [ 1475.887215][T16262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2561'. [ 1475.887244][T16262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2561'. [ 1476.513260][T16272] netlink: 'syz.4.2566': attribute type 1 has an invalid length. [ 1477.181319][ T8336] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1477.455947][ T8336] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.455968][ T8336] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1477.456015][ T8336] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1477.456033][ T8336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.459827][ T8336] usb 5-1: config 0 descriptor?? [ 1477.517871][ T8336] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1477.517913][ T8336] dvb-usb: bulk message failed: -22 (3/0) [ 1477.539597][ T8336] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1477.556373][ T8336] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1477.556421][ T8336] usb 5-1: media controller created [ 1477.559403][ T8336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1477.586007][ T8336] dvb-usb: bulk message failed: -22 (6/0) [ 1477.586093][ T8336] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1477.605676][ T8336] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 1477.627318][ T8336] dvb-usb: schedule remote query interval to 150 msecs. [ 1477.627354][ T8336] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1477.775184][T16278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.775491][T16278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.783356][T16278] netlink: 'syz.4.2568': attribute type 10 has an invalid length. [ 1477.783407][T16278] team0: Cannot enslave team device to itself [ 1477.784603][T16278] dibusb: i2c wr: len=8192 is too big! [ 1477.784603][T16278] [ 1477.787005][T12109] usb 5-1: USB disconnect, device number 44 [ 1478.047756][T12109] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1478.251091][ T8336] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1478.501093][ T8338] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 1478.521152][ T8336] usb 4-1: Using ep0 maxpacket: 32 [ 1478.523554][ T8336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.523582][ T8336] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1478.523629][ T8336] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1478.523654][ T8336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.577888][ T8336] usb 4-1: config 0 descriptor?? [ 1478.656014][ T8338] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.656080][ T8338] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1478.656112][ T8338] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.656139][ T8338] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1478.656168][ T8338] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1478.696542][ T8338] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.696587][ T8338] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1478.696608][ T8338] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.696626][ T8338] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1478.696645][ T8338] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1478.714312][ T8338] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.714356][ T8338] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1478.714376][ T8338] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.714395][ T8338] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1478.714414][ T8338] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1478.835211][ T8336] usb 4-1: USB disconnect, device number 6 [ 1478.867852][ T8338] usb 1-1: string descriptor 0 read error: -22 [ 1478.868015][ T8338] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1478.868039][ T8338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.911737][ T8338] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1479.125892][ T8336] usb 1-1: USB disconnect, device number 7 [ 1480.463058][ T8334] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1480.611117][ T8334] usb 1-1: Using ep0 maxpacket: 16 [ 1480.613826][ T8334] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.613929][ T8334] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1480.613977][ T8334] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1480.614002][ T8334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.620180][ T8334] usb 1-1: config 0 descriptor?? [ 1480.628787][ T8334] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1481.694047][ T6688] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 1481.851715][ T6688] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1481.851778][ T6688] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1481.851808][ T6688] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.851836][ T6688] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1481.851864][ T6688] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1481.854440][ T6688] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1481.854498][ T6688] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1481.854526][ T6688] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.854554][ T6688] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1481.854580][ T6688] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1481.858467][ T6688] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1481.858527][ T6688] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1481.858556][ T6688] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.858581][ T6688] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1481.858608][ T6688] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1482.046282][ T6688] usb 5-1: string descriptor 0 read error: -22 [ 1482.046433][ T6688] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1482.046452][ T6688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.097925][ T6688] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1482.323907][ T8334] usb 5-1: USB disconnect, device number 45 [ 1483.305788][T12109] usb 1-1: USB disconnect, device number 8 [ 1484.063355][T12109] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1484.211059][T12109] usb 1-1: Using ep0 maxpacket: 32 [ 1484.218157][T12109] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1484.343748][T12109] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1484.343781][T12109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.343802][T12109] usb 1-1: Product: syz [ 1484.343817][T12109] usb 1-1: Manufacturer: syz [ 1484.343831][T12109] usb 1-1: SerialNumber: syz [ 1484.466821][T12109] usb 1-1: config 0 descriptor?? [ 1485.513379][T12109] gs_usb 1-1:0.0: Couldn't send data format (err=-110) [ 1485.513433][T12109] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 1485.725233][ T9] usb 1-1: USB disconnect, device number 9 [ 1487.114659][T14516] Bluetooth: hci0: command 0x0406 tx timeout [ 1487.114719][T14516] Bluetooth: hci3: command 0x0406 tx timeout [ 1487.114746][T14516] Bluetooth: hci6: command 0x0406 tx timeout [ 1488.961414][T16430] pim6reg: entered allmulticast mode [ 1490.189015][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.189094][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.543114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.769997][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.925138][ C0] vkms_vblank_simulate: vblank timer overrun [ 1492.235498][T10857] Bluetooth: hci1: command 0x0406 tx timeout [ 1492.430446][T16474] loop4: detected capacity change from 0 to 1 [ 1492.436652][T16474] Dev loop4: unable to read RDB block 1 [ 1492.436714][T16474] loop4: unable to read partition table [ 1492.437211][T16474] loop4: partition table beyond EOD, truncated [ 1492.437236][T16474] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 1492.451188][T12109] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1492.614570][T12109] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.614591][T12109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1492.614632][T12109] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1492.614649][T12109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.626509][T12109] usb 4-1: config 0 descriptor?? [ 1492.678000][T12109] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1492.678037][T12109] dvb-usb: bulk message failed: -22 (3/0) [ 1492.752371][T12109] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1492.791430][T12109] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1492.791495][T12109] usb 4-1: media controller created [ 1492.805050][T12109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1492.838762][T12109] dvb-usb: bulk message failed: -22 (6/0) [ 1492.838824][T12109] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1492.870698][T12109] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 1493.018417][T16472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.019138][T16472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.020745][T16472] netlink: 'syz.3.2638': attribute type 10 has an invalid length. [ 1493.051448][T12109] dvb-usb: schedule remote query interval to 150 msecs. [ 1493.051476][T12109] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1493.099704][T16472] team0: Cannot enslave team device to itself [ 1493.103375][T16479] dibusb: i2c wr: len=8192 is too big! [ 1493.103375][T16479] [ 1493.112674][ T9] usb 4-1: USB disconnect, device number 7 [ 1493.367760][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1493.661045][T16488] netlink: 'syz.7.2645': attribute type 1 has an invalid length. [ 1493.714580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1493.794658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1494.334753][ C0] vkms_vblank_simulate: vblank timer overrun [ 1494.708929][T16488] bond1: entered promiscuous mode [ 1494.714353][T16488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1497.831115][ T8338] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1497.982385][ T8338] usb 5-1: Using ep0 maxpacket: 8 [ 1497.985024][ T8338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1497.985061][ T8338] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1497.985079][ T8338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.285721][ T8338] usb 5-1: config 0 descriptor?? [ 1498.619825][ T8338] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1498.800621][T15478] usb 5-1: USB disconnect, device number 46 [ 1499.031066][ T8336] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1499.185342][ T8336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.185373][ T8336] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1499.185431][ T8336] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1499.185457][ T8336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.192745][ T8336] usb 1-1: config 0 descriptor?? [ 1499.198971][ T8336] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1499.199030][ T8336] dvb-usb: bulk message failed: -22 (3/0) [ 1499.218011][ T8336] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1499.219005][ T8336] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1499.219062][ T8336] usb 1-1: media controller created [ 1499.240180][ T8336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1499.257924][ T8336] dvb-usb: bulk message failed: -22 (6/0) [ 1499.258014][ T8336] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1499.284626][ T8336] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 1499.290802][ T8336] dvb-usb: schedule remote query interval to 150 msecs. [ 1499.290828][ T8336] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1499.421330][T16532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.424008][T16532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.426867][T16532] netlink: 'syz.0.2659': attribute type 10 has an invalid length. [ 1499.442197][ T8336] dvb-usb: bulk message failed: -22 (1/0) [ 1499.442234][ T8336] dvb-usb: error while querying for an remote control event. [ 1499.484456][T16551] dibusb: i2c wr: len=8192 is too big! [ 1499.484456][T16551] [ 1499.496419][T16532] team0: Cannot enslave team device to itself [ 1499.508110][ T8336] usb 1-1: USB disconnect, device number 10 [ 1500.167559][ T8336] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1501.056018][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1501.056046][ T37] audit: type=1326 audit(1763966315.187:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.056102][ T37] audit: type=1326 audit(1763966315.187:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.057985][ T37] audit: type=1326 audit(1763966315.187:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.071397][ T37] audit: type=1326 audit(1763966315.207:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.071459][ T37] audit: type=1326 audit(1763966315.207:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.091472][ T37] audit: type=1326 audit(1763966315.217:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.091543][ T37] audit: type=1326 audit(1763966315.217:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.091598][ T37] audit: type=1326 audit(1763966315.217:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.092482][ T37] audit: type=1326 audit(1763966315.227:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.092543][ T37] audit: type=1326 audit(1763966315.227:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16573 comm="syz.1.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1501.165719][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2675'. [ 1501.175925][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2675'. [ 1501.176213][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2675'. [ 1501.201636][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'. [ 1501.931289][ T8336] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1502.405984][ T8336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.406015][ T8336] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1502.406074][ T8336] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1502.406100][ T8336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.475474][ T8336] usb 4-1: config 0 descriptor?? [ 1502.492606][ T8336] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1502.492660][ T8336] dvb-usb: bulk message failed: -22 (3/0) [ 1502.505720][ T8336] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1502.508131][ T8336] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1502.508198][ T8336] usb 4-1: media controller created [ 1502.520207][ T8336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1502.536992][ T8336] dvb-usb: bulk message failed: -22 (6/0) [ 1502.537094][ T8336] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1502.545204][ T8336] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 1502.561471][ T8336] dvb-usb: schedule remote query interval to 150 msecs. [ 1502.561498][ T8336] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1502.729966][ T8336] dvb-usb: bulk message failed: -22 (1/0) [ 1502.730045][ T8336] dvb-usb: error while querying for an remote control event. [ 1502.747213][T16587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.747698][T16587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.756724][T16587] netlink: 'syz.3.2680': attribute type 10 has an invalid length. [ 1502.756778][T16587] team0: Cannot enslave team device to itself [ 1502.761885][T16587] dibusb: i2c wr: len=8192 is too big! [ 1502.761885][T16587] [ 1502.811476][ T8336] usb 4-1: USB disconnect, device number 8 [ 1503.685085][ T8336] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1504.841371][T16618] binder: 16615:16618 ioctl 4018620d 0 returned -22 [ 1509.913303][T16668] binder: 16666:16668 ioctl 4018620d 0 returned -22 [ 1510.416739][T16687] netlink: 'syz.0.2711': attribute type 2 has an invalid length. [ 1510.459223][T16687] !: entered promiscuous mode [ 1510.481774][T16687] netlink: 'syz.0.2711': attribute type 2 has an invalid length. [ 1510.481885][T16687] !: left promiscuous mode [ 1510.572323][T15478] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1510.724465][T15478] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.724486][T15478] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1510.724525][T15478] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1510.724543][T15478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.788165][T15478] usb 4-1: config 0 descriptor?? [ 1510.832632][T15478] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1510.832674][T15478] dvb-usb: bulk message failed: -22 (3/0) [ 1510.848625][T15478] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1510.853453][T15478] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1510.853521][T15478] usb 4-1: media controller created [ 1510.866181][T15478] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1510.929546][T15478] dvb-usb: bulk message failed: -22 (6/0) [ 1510.929605][T15478] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1510.950280][T15478] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 1510.969294][T15478] dvb-usb: schedule remote query interval to 150 msecs. [ 1510.969312][T15478] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1511.021677][T16683] netlink: 'syz.3.2710': attribute type 10 has an invalid length. [ 1511.021710][T16683] team0: Cannot enslave team device to itself [ 1511.026194][T16683] dvb-usb: bulk message failed: -22 (2/0) [ 1511.026250][T16683] dvb-usb: bulk message failed: -22 (4/0) [ 1511.034818][T15478] usb 4-1: USB disconnect, device number 9 [ 1511.162692][T15478] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1512.697595][T16708] binder: 16707:16708 ioctl 4018620d 0 returned -22 [ 1514.173775][T16718] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2721'. [ 1516.512035][T16740] binder: 16739:16740 ioctl c0306201 0 returned -14 [ 1518.916496][T16771] binder: 16770:16771 ioctl c0306201 0 returned -14 [ 1522.011201][T16807] binder: 16806:16807 ioctl c0306201 0 returned -14 [ 1522.527608][T16822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2762'. [ 1524.461116][T16858] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2774'. [ 1526.021715][T15478] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1526.181060][T15478] usb 2-1: Using ep0 maxpacket: 8 [ 1526.233172][T15478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.233193][T15478] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1526.320287][T15478] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1526.320313][T15478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.320328][T15478] usb 2-1: Product: syz [ 1526.320339][T15478] usb 2-1: Manufacturer: syz [ 1526.320350][T15478] usb 2-1: SerialNumber: syz [ 1526.485283][T15478] usb 2-1: config 0 descriptor?? [ 1526.831220][T15478] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1527.005614][T15478] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1527.005754][T15478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.005770][T15478] usb 1-1: Product: syz [ 1527.005781][T15478] usb 1-1: Manufacturer: syz [ 1527.005791][T15478] usb 1-1: SerialNumber: syz [ 1527.013269][T15478] hub 1-1:24.0: bad descriptor, ignoring hub [ 1527.013299][T15478] hub 1-1:24.0: probe with driver hub failed with error -5 [ 1527.222698][T16891] netlink: 'syz.0.2784': attribute type 10 has an invalid length. [ 1527.292694][T16891] team0: Cannot enslave team device to itself [ 1527.309621][T15478] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1527.327856][T15478] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1527.327909][T15478] dib0700: firmware download failed at 7 with -22 [ 1527.398987][T15478] usb 1-1: USB disconnect, device number 11 [ 1528.671078][ T6688] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1528.831076][ T6688] usb 1-1: Using ep0 maxpacket: 16 [ 1528.833653][ T6688] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1528.833707][ T6688] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1528.833734][ T6688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.932007][ T6688] usb 1-1: config 0 descriptor?? [ 1529.014488][ T6688] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1529.213848][ T9] usb 2-1: USB disconnect, device number 8 [ 1529.861036][ T8328] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1530.011053][ T8328] usb 2-1: Using ep0 maxpacket: 32 [ 1530.015953][ T8328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.016019][ T8328] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1530.016046][ T8328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.033088][ T8328] usb 2-1: config 0 descriptor?? [ 1530.053800][ T8328] dvb-usb: found a 'TeVii S662' in warm state. [ 1530.055343][ T8328] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1530.056251][ T8328] dvb-usb: bulk message failed: -22 (2/0) [ 1530.105250][ T8328] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1530.111914][ T8328] dvbdev: DVB: registering new adapter (TeVii S662) [ 1530.111985][ T8328] usb 2-1: media controller created [ 1530.112400][ T8328] dvb-usb: bulk message failed: -22 (6/0) [ 1530.112420][ T8328] dw2102: i2c transfer failed. [ 1530.112442][ T8328] dvb-usb: bulk message failed: -22 (6/0) [ 1530.112460][ T8328] dw2102: i2c transfer failed. [ 1530.117651][ T8328] dvb-usb: bulk message failed: -22 (6/0) [ 1530.117679][ T8328] dw2102: i2c transfer failed. [ 1530.117700][ T8328] dvb-usb: bulk message failed: -22 (6/0) [ 1530.117718][ T8328] dw2102: i2c transfer failed. [ 1530.117738][ T8328] dvb-usb: bulk message failed: -22 (6/0) [ 1530.117756][ T8328] dw2102: i2c transfer failed. [ 1530.117776][ T8328] dvb-usb: bulk message failed: -22 (6/0) [ 1530.117794][ T8328] dw2102: i2c transfer failed. [ 1530.117809][ T8328] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1530.265958][ T8328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1530.283490][ T8328] dvb-usb: bulk message failed: -22 (3/0) [ 1530.283509][ T8328] dw2102: command 0x0e transfer failed. [ 1530.283517][ T8328] dvb-usb: bulk message failed: -22 (3/0) [ 1530.283527][ T8328] dw2102: command 0x0e transfer failed. [ 1530.591256][ T8328] dvb-usb: bulk message failed: -22 (3/0) [ 1530.591275][ T8328] dw2102: command 0x0e transfer failed. [ 1530.591282][ T8328] dvb-usb: bulk message failed: -22 (3/0) [ 1530.591293][ T8328] dw2102: command 0x0e transfer failed. [ 1530.591299][ T8328] dvb-usb: bulk message failed: -22 (1/0) [ 1530.591309][ T8328] dw2102: command 0x51 transfer failed. [ 1530.591316][ T8328] dvb-usb: bulk message failed: -22 (5/0) [ 1530.591326][ T8328] dw2102: i2c probe for address 0x68 failed. [ 1530.591334][ T8328] dvb-usb: bulk message failed: -22 (5/0) [ 1530.591344][ T8328] dw2102: i2c probe for address 0x69 failed. [ 1530.591351][ T8328] dvb-usb: bulk message failed: -22 (5/0) [ 1530.591361][ T8328] dw2102: i2c probe for address 0x6a failed. [ 1530.591369][ T8328] dw2102: probing for demodulator failed. Is the external power switched on? [ 1530.591377][ T8328] dvb-usb: no frontend was attached by 'TeVii S662' [ 1530.673329][ T8328] rc_core: IR keymap rc-tt-1500 not found [ 1530.673356][ T8328] Registered IR keymap rc-empty [ 1530.682084][ T8328] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1530.692146][ T8328] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input24 [ 1530.713725][ T8328] dvb-usb: schedule remote query interval to 250 msecs. [ 1530.713757][ T8328] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1530.713774][ T8328] dvb-usb: TeVii S662 successfully initialized and connected. [ 1530.727917][ T8328] usb 2-1: USB disconnect, device number 9 [ 1531.420516][ T37] kauditd_printk_skb: 63 callbacks suppressed [ 1531.420538][ T37] audit: type=1326 audit(1763966345.547:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1531.451362][ T37] audit: type=1326 audit(1763966345.587:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1531.451736][ T37] audit: type=1326 audit(1763966345.587:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1531.452903][ T37] audit: type=1326 audit(1763966345.587:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c81ef749 code=0x7ffc0000 [ 1531.641480][T15478] usb 1-1: USB disconnect, device number 12 [ 1533.271808][ T8328] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1533.762434][T15478] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1534.022108][T15478] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1534.022129][T15478] usb 5-1: config 0 has no interface number 0 [ 1534.037520][T15478] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1534.037559][T15478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.037585][T15478] usb 5-1: Product: syz [ 1534.037604][T15478] usb 5-1: Manufacturer: syz [ 1534.037623][T15478] usb 5-1: SerialNumber: syz [ 1534.270778][T15478] usb 5-1: config 0 descriptor?? [ 1534.559525][T15478] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1534.600786][T15478] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1534.603243][T15478] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1534.603313][T15478] usb 5-1: media controller created [ 1534.755082][T15478] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1534.874197][T15478] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1535.201305][ T8328] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1535.370441][ T8328] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1535.370477][ T8328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.370499][ T8328] usb 1-1: Product: syz [ 1535.370515][ T8328] usb 1-1: Manufacturer: syz [ 1535.370531][ T8328] usb 1-1: SerialNumber: syz [ 1535.432878][ T8328] hub 1-1:24.0: bad descriptor, ignoring hub [ 1535.432922][ T8328] hub 1-1:24.0: probe with driver hub failed with error -5 [ 1535.658253][T17032] netlink: 'syz.0.2842': attribute type 10 has an invalid length. [ 1535.658301][T17032] team0: Cannot enslave team device to itself [ 1535.678540][ T8328] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1535.710856][ T8328] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1535.711076][ T8328] dib0700: firmware download failed at 7 with -22 [ 1535.743637][T15478] usb 5-1: USB disconnect, device number 47 [ 1535.762154][ T8328] usb 1-1: USB disconnect, device number 13 [ 1536.237857][ C1] vkms_vblank_simulate: vblank timer overrun [ 1536.519743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1536.841095][T17068] binder: BINDER_SET_CONTEXT_MGR already set [ 1536.841114][T17068] binder: 17067:17068 ioctl 4018620d 200000004a80 returned -16 [ 1536.845402][T17068] binder: 17067:17068 ioctl c0306201 0 returned -14 [ 1538.232438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1538.628964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1538.834409][T17107] binder: 17106:17107 ioctl c0306201 0 returned -14 [ 1540.887973][T17131] netlink: 'syz.7.2866': attribute type 10 has an invalid length. [ 1541.010782][T17128] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1541.010815][T17128] Error validating options; rc = [-22] [ 1541.258593][T17137] binder: 17136:17137 ioctl c0306201 0 returned -14 [ 1541.497522][T17131] team0: Cannot enslave team device to itself [ 1544.048367][ T37] audit: type=1326 audit(1763966358.167:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17184 comm="syz.7.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7489f749 code=0x7ffc0000 [ 1544.048435][ T37] audit: type=1326 audit(1763966358.167:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17184 comm="syz.7.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7489f749 code=0x7ffc0000 [ 1544.048488][ T37] audit: type=1326 audit(1763966358.167:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17184 comm="syz.7.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fdc7489f749 code=0x7ffc0000 [ 1544.048541][ T37] audit: type=1326 audit(1763966358.177:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17184 comm="syz.7.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7489f749 code=0x7ffc0000 [ 1544.048592][ T37] audit: type=1326 audit(1763966358.177:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17184 comm="syz.7.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fdc7489f749 code=0x7ffc0000 [ 1544.048643][ T37] audit: type=1326 audit(1763966358.177:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17184 comm="syz.7.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7489f749 code=0x7ffc0000 [ 1544.944172][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2909'. [ 1545.161265][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1545.343356][ T9] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1545.343390][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.343414][ T9] usb 1-1: Product: syz [ 1545.343429][ T9] usb 1-1: Manufacturer: syz [ 1545.343452][ T9] usb 1-1: SerialNumber: syz [ 1545.423136][ T9] hub 1-1:24.0: bad descriptor, ignoring hub [ 1545.423183][ T9] hub 1-1:24.0: probe with driver hub failed with error -5 [ 1545.611988][T17201] netlink: 'syz.0.2907': attribute type 10 has an invalid length. [ 1545.612033][T17201] team0: Cannot enslave team device to itself [ 1545.618003][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1545.630785][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1545.630845][ T9] dib0700: firmware download failed at 7 with -22 [ 1545.673506][ T9] usb 1-1: USB disconnect, device number 14 [ 1546.165839][ T37] audit: type=1326 audit(1763966360.297:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17219 comm="syz.4.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa481f0f749 code=0x7ffc0000 [ 1546.166454][ T37] audit: type=1326 audit(1763966360.297:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17219 comm="syz.4.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa481f0f749 code=0x7ffc0000 [ 1546.166986][ T37] audit: type=1326 audit(1763966360.297:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17219 comm="syz.4.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa481f0f749 code=0x7ffc0000 [ 1546.167527][ T37] audit: type=1326 audit(1763966360.297:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17219 comm="syz.4.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa481f0f749 code=0x7ffc0000 [ 1550.238799][T17257] binder: BINDER_SET_CONTEXT_MGR already set [ 1550.238819][T17257] binder: 17253:17257 ioctl 4018620d 200000000040 returned -16 [ 1550.336775][T17264] fuse: Bad value for 'fd' [ 1550.550264][T17265] ipip0: entered promiscuous mode [ 1550.550301][T17265] ipip0: entered allmulticast mode [ 1551.248944][ T6688] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1551.421130][ T6688] usb 5-1: device descriptor read/64, error -71 [ 1551.586737][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.587042][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.661855][ T6688] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1551.791092][ T6688] usb 5-1: device descriptor read/64, error -71 [ 1552.000726][ T6688] usb usb5-port1: attempt power cycle [ 1552.521067][ T6688] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1552.542946][ T6688] usb 5-1: device descriptor read/8, error -71 [ 1552.641065][ T8328] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1552.791116][ T6688] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1552.812498][ T6688] usb 5-1: device descriptor read/8, error -71 [ 1552.814889][ T8328] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1552.814920][ T8328] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1552.819236][ T8328] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1552.819265][ T8328] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1552.819288][ T8328] usb 2-1: Product: syz [ 1552.819305][ T8328] usb 2-1: Manufacturer: syz [ 1552.819321][ T8328] usb 2-1: SerialNumber: syz [ 1552.837745][ T8328] usb 2-1: config 0 descriptor?? [ 1552.885565][ T8328] usb 2-1: selecting invalid altsetting 0 [ 1552.923065][ T6688] usb usb5-port1: unable to enumerate USB device [ 1556.481312][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'. [ 1557.271837][T17316] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1557.271867][T17316] Error validating options; rc = [-22] [ 1558.007558][ T8328] usb 2-1: USB disconnect, device number 10 [ 1559.011033][ T8334] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1559.151082][ T8334] usb 1-1: device descriptor read/64, error -71 [ 1559.391121][ T8334] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1559.521083][ T8334] usb 1-1: device descriptor read/64, error -71 [ 1559.631634][ T8334] usb usb1-port1: attempt power cycle [ 1561.231206][ T8334] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1561.256918][ T8334] usb 1-1: device descriptor read/8, error -71 [ 1561.492532][ T8334] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1561.519448][ T8334] usb 1-1: device descriptor read/8, error -71 [ 1561.621583][ T8334] usb usb1-port1: unable to enumerate USB device [ 1562.261081][T12536] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1562.430008][T12536] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1562.430032][T12536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.430047][T12536] usb 4-1: Product: syz [ 1562.430058][T12536] usb 4-1: Manufacturer: syz [ 1562.430076][T12536] usb 4-1: SerialNumber: syz [ 1562.977661][T12536] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1562.977718][T12536] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1564.056145][T12536] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1564.056207][T12536] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1564.127818][T12536] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1564.157757][T12536] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1564.971145][T12536] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1565.101189][T12536] usb 2-1: device descriptor read/64, error -71 [ 1565.341547][T12536] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1565.688962][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.751060][T12536] usb 2-1: device descriptor read/64, error -71 [ 1565.778878][ T9] usb 4-1: USB disconnect, device number 10 [ 1565.861477][T12536] usb usb2-port1: attempt power cycle [ 1566.120157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.285543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.286801][T12536] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1566.302001][T12536] usb 2-1: device descriptor read/8, error -71 [ 1566.460871][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.499296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.586854][T12536] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1567.888555][T12536] usb 2-1: device descriptor read/8, error -71 [ 1567.991413][T12536] usb usb2-port1: unable to enumerate USB device [ 1568.481126][T12536] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1568.647155][T12536] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1568.647190][T12536] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1568.669966][T12536] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1568.669998][T12536] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1568.670019][T12536] usb 2-1: Product: syz [ 1568.670035][T12536] usb 2-1: Manufacturer: syz [ 1568.670050][T12536] usb 2-1: SerialNumber: syz [ 1568.733193][T12536] usb 2-1: config 0 descriptor?? [ 1568.784555][T12536] usb 2-1: selecting invalid altsetting 0 [ 1569.821401][ T9] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1569.961127][ T9] usb 5-1: device descriptor read/64, error -71 [ 1570.228295][ T9] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1570.387933][ T9] usb 5-1: device descriptor read/64, error -71 [ 1570.493005][ T9] usb usb5-port1: attempt power cycle [ 1570.621072][ T8336] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 1570.784253][ T8336] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1570.784315][ T8336] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1570.784345][ T8336] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1570.784372][ T8336] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.784400][ T8336] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1570.786141][ T8336] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1570.786198][ T8336] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1570.786227][ T8336] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1570.786254][ T8336] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.786283][ T8336] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1570.788246][ T8336] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1570.788303][ T8336] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1570.788333][ T8336] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1570.788361][ T8336] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.788390][ T8336] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1570.861204][ T9] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1570.882232][ T9] usb 5-1: device descriptor read/8, error -71 [ 1570.974028][ T8336] usb 1-1: string descriptor 0 read error: -22 [ 1570.974156][ T8336] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1570.974174][ T8336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.078516][ T8336] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1571.201148][ T9] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1571.234378][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.234824][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.237915][ T9] usb 5-1: device descriptor read/8, error -71 [ 1571.311921][ T6688] usb 1-1: USB disconnect, device number 19 [ 1571.344629][ T9] usb usb5-port1: unable to enumerate USB device [ 1572.000566][T17421] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 1572.012729][ T6688] usb 2-1: USB disconnect, device number 15 [ 1572.095960][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'. [ 1573.296597][T17463] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1573.296627][T17463] Error validating options; rc = [-22] [ 1574.491062][ T8336] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 1574.653528][ T8336] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1574.653593][ T8336] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1574.653623][ T8336] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.653659][ T8336] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1574.653750][ T8336] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1574.655344][ T8336] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1574.655398][ T8336] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1574.655427][ T8336] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.655454][ T8336] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1574.655483][ T8336] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1574.656891][ T8336] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1574.656949][ T8336] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1574.656977][ T8336] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.657005][ T8336] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1574.657033][ T8336] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1574.671110][T12536] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1574.703972][ T8336] usb 5-1: string descriptor 0 read error: -22 [ 1574.704131][ T8336] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1574.704158][ T8336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.823772][T12536] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1574.823807][T12536] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1574.827373][T12536] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1574.827412][T12536] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1574.827434][T12536] usb 4-1: Product: syz [ 1574.827450][T12536] usb 4-1: Manufacturer: syz [ 1574.827466][T12536] usb 4-1: SerialNumber: syz [ 1574.915828][T12536] usb 4-1: config 0 descriptor?? [ 1574.932324][ T8336] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1574.953942][T12536] usb 4-1: selecting invalid altsetting 0 [ 1575.227982][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.228456][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.322017][ T9] usb 5-1: USB disconnect, device number 56 [ 1575.556536][T12109] usb 4-1: USB disconnect, device number 11 [ 1576.131173][ T8336] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1576.271237][ T8336] usb 1-1: device descriptor read/64, error -71 [ 1576.316622][T17488] input: syz1 as /devices/virtual/input/input25 [ 1576.512984][ T8336] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1576.651248][ T8336] usb 1-1: device descriptor read/64, error -71 [ 1576.761470][ T8336] usb usb1-port1: attempt power cycle [ 1577.306926][ T8336] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1577.321915][ T8336] usb 1-1: device descriptor read/8, error -71 [ 1577.661406][ T8336] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1577.681808][ T8336] usb 1-1: device descriptor read/8, error -71 [ 1577.791387][ T8336] usb usb1-port1: unable to enumerate USB device [ 1580.096701][T17570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3037'. [ 1580.096729][T17570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3037'. [ 1580.096749][T17570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3037'. [ 1580.096796][T17570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3037'. [ 1580.254413][T17570] syz.0.3037 (17570) used greatest stack depth: 16248 bytes left [ 1580.460609][T17583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3046'. [ 1581.231083][T17615] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1581.231109][T17615] Error validating options; rc = [-22] [ 1582.475879][T17642] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1582.475906][T17642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1582.475926][T17642] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1582.475971][T17642] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1582.788907][T17642] syz.1.3067 (17642) used greatest stack depth: 16088 bytes left [ 1584.518122][T17695] netlink: 'syz.1.3090': attribute type 1 has an invalid length. [ 1584.577908][T17697] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3092'. [ 1585.082671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.209691][T17715] Device name cannot be null; rc = [-22] [ 1585.315285][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.815100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.887581][ C1] vkms_vblank_simulate: vblank timer overrun [ 1587.068044][T17733] __nla_validate_parse: 1 callbacks suppressed [ 1587.068069][T17733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3107'. [ 1587.241997][T17738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3108'. [ 1587.334269][T17741] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3109'. [ 1588.757209][T17778] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3124'. [ 1589.674668][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.251347][T12109] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1590.427497][T12109] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1590.427563][T12109] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1590.428824][T12109] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1590.428982][T12109] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1590.428998][T12109] usb 4-1: Manufacturer: syz [ 1590.435635][T12109] usb 4-1: config 0 descriptor?? [ 1590.558396][T12109] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1590.738129][T12536] usb 4-1: USB disconnect, device number 12 [ 1590.909906][T17809] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3134'. [ 1590.912256][T17809] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3134'. [ 1591.989967][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1592.669431][T17840] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3146'. [ 1592.687262][T17840] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3146'. [ 1594.573876][T17858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3154'. [ 1594.797655][T17870] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3160'. [ 1594.798694][T17870] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3160'. [ 1596.066220][ T6688] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1596.211077][ T6688] usb 4-1: Using ep0 maxpacket: 16 [ 1596.213880][ T6688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.213916][ T6688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.213943][ T6688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1596.213991][ T6688] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1596.214018][ T6688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.303634][ T6688] usb 4-1: config 0 descriptor?? [ 1596.770700][ T6688] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 1596.770733][ T6688] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 1596.770753][ T6688] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 1596.770773][ T6688] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 1596.894627][T17912] pim6reg: entered allmulticast mode [ 1596.922844][ T6688] appleir 0003:05AC:8241.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 1596.958410][ T9] usb 4-1: USB disconnect, device number 13 [ 1599.281089][T12536] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1599.446528][T12536] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1599.446573][T12536] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1599.447771][T12536] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1599.447791][T12536] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1599.447806][T12536] usb 1-1: Manufacturer: syz [ 1599.453041][T12536] usb 1-1: config 0 descriptor?? [ 1599.464472][T12536] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1599.707628][ T9] usb 1-1: USB disconnect, device number 24 [ 1601.372350][T12536] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1601.523784][T12536] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.523815][T12536] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1601.523856][T12536] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1601.523883][T12536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.573387][T12536] usb 2-1: config 0 descriptor?? [ 1601.782954][T17963] netlink: 'syz.1.3198': attribute type 10 has an invalid length. [ 1601.782998][T17963] team0: Cannot enslave team device to itself [ 1601.786508][ T6688] usb 2-1: USB disconnect, device number 16 [ 1601.981024][T12109] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 1602.133629][T12109] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1602.133690][T12109] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1602.133720][T12109] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1602.133748][T12109] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1602.133775][T12109] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1602.135241][T12109] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1602.135297][T12109] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1602.135326][T12109] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1602.135354][T12109] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1602.135383][T12109] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1602.137842][T12109] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1602.137902][T12109] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1602.137932][T12109] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1602.137958][T12109] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1602.137985][T12109] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1602.308536][T12109] usb 4-1: string descriptor 0 read error: -22 [ 1602.308739][T12109] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1602.308766][T12109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.347195][T12109] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1602.564814][T17969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.565268][T17969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.953899][T15478] usb 4-1: USB disconnect, device number 14 [ 1603.581073][ T6688] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1603.799536][ T6688] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.799566][ T6688] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1603.799606][ T6688] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1603.799632][ T6688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.815625][ T6688] usb 1-1: config 0 descriptor?? [ 1604.041959][T18004] netlink: 'syz.0.3216': attribute type 10 has an invalid length. [ 1604.042009][T18004] team0: Cannot enslave team device to itself [ 1604.044189][ T6688] usb 1-1: USB disconnect, device number 25 [ 1605.121576][T18043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1606.521058][T12109] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1606.735196][T12109] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.735225][T12109] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1606.735267][T12109] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1606.735318][T12109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.802947][T12109] usb 4-1: config 0 descriptor?? [ 1607.008408][T18067] netlink: 'syz.3.3243': attribute type 10 has an invalid length. [ 1607.008443][T18067] team0: Cannot enslave team device to itself [ 1607.014565][ T8336] usb 4-1: USB disconnect, device number 15 [ 1608.091030][T12109] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1608.273925][T12109] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1608.273991][T12109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.276547][T12109] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1608.276578][T12109] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1608.276602][T12109] usb 4-1: Manufacturer: syz [ 1608.350839][T12109] usb 4-1: config 0 descriptor?? [ 1608.560564][T12109] rc_core: IR keymap rc-hauppauge not found [ 1608.560588][T12109] Registered IR keymap rc-empty [ 1608.576245][T12109] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1608.579500][T12109] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 1608.655492][T12109] usb 4-1: USB disconnect, device number 16 [ 1610.057388][T18145] loop6: detected capacity change from 0 to 524287999 [ 1610.188583][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'. [ 1610.191817][T18145] netlink: zone id is out of range [ 1610.191832][T18145] netlink: zone id is out of range [ 1610.191842][T18145] netlink: zone id is out of range [ 1610.191851][T18145] netlink: zone id is out of range [ 1610.191860][T18145] netlink: zone id is out of range [ 1610.191870][T18145] netlink: zone id is out of range [ 1610.771043][T12109] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1610.921049][T12109] usb 1-1: Using ep0 maxpacket: 32 [ 1610.923554][T12109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.923618][T12109] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1610.923649][T12109] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1610.927996][T12109] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1610.928028][T12109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.928051][T12109] usb 1-1: Product: syz [ 1610.928067][T12109] usb 1-1: Manufacturer: syz [ 1610.928084][T12109] usb 1-1: SerialNumber: syz [ 1611.011266][T12109] usb 1-1: config 0 descriptor?? [ 1611.013848][T12109] gs_usb 1-1:0.0: Required endpoints not found [ 1611.321342][T12109] usb 1-1: USB disconnect, device number 26 [ 1613.102938][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.103018][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.152666][T18193] pim6reg: entered allmulticast mode [ 1613.331464][ T8336] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1613.941066][ T8336] usb 4-1: Using ep0 maxpacket: 32 [ 1613.943808][ T8336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.943868][ T8336] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1613.943899][ T8336] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1613.947023][ T8336] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1613.947055][ T8336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.947077][ T8336] usb 4-1: Product: syz [ 1613.947094][ T8336] usb 4-1: Manufacturer: syz [ 1613.947110][ T8336] usb 4-1: SerialNumber: syz [ 1614.019058][ T8336] usb 4-1: config 0 descriptor?? [ 1614.035805][ T8336] gs_usb 4-1:0.0: Required endpoints not found [ 1614.273062][ T8336] usb 4-1: USB disconnect, device number 17 [ 1615.257676][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'. [ 1615.449716][T18246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1615.461072][T18246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1615.461518][T18246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1617.133351][ C0] vkms_vblank_simulate: vblank timer overrun [ 1617.297421][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.034322][T18310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1618.053906][T18310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1618.510735][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3350'. [ 1618.510761][T18324] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3350'. [ 1618.510781][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3350'. [ 1618.510828][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3350'. [ 1618.751013][T15478] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1618.824268][T18334] netlink: 'syz.7.3355': attribute type 1 has an invalid length. [ 1618.859091][T18334] bond2: entered promiscuous mode [ 1618.859511][T18334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1618.915494][T15478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.915613][T15478] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1618.915672][T15478] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1618.915698][T15478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.978963][T15478] usb 2-1: config 0 descriptor?? [ 1618.999219][T15478] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1618.999276][T15478] dvb-usb: bulk message failed: -22 (3/0) [ 1619.016582][T15478] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1619.017530][T15478] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1619.017591][T15478] usb 2-1: media controller created [ 1619.020102][T15478] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1619.066705][T15478] dvb-usb: bulk message failed: -22 (6/0) [ 1619.066791][T15478] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1619.091101][T15478] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 1619.093643][T15478] dvb-usb: schedule remote query interval to 150 msecs. [ 1619.093667][T15478] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1619.243609][T18326] netlink: 'syz.1.3351': attribute type 10 has an invalid length. [ 1619.243655][T18326] team0: Cannot enslave team device to itself [ 1619.250009][T12536] usb 2-1: USB disconnect, device number 17 [ 1619.251038][T15478] dvb-usb: bulk message failed: -22 (1/0) [ 1619.251085][T15478] dvb-usb: error while querying for an remote control event. [ 1619.446458][T12536] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1619.692034][T18351] tipc: Started in network mode [ 1619.692054][T18351] tipc: Node identity , cluster identity 4711 [ 1619.692072][T18351] tipc: Failed to obtain node identity [ 1619.692099][T18351] tipc: Enabling of bearer rejected, failed to enable media [ 1620.271129][T12536] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1620.431061][T12536] usb 2-1: Using ep0 maxpacket: 32 [ 1620.433247][T12536] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1620.433272][T12536] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1620.435388][T12536] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1620.435409][T12536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.435424][T12536] usb 2-1: Product: syz [ 1620.435436][T12536] usb 2-1: Manufacturer: syz [ 1620.435447][T12536] usb 2-1: SerialNumber: syz [ 1620.443904][T12536] usb 2-1: config 0 descriptor?? [ 1620.455524][T12536] gs_usb 2-1:0.0: Required endpoints not found [ 1620.703295][ T8336] usb 2-1: USB disconnect, device number 18 [ 1620.838111][T18379] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1620.838207][T18379] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1620.839200][T18379] vhci_hcd vhci_hcd.0: Device attached [ 1620.959181][T18381] vhci_hcd: connection closed [ 1620.960365][ T767] vhci_hcd: stop threads [ 1620.960381][ T767] vhci_hcd: release socket [ 1620.960415][ T767] vhci_hcd: disconnect device [ 1621.525470][T15478] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1621.676273][T15478] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.676302][T15478] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1621.676356][T15478] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1621.676382][T15478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.726544][T15478] usb 1-1: config 0 descriptor?? [ 1621.738118][T18394] netlink: 'syz.7.3379': attribute type 1 has an invalid length. [ 1621.769224][T15478] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1621.769281][T15478] dvb-usb: bulk message failed: -22 (3/0) [ 1621.809635][T15478] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1621.819853][T15478] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1621.819897][T15478] usb 1-1: media controller created [ 1621.840478][T15478] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.898019][T15478] dvb-usb: bulk message failed: -22 (6/0) [ 1621.898104][T15478] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1621.919802][T18394] bond3: entered promiscuous mode [ 1621.930250][T15478] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 1621.943801][T18394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1621.950639][T15478] dvb-usb: schedule remote query interval to 150 msecs. [ 1621.950664][T15478] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1622.063458][T18388] netlink: 'syz.0.3376': attribute type 10 has an invalid length. [ 1622.069156][T18388] team0: Cannot enslave team device to itself [ 1622.073319][T12536] usb 1-1: USB disconnect, device number 27 [ 1622.243591][T12536] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1623.159714][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.328819][T18420] __nla_validate_parse: 1 callbacks suppressed [ 1623.328870][T18420] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1624.151591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.258041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.887339][T18448] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1624.906788][T18448] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1626.541825][T18467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1626.898418][T18483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3416'. [ 1626.899551][T18483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3416'. [ 1627.161262][T18487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2107136741 (134856751424 ns) > initial count (31747348608 ns). Using initial count to start timer. [ 1628.506451][T18505] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3425'. [ 1628.512997][T18505] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3425'. [ 1628.513838][T18505] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3425'. [ 1628.863874][T18513] syzkaller0: entered promiscuous mode [ 1628.863903][T18513] syzkaller0: entered allmulticast mode [ 1629.181156][ T6688] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1629.336664][ T6688] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.336695][ T6688] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1629.336755][ T6688] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1629.336780][ T6688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.385738][ T6688] usb 2-1: config 0 descriptor?? [ 1629.622281][T18517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.622765][T18517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.623620][T18517] netlink: 'syz.1.3430': attribute type 10 has an invalid length. [ 1629.623658][T18517] team0: Cannot enslave team device to itself [ 1629.628745][ T8336] usb 2-1: USB disconnect, device number 19 [ 1634.707039][T18616] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3469'. [ 1635.154188][T18622] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1640.261359][ T8334] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1640.421189][ T8334] usb 4-1: Using ep0 maxpacket: 32 [ 1640.425398][ T8334] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1640.425432][ T8334] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1640.429452][ T8334] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1640.429485][ T8334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.429507][ T8334] usb 4-1: Product: syz [ 1640.429523][ T8334] usb 4-1: Manufacturer: syz [ 1640.429539][ T8334] usb 4-1: SerialNumber: syz [ 1640.493052][ T8334] usb 4-1: config 0 descriptor?? [ 1640.512873][ T8334] gs_usb 4-1:0.0: Required endpoints not found [ 1640.739332][T12536] usb 4-1: USB disconnect, device number 18 [ 1644.142083][T12109] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1644.381165][T12109] usb 2-1: Using ep0 maxpacket: 32 [ 1644.512207][T12109] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 1644.512247][T12109] usb 2-1: config 2 has an invalid descriptor of length 56, skipping remainder of the config [ 1644.512269][T12109] usb 2-1: config 2 has no interface number 0 [ 1644.512305][T12109] usb 2-1: too many endpoints for config 2 interface 88 altsetting 129: 109, using maximum allowed: 30 [ 1644.512355][T12109] usb 2-1: config 2 interface 88 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 1644.512384][T12109] usb 2-1: config 2 interface 88 has no altsetting 0 [ 1644.515540][T12109] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1644.515571][T12109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.515593][T12109] usb 2-1: Product: syz [ 1644.515608][T12109] usb 2-1: Manufacturer: syz [ 1644.515624][T12109] usb 2-1: SerialNumber: syz [ 1645.389910][T12109] asix 2-1:2.88: probe with driver asix failed with error -22 [ 1645.404695][T12109] usb 2-1: USB disconnect, device number 20 [ 1645.893662][T18844] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3564'. [ 1646.920444][T18847] kvm: vcpu 0: requested 2048 ns lapic timer period limited to 200000 ns [ 1646.920475][T18847] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1648.154175][T18895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3590'. [ 1648.156137][T18895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3590'. [ 1648.156958][T18895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3590'. [ 1648.212840][T12536] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1648.374060][T12536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.374090][T12536] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1648.374147][T12536] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1648.374172][T12536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.422355][T12536] usb 1-1: config 0 descriptor?? [ 1648.439349][T12536] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1648.439404][T12536] dvb-usb: bulk message failed: -22 (3/0) [ 1648.466288][T12536] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1648.467262][T12536] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1648.467319][T12536] usb 1-1: media controller created [ 1648.469824][T12536] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1648.515228][T12536] dvb-usb: bulk message failed: -22 (6/0) [ 1648.515321][T12536] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1648.519602][T12536] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 1648.554081][T12536] dvb-usb: schedule remote query interval to 150 msecs. [ 1648.554106][T12536] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1648.643116][T18885] netlink: 'syz.0.3584': attribute type 10 has an invalid length. [ 1648.643158][T18885] team0: Cannot enslave team device to itself [ 1648.645640][T18885] dibusb: i2c wr: len=8192 is too big! [ 1648.645640][T18885] [ 1648.647660][T12109] usb 1-1: USB disconnect, device number 28 [ 1648.810388][T12109] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1649.751811][T18931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3606'. [ 1650.640651][T18967] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3622'. [ 1651.433067][T19000] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3634'. [ 1651.450988][T12536] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1651.636164][T12536] usb 2-1: config index 0 descriptor too short (expected 126, got 72) [ 1651.650296][T12536] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1651.650330][T12536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.650352][T12536] usb 2-1: Product: syz [ 1651.650367][T12536] usb 2-1: Manufacturer: syz [ 1651.650383][T12536] usb 2-1: SerialNumber: syz [ 1651.725219][T12536] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1651.893720][ T8328] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1652.015271][T19015] binder: BINDER_SET_CONTEXT_MGR already set [ 1652.015288][T19015] binder: 19014:19015 ioctl 4018620d 200000000040 returned -16 [ 1653.193589][T18992] netlink: 'syz.1.3632': attribute type 10 has an invalid length. [ 1653.220976][T12109] usb 2-1: USB disconnect, device number 21 [ 1653.348534][ T8328] usb 2-1: Service connection timeout for: 257 [ 1653.348561][ T8328] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1653.392736][ T8328] ath9k_htc: Failed to initialize the device [ 1653.395870][T12109] usb 2-1: ath9k_htc: USB layer deinitialized [ 1654.259218][T19073] netlink: 'syz.0.3664': attribute type 7 has an invalid length. [ 1654.259245][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1654.259640][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1654.316359][T19073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1656.451096][T12109] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1656.627782][T12109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.627811][T12109] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1656.627865][T12109] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1656.627889][T12109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.654436][T12109] usb 1-1: config 0 descriptor?? [ 1656.670176][T12109] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1656.670250][T12109] dvb-usb: bulk message failed: -22 (3/0) [ 1656.702525][T12109] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1656.718295][T12109] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1656.718368][T12109] usb 1-1: media controller created [ 1656.737376][T12109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1656.790470][T12109] dvb-usb: bulk message failed: -22 (6/0) [ 1656.790560][T12109] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1656.819215][T12109] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 1656.853545][T12109] dvb-usb: schedule remote query interval to 150 msecs. [ 1656.853571][T12109] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1656.902949][T19106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.903428][T19106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.910389][T19106] netlink: 'syz.0.3679': attribute type 10 has an invalid length. [ 1656.910433][T19106] team0: Cannot enslave team device to itself [ 1656.918871][T19106] dibusb: i2c wr: len=8192 is too big! [ 1656.918871][T19106] [ 1656.921848][T12109] usb 1-1: USB disconnect, device number 29 [ 1657.059282][T12109] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1658.037613][T19153] binder: BINDER_SET_CONTEXT_MGR already set [ 1658.037632][T19153] binder: 19149:19153 ioctl 4018620d 200000000040 returned -16 [ 1658.401812][T19163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1659.006677][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1659.007475][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1659.008074][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1659.170986][ T8334] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1659.347688][ T8334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.347720][ T8334] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1659.347777][ T8334] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1659.347796][ T8334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.408193][ T8334] usb 2-1: config 0 descriptor?? [ 1659.433675][ T8334] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1659.433712][ T8334] dvb-usb: bulk message failed: -22 (3/0) [ 1659.454108][ T8334] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1659.454829][ T8334] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1659.454885][ T8334] usb 2-1: media controller created [ 1659.456612][ T8334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1659.548641][ T8334] dvb-usb: bulk message failed: -22 (6/0) [ 1659.548704][ T8334] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1659.575726][ T8334] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 1659.621300][ T8334] dvb-usb: schedule remote query interval to 150 msecs. [ 1659.621325][ T8334] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1659.791313][ T8334] dvb-usb: bulk message failed: -22 (1/0) [ 1659.791368][ T8334] dvb-usb: error while querying for an remote control event. [ 1659.793658][T19179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.794113][T19179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.794924][T19179] netlink: 'syz.1.3710': attribute type 10 has an invalid length. [ 1659.794962][T19179] team0: Cannot enslave team device to itself [ 1659.796311][T19179] dibusb: i2c wr: len=8192 is too big! [ 1659.796311][T19179] [ 1659.806392][ T8328] usb 2-1: USB disconnect, device number 22 [ 1660.088430][ T8328] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1661.192379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.550967][T12109] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1661.714993][T12109] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1661.715028][T12109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.715051][T12109] usb 4-1: Product: syz [ 1661.715066][T12109] usb 4-1: Manufacturer: syz [ 1661.715081][T12109] usb 4-1: SerialNumber: syz [ 1661.951174][ T8334] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1662.237529][ T8334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.237557][ T8334] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1662.237810][ T8334] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1662.237830][ T8334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.286853][ T8334] usb 2-1: config 0 descriptor?? [ 1662.302960][ T8334] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1662.303087][ T8334] dvb-usb: bulk message failed: -22 (3/0) [ 1662.332756][T12109] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1662.332823][T12109] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1662.336710][ T8334] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1662.338376][ T8334] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1662.338433][ T8334] usb 2-1: media controller created [ 1662.397820][ T8334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1662.429748][ T8334] dvb-usb: bulk message failed: -22 (6/0) [ 1662.429906][ T8334] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1662.458889][ T8334] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 1662.484441][ T8334] dvb-usb: schedule remote query interval to 150 msecs. [ 1662.484470][ T8334] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1662.529393][T19254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.529813][T19254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.547483][T19254] netlink: 'syz.1.3746': attribute type 10 has an invalid length. [ 1662.548074][T19254] team0: Cannot enslave team device to itself [ 1662.553878][T19254] dibusb: i2c wr: len=8192 is too big! [ 1662.553878][T19254] [ 1662.563072][ T8338] usb 2-1: USB disconnect, device number 23 [ 1662.723361][ T8338] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1663.152881][T12109] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1663.152942][T12109] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1663.153769][T12109] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1663.397230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1663.414146][T12109] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1664.632145][ T9] usb 4-1: USB disconnect, device number 19 [ 1664.751101][T12109] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1664.920547][T12109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.920578][T12109] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1664.920636][T12109] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1664.920661][T12109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.971254][T12109] usb 1-1: config 0 descriptor?? [ 1664.988712][T12109] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1664.988761][T12109] dvb-usb: bulk message failed: -22 (3/0) [ 1665.028491][T19331] misc userio: The device must be registered before sending interrupts [ 1665.060512][T12109] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1665.071383][T12109] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1665.071446][T12109] usb 1-1: media controller created [ 1665.074076][T12109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1665.126707][T12109] dvb-usb: bulk message failed: -22 (6/0) [ 1665.126792][T12109] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1665.147135][T12109] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 1665.170703][T12109] dvb-usb: schedule remote query interval to 150 msecs. [ 1665.170729][T12109] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1665.224273][T19319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.224582][T19319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.235109][T19319] netlink: 'syz.0.3775': attribute type 10 has an invalid length. [ 1665.235160][T19319] team0: Cannot enslave team device to itself [ 1665.238932][T19319] dibusb: i2c wr: len=8192 is too big! [ 1665.238932][T19319] [ 1665.248226][ T8338] usb 1-1: USB disconnect, device number 30 [ 1665.352987][ T8338] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1665.598109][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3788'. [ 1667.751032][ T8338] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1667.954026][ T8338] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1667.954050][ T8338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.954065][ T8338] usb 1-1: Product: syz [ 1667.954076][ T8338] usb 1-1: Manufacturer: syz [ 1667.954086][ T8338] usb 1-1: SerialNumber: syz [ 1668.556453][ T8338] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1668.556500][ T8338] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1668.867231][T19411] input: syz0 as /devices/virtual/input/input37 [ 1669.509055][ T8338] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1669.509117][ T8338] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1669.539926][ T8338] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1669.574879][ T8338] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1671.014083][T10857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1671.033928][ T9] usb 1-1: USB disconnect, device number 31 [ 1671.039037][T10857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1671.041194][T10857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1671.045790][T10857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1671.049774][T10857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1672.211157][ T8336] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1672.471070][ T8336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.471098][ T8336] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1672.471153][ T8336] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1672.471179][ T8336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.472362][ T767] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.571369][ T8336] usb 1-1: config 0 descriptor?? [ 1672.619678][ T8336] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1672.619732][ T8336] dvb-usb: bulk message failed: -22 (3/0) [ 1672.646396][ T8336] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1672.657599][ T8336] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1672.657673][ T8336] usb 1-1: media controller created [ 1672.660607][ T8336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1672.791738][ T8336] dvb-usb: bulk message failed: -22 (6/0) [ 1672.791828][ T8336] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1672.805744][ T8336] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 1672.866475][ T8336] dvb-usb: schedule remote query interval to 150 msecs. [ 1672.866494][ T8336] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1672.883682][T19450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.884148][T19450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.898918][T19450] netlink: 'syz.0.3828': attribute type 10 has an invalid length. [ 1672.900639][T19450] team0: Cannot enslave team device to itself [ 1672.904106][T19450] dibusb: i2c wr: len=8192 is too big! [ 1672.904106][T19450] [ 1672.907929][ T8336] usb 1-1: USB disconnect, device number 32 [ 1673.172415][ T8336] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1673.181023][T14517] Bluetooth: hci2: command tx timeout [ 1673.587345][ T767] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.091073][T15478] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1674.118521][ T767] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.248460][T15478] usb 1-1: config index 0 descriptor too short (expected 126, got 72) [ 1674.255295][T15478] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1674.255327][T15478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.255350][T15478] usb 1-1: Product: syz [ 1674.255366][T15478] usb 1-1: Manufacturer: syz [ 1674.255383][T15478] usb 1-1: SerialNumber: syz [ 1674.325830][T15478] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1674.345599][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1674.476346][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.476443][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.565997][ T767] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.687909][T19480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1675.261220][T14517] Bluetooth: hci2: command tx timeout [ 1675.865123][T19428] chnl_net:caif_netlink_parms(): no params data found [ 1675.895963][ T9] usb 1-1: Service connection timeout for: 257 [ 1675.895996][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1676.072716][ T9] ath9k_htc: Failed to initialize the device [ 1676.263342][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 1676.286340][ T767] bridge_slave_1: left allmulticast mode [ 1676.286364][ T767] bridge_slave_1: left promiscuous mode [ 1676.286554][ T767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.289307][ T8336] usb 1-1: USB disconnect, device number 33 [ 1676.364131][ T767] bridge_slave_0: left allmulticast mode [ 1676.364156][ T767] bridge_slave_0: left promiscuous mode [ 1676.364372][ T767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.358133][ T8334] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1677.536267][T14517] Bluetooth: hci2: command tx timeout [ 1677.641135][ T8336] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1677.723546][ T8334] usb 2-1: config index 0 descriptor too short (expected 126, got 72) [ 1677.726669][ T8334] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1677.726700][ T8334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.726725][ T8334] usb 2-1: Product: syz [ 1677.726741][ T8334] usb 2-1: Manufacturer: syz [ 1677.726757][ T8334] usb 2-1: SerialNumber: syz [ 1677.738357][ T8334] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1677.793866][ T8336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.793896][ T8336] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1677.793952][ T8336] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1677.793978][ T8336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.806852][T15478] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1677.850718][ T8336] usb 4-1: config 0 descriptor?? [ 1677.866700][ T8336] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1677.866752][ T8336] dvb-usb: bulk message failed: -22 (3/0) [ 1677.892044][ T8336] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1677.898967][ T8336] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1677.899033][ T8336] usb 4-1: media controller created [ 1677.924136][ T8336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1677.946281][ T8336] dvb-usb: bulk message failed: -22 (6/0) [ 1677.946372][ T8336] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1677.979297][ T8336] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 1678.014717][ T8336] dvb-usb: schedule remote query interval to 150 msecs. [ 1678.014740][ T8336] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1678.092869][T19494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1678.093675][T19494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.133327][T19494] netlink: 'syz.3.3841': attribute type 10 has an invalid length. [ 1678.171053][ T8336] dvb-usb: bulk message failed: -22 (1/0) [ 1678.171090][ T8336] dvb-usb: error while querying for an remote control event. [ 1678.305768][T19503] dibusb: i2c wr: len=8192 is too big! [ 1678.305768][T19503] [ 1678.331148][T12536] dvb-usb: bulk message failed: -22 (1/0) [ 1678.331186][T12536] dvb-usb: error while querying for an remote control event. [ 1678.491067][T12536] dvb-usb: bulk message failed: -22 (1/0) [ 1678.491106][T12536] dvb-usb: error while querying for an remote control event. [ 1678.669033][T12536] dvb-usb: bulk message failed: -22 (1/0) [ 1678.669073][T12536] dvb-usb: error while querying for an remote control event. [ 1678.825430][ T8336] dvb-usb: bulk message failed: -22 (1/0) [ 1678.825471][ T8336] dvb-usb: error while querying for an remote control event. [ 1678.981069][ T8336] dvb-usb: bulk message failed: -22 (1/0) [ 1678.981108][ T8336] dvb-usb: error while querying for an remote control event. [ 1679.866923][T15478] usb 2-1: Service connection timeout for: 257 [ 1679.866942][T15478] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1679.891987][T14517] Bluetooth: hci2: command tx timeout [ 1679.925281][T12109] usb 2-1: USB disconnect, device number 24 [ 1679.931806][ T8336] dvb-usb: bulk message failed: -22 (1/0) [ 1679.931845][ T8336] dvb-usb: error while querying for an remote control event. [ 1679.961051][T15478] ath9k_htc: Failed to initialize the device [ 1679.962892][T12109] usb 2-1: ath9k_htc: USB layer deinitialized [ 1680.091026][ T8336] dvb-usb: bulk message failed: -22 (1/0) [ 1680.091066][ T8336] dvb-usb: error while querying for an remote control event. [ 1680.257469][ T8328] dvb-usb: bulk message failed: -22 (1/0) [ 1680.257506][ T8328] dvb-usb: error while querying for an remote control event. [ 1680.444009][ T8328] dvb-usb: bulk message failed: -22 (1/0) [ 1680.444040][ T8328] dvb-usb: error while querying for an remote control event. [ 1680.464862][T19487] ------------[ cut here ]------------ [ 1680.464885][T19487] WARNING: CPU: 1 PID: 19487 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 1680.464936][T19487] Modules linked in: [ 1680.464960][T19487] CPU: 1 UID: 0 PID: 19487 Comm: syz.1.3839 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1680.464986][T19487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1680.465000][T19487] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1680.465032][T19487] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 1680.465053][T19487] RSP: 0018:ffffc90004f7fd00 EFLAGS: 00010287 [ 1680.465073][T19487] RAX: 3a56743450ac3100 RBX: ffff8880286aa200 RCX: 0000000000000000 [ 1680.465091][T19487] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1680.465106][T19487] RBP: ffffc90004f7fe68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 1680.465123][T19487] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff1100417ed3d [ 1680.465140][T19487] R13: 0000000000000000 R14: ffff8880286aa208 R15: ffff88805f463c00 [ 1680.465156][T19487] FS: 000055558e8a9500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 1680.465176][T19487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1680.465192][T19487] CR2: 0000200000187030 CR3: 000000002fd34000 CR4: 00000000003526f0 [ 1680.465212][T19487] Call Trace: [ 1680.465222][T19487] [ 1680.465237][T19487] do_exit+0x105/0x2300 [ 1680.465281][T19487] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1680.465315][T19487] ? __pfx_do_exit+0x10/0x10 [ 1680.465349][T19487] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1680.465386][T19487] ? rt_spin_unlock+0x161/0x200 [ 1680.465418][T19487] do_group_exit+0x21c/0x2d0 [ 1680.465446][T19487] __x64_sys_exit_group+0x3f/0x40 [ 1680.465467][T19487] x64_sys_call+0x21f7/0x2200 [ 1680.465492][T19487] do_syscall_64+0xfa/0xfa0 [ 1680.465526][T19487] ? lockdep_hardirqs_on+0x9c/0x150 [ 1680.465559][T19487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.465583][T19487] ? clear_bhb_loop+0x60/0xb0 [ 1680.465612][T19487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.465635][T19487] RIP: 0033:0x7fa1c81ef749 [ 1680.465654][T19487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1680.465674][T19487] RSP: 002b:00007fff73d4b018 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1680.465696][T19487] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1c81ef749 [ 1680.465712][T19487] RDX: 00007fa1c7459000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1680.465727][T19487] RBP: 00007fff73d4b07c R08: 0000000000007334 R09: 000055558e8bc590 [ 1680.465743][T19487] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000ef [ 1680.465758][T19487] R13: 000055558e8bc590 R14: 0000000000198743 R15: 00007fff73d4b0d0 [ 1680.465803][T19487] [ 1680.465820][T19487] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1680.465836][T19487] CPU: 1 UID: 0 PID: 19487 Comm: syz.1.3839 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1680.465861][T19487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1680.465875][T19487] Call Trace: [ 1680.465885][T19487] [ 1680.465894][T19487] dump_stack_lvl+0x99/0x250 [ 1680.465929][T19487] ? __asan_memcpy+0x40/0x70 [ 1680.465957][T19487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1680.465992][T19487] ? __pfx__printk+0x10/0x10 [ 1680.466035][T19487] vpanic+0x237/0x6d0 [ 1680.466058][T19487] ? __pfx_vpanic+0x10/0x10 [ 1680.466092][T19487] panic+0xb9/0xc0 [ 1680.466114][T19487] ? __pfx_panic+0x10/0x10 [ 1680.466154][T19487] __warn+0x31b/0x4b0 [ 1680.466174][T19487] ? kcov_task_exit+0x13c/0x150 [ 1680.466207][T19487] ? kcov_task_exit+0x13c/0x150 [ 1680.466238][T19487] report_bug+0x2be/0x4f0 [ 1680.466270][T19487] ? kcov_task_exit+0x13c/0x150 [ 1680.466299][T19487] ? kcov_task_exit+0x13c/0x150 [ 1680.466331][T19487] ? kcov_task_exit+0x13e/0x150 [ 1680.466361][T19487] handle_bug+0x84/0x160 [ 1680.466385][T19487] exc_invalid_op+0x1a/0x50 [ 1680.466408][T19487] asm_exc_invalid_op+0x1a/0x20 [ 1680.466430][T19487] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1680.466460][T19487] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 1680.466479][T19487] RSP: 0018:ffffc90004f7fd00 EFLAGS: 00010287 [ 1680.466498][T19487] RAX: 3a56743450ac3100 RBX: ffff8880286aa200 RCX: 0000000000000000 [ 1680.466516][T19487] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1680.466532][T19487] RBP: ffffc90004f7fe68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 1680.466549][T19487] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff1100417ed3d [ 1680.466567][T19487] R13: 0000000000000000 R14: ffff8880286aa208 R15: ffff88805f463c00 [ 1680.466591][T19487] ? rt_spin_lock+0x1c1/0x3e0 [ 1680.466629][T19487] do_exit+0x105/0x2300 [ 1680.466672][T19487] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1680.466703][T19487] ? __pfx_do_exit+0x10/0x10 [ 1680.466737][T19487] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1680.466774][T19487] ? rt_spin_unlock+0x161/0x200 [ 1680.466811][T19487] do_group_exit+0x21c/0x2d0 [ 1680.466839][T19487] __x64_sys_exit_group+0x3f/0x40 [ 1680.466861][T19487] x64_sys_call+0x21f7/0x2200 [ 1680.466884][T19487] do_syscall_64+0xfa/0xfa0 [ 1680.466916][T19487] ? lockdep_hardirqs_on+0x9c/0x150 [ 1680.466949][T19487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.466972][T19487] ? clear_bhb_loop+0x60/0xb0 [ 1680.467000][T19487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.467022][T19487] RIP: 0033:0x7fa1c81ef749 [ 1680.467041][T19487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1680.467060][T19487] RSP: 002b:00007fff73d4b018 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1680.467082][T19487] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1c81ef749 [ 1680.467098][T19487] RDX: 00007fa1c7459000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1680.467113][T19487] RBP: 00007fff73d4b07c R08: 0000000000007334 R09: 000055558e8bc590 [ 1680.467130][T19487] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000ef [ 1680.467144][T19487] R13: 000055558e8bc590 R14: 0000000000198743 R15: 00007fff73d4b0d0 [ 1680.467182][T19487] [ 1680.467536][T19487] Kernel Offset: disabled