last executing test programs: 11m49.499812771s ago: executing program 0 (id=950): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6da89503aca47b7cfa74566cb073697a653d307830303030"]) chdir(&(0x7f0000000040)='./file0\x00') syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x7, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x22, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3a385984266330df}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x3c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x4a8e) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a80)) read$FUSE(r4, &(0x7f0000001ac0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000003b00)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000003c00)=0xe4) r7 = getgid() write$FUSE_CREATE_OPEN(r3, &(0x7f0000003c40)={0xa0, 0x0, r5, {{0x1, 0x2, 0x2d, 0x6, 0x2, 0x8, {0x6, 0x8, 0x1, 0xc8, 0x1544, 0xa113, 0x200ad, 0x8, 0x4, 0x6000, 0x8000, r6, r7, 0x80000000, 0xffffffff}}}}, 0xa0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000000200000000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "75a3d0", 0x10, 0x11, 0xfd, @empty, @mcast2, {[], {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}}}, 0x4a) r10 = syz_io_uring_complete(0x0, 0x0) bind(r10, &(0x7f0000000280)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80) 11m49.259788403s ago: executing program 0 (id=952): bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000240)=""/234, 0xea, 0x0, &(0x7f0000000340)=""/165, 0xa5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8910, &(0x7f0000000580)={'bond0\x00', 0x10001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x8, 0xe, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/14, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff87) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, &(0x7f00000003c0), 0x0}, 0x40) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x5) setreuid(0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x1, 0xffffffffffffd2a1, 0x5, 0x3, 0x2, {0x0, 0x800000000000002, 0x20ff, 0x10000001, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf0b}}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 11m46.505021832s ago: executing program 0 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0xfc, 0x7fff0026}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11m46.367449155s ago: executing program 0 (id=961): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x67, 0x1, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x6}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x67, 0x1, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x6}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000100)) openat$autofs(0xffffff9c, &(0x7f0000000180), 0x14000, 0x0) (async) r1 = openat$autofs(0xffffff9c, &(0x7f0000000180), 0x14000, 0x0) syz_open_dev$rtc(&(0x7f0000000300), 0x4, 0x100) (async) r2 = syz_open_dev$rtc(&(0x7f0000000300), 0x4, 0x100) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0/file1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc8fd6623a0163fb1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) openat$rtc(0xffffff9c, &(0x7f00000004c0), 0x121202, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file0/file1'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file0/file1'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') (async) unlink(&(0x7f0000000100)='./file0/file1\x00') 11m46.094108879s ago: executing program 0 (id=962): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0402030c"], 0x7) r1 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x200000d4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x2d9, 0x4, 0x3ff, 0x7}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x2, 0xfffffffe, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x4, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x1, 0xc3, 0x7f, 0x1, 0x0, 0x4, 0xfff, 0x8, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x3, 0x100000000, 0xee8000000000000, 0x0, 0x5, 0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x3, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0xffffffffffffffff, 0x100000001, 0x0, 0x0, 0x52d4, 0x0, 0x0, 0x401, 0xb4f, 0xffffffff, 0xfffffffffffffffd, 0x4, 0x1, 0x0, 0x20000000000, 0xd87, 0x0, 0x44, 0x0, 0xfffffffffffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x800000000002, 0x5f9cd92, 0x8000200, 0x6, 0x5, 0xd, 0x0, 0x0, 0xbb, 0x6, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x4, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x556a766c, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) getrandom(&(0x7f0000001080)=""/4096, 0x1000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11m45.820298392s ago: executing program 0 (id=964): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000180)="270502001600140006000b2fb96d", 0xe}, {&(0x7f0000000700)="83ea8b7f91f3000088a800000000000000b7f77d74000000", 0x18}], 0x2}, 0x24080080) 11m45.715847408s ago: executing program 32 (id=964): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000180)="270502001600140006000b2fb96d", 0xe}, {&(0x7f0000000700)="83ea8b7f91f3000088a800000000000000b7f77d74000000", 0x18}], 0x2}, 0x24080080) 5m8.759153671s ago: executing program 2 (id=2713): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xd1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305005b68fdce0afc5924000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5m8.393675897s ago: executing program 2 (id=2716): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x20002}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x98f900}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1e9]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\b', @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="0c00990007000000110000000400870004008700"], 0x30}, 0x1, 0x0, 0x0, 0x4010815}, 0x20008010) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94) 5m8.250572379s ago: executing program 2 (id=2717): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_open_dev$ndb(0x0, 0x0, 0x200) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="b783cf5a59a7e1f0292912e9fbc6a3c9e28d2a2b99f17dffb6b96fe216655abdb4c7ecf9c7edc5748694ffa885f2654f5bb39d0736642625b43fcca5b15f77848e02a87ab94d1c7665e62183ee89341ce18cdb72e040cb7534ddf65b8892774ac80ec5e22de18c4105ac9b41f85962291a23de5ced2b2275e707bb78aeb19b3e363e20f716cdb61a5370036b57924e08a493f239f185ee03bfd3d1bcd60d7bb4db59c4ec816a39980141ecb37e15dc0c6f91f7024a4fef1dc09eaca5e9eda417e85fcd0968", @ANYBLOB="0000000000000000b7050000080000003d7ffe1dcae53e7100000000ffffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000f04000000080008000000000314040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc044) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000000)="d197310ad35fdd85fd7a802ec13c7ca01c03c513a3c1", 0x16, 0x1, &(0x7f0000000080)={0x11, 0x17, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000740)=""/93, 0x5d}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/87, 0x57}, {&(0x7f0000000880)=""/40, 0x28}, {&(0x7f00000008c0)=""/17, 0x11}, {&(0x7f0000000900)=""/40, 0x28}, {&(0x7f0000000a40)=""/150, 0x96}], 0x8, 0x0, 0x7ffb) socket(0x28, 0x6, 0x100000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r5}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 5m5.934802726s ago: executing program 2 (id=2724): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)='fdb\xc9Z_L\xc7H95\x1b~\xa1\xd9^\'\xa5D|P\x03\xf5\x05<\xaf:V\x97\x8c\xc9\xe8\v\x8c\x94qL\x9cR\xa2\xa5EL\x0f\x1f8\x14Y\x7f\xb0\x8b\x9b\xc9^\xfdC?\xbc?\xbc{H>P\x00\x83\xdd\x05\x9dT\xcf|\xed\xa5\x19\x11\xcf\x12\x1d\xf6@\x148\x19\xd4^\xe4\xe2Q\xd6@\xdb\xba\xbc\xa6E\xd7\xce\x13\xc4\xcd@\xe4~#\x0e\xf1C\xee/\x17\xa9\x9d\x1a\x0e\xe6\xeb\xf6\xbefQ`v`l\x05\x8c&\\\xc2\xe2g\xe8\xef\xc7(\xb7NX\x14\xd0\xfa\xeb\xaf\xfea', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x70f, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0xc}]}, 0x24}}, 0x0) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(r5, r5) fchdir(r4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x44, @any, 0xfffc, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x80, 0x0) 5m5.804438731s ago: executing program 2 (id=2726): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c6}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x44094}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r5, @ANYBLOB="10005a800c000380050009"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x15, 0x45, "eb745b1cee6891437c275c9de612415531"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x90) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0], 0x20}}, 0x0) 5m5.641188608s ago: executing program 2 (id=2730): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x30, 0x3, "221bf1", 0xdd, 0x2}]}}}, 0x12) 5m5.537811577s ago: executing program 33 (id=2730): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x30, 0x3, "221bf1", 0xdd, 0x2}]}}}, 0x12) 6.452840462s ago: executing program 3 (id=3589): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 6.360248102s ago: executing program 4 (id=3590): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902"], 0x0) syz_usb_connect$uac3(0x0, 0xce, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x9, 0xe0, 0x2, {0x8, 0xb, 0x0, 0x0, 0x1, 0x1, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0xfffffffb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0xfc}, @as_header={0x17, 0x24, 0x1, 0x7, 0x9, 0x7, 0x1001, 0xc, 0x0, 0x6, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xed, 0x9, 0xe2, "11d747611048"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x8, 0x3, {0xa, 0x25, 0x25, 0x55b, 0xd3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc2, 0x1, 0x9, 0x1}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x0, 0x5, "5ab8f14afdb8ef"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xb, 0x6, 0x2, {0xa, 0x25, 0x25, 0x1, 0x9, 0x4}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x7, 0x0, 0x89, 0x20, 0xb}, 0x16e, &(0x7f0000000200)={0x5, 0xf, 0x16e, 0x5, [@generic={0x8b, 0x10, 0x2, "5bdb00a1d092ed9b39232be2fe6997abc8d3527e32f44316a94ce93229ee426bc4b33bcfc875677127ae5054b3734ab8139aaaea4b9ef251215f571ba777c41aef5b6f2a3cc1a5e935546ea83d08923df01d42f00a22496635efe4e9c30cbc0001ea61d91e8bde2064e430ae46c99382e1fe07c80c206174cb65a06cfc860a887952a42915ef959f"}, @generic={0xc6, 0x10, 0x4, "195e74d159313cc11e03763a8eec27693b027f93c2e67bb24f377314c44e597ffe189872bd04faa0652b9b41be7d11b914c9174b2498fa1d96f149b2c8cbc63567d3ce3a3b11865df40fefae60bc199a1aef868e7f79a21b0b79e5e07d0fd290879d54763e25b9de406def8c2d06a1b57ec4f7eb24f53c8f12964a246afa2c6936d78cd7466f7f0e4b918f77075b48f23542020e90ca308ee262d089846104bd7634ac386d5ef776ca4d18f4553bf7675c3478e183a1f84c84dfd2c7387bdfddc63b67"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0x2, 0xf801}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x5, 0xfffb}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x6, &(0x7f0000000400)=@string={0x6, 0x3, "76d5974a"}}]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 6.152540192s ago: executing program 3 (id=3592): socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) io_pgetevents(0x0, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [], "fafb17c103001c19"}}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10}}, 0x84}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000580)={'NETMAP\x00'}, &(0x7f00000005c0)=0x1e) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) close(r1) openat$fb1(0xffffff9c, &(0x7f0000000200), 0x200, 0x0) 5.381415624s ago: executing program 5 (id=3593): r0 = socket(0x1e, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010080000000fedbdf250f002d00180007800800020007"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) recvmmsg(r0, &(0x7f0000000980), 0x0, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x9, 0x9, 0x0, 0x5, 0x5d9, 0x4, 0xc9, 0x5, 0x82, 0xffffffffffffffff, 0x14, 0x7, 0x76, 0xea, 0x8, 0x3], 0x10000, 0x285f40}) 5.183699903s ago: executing program 3 (id=3595): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000020601040000000100000000000000000d000300686173683a6d61630000000005000500000000000c00078008001200000008000900020073797a32000000000500010007000000050004"], 0x54}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setuid(0xee01) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}, 0xe000}], 0x68000, 0xe000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$audion(0x0, 0x800, 0x200902) r7 = syz_io_uring_setup(0xefe, &(0x7f0000000340)={0x0, 0xc19a, 0x1, 0x0, 0x126, 0x0, r6}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000140)) syz_io_uring_modify_offsets$generic(r8, r9, 0x2c, 0x10000) io_uring_enter(r7, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0xffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 5.06914138s ago: executing program 4 (id=3596): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r8, 0x1) flock(r2, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0x1, 0x2}, 0x1c) recvmmsg$unix(r10, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000007000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000008c0)='syzkaller\x00', 0x348d, 0x66, &(0x7f0000000900)=""/102, 0x81e00, 0xc, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x1, 0xe, 0x101, 0x3ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[0xffffffffffffffff], &(0x7f0000000b80)=[{0x2, 0x5, 0x4, 0xb}, {0x5, 0x3, 0x8, 0x9}, {0x5, 0x4, 0xc, 0xb}], 0x10, 0x7fffffff}, 0x94) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="005dbd7db88b9d57fb739a73b503eacaa300cca2942e6c3ab33ee869fd3e43624b4d1846b348cf6899cf90bffff6585a62a45af32bd0c388b7958e412856c9f3be480685e67f071052f9cf72f5f7e953a4f931acd681b426b40c0310ed9dae0fe7c8aa991db50c7bf4753022877f11389738925ce95ad1c185d3461916d8da51328ad5b4fd3d7b3f881fb8654bcdf786330b35c060c128b93045b43f23e2a72a47f3ad0f5251cd82d72b329168c7493a2d5ee611351675b2c008650bbac44e375baf68d0aaa22b363c22476d30", 0xcd}, {&(0x7f0000000800)="bc4e6c5420e3fea0818c8b807f00000013aae7ca36f3967a7ce15958e60d4d0ca03fdc73e12bfdd08b84bf18594e7c242ee6aa5fb3ed9b00249e0b011a1fdeb2b508fe05ac6b4526598d7fdf1b28b6789ee410fb8040a0187dc4c017db1d9c0adeeff80109d466edc100887221de4ea1e659e8370bd2f9dd78fcf130003c2fbe95f4b570765c6b1b67e875cc22", 0x8d}, {&(0x7f0000000340)="44182252014d1eb70ab958a62e329e471eb7460a91180b2574a83d7f56aa41e845b649fadf9e917e65d80a3e169cda292dbde86d2c75ff740b7c2869e5b3be304074d488f59871788595615c43ff8d3e056962ef920220ae09d10524911db0f497c7", 0x62}, {&(0x7f00000003c0)="24803cf3b765ae0e1f30a38007000000000159", 0x13}, {&(0x7f0000000400)="63b7711ff765ee5069dc2b28ad00bf4c2845aad9c6441a9fc21a79c4e560c07d622124de975dc5fa4878c989f092ef7836a707c3f1e5c20c967a49c9c877bae47617bee094b3491f446efc5a789fa3eb4e2db544fdf688ff88fab7435d6d123bcb40743c4a88984a21529fac65f33be7169b", 0x72}], 0x5}}], 0x1, 0x4000801) flock(r1, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 4.558206701s ago: executing program 5 (id=3597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80410000}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x7f, @remote, 0x8}]}, &(0x7f00000001c0)=0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x1900, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5390, &(0x7f0000000140)=@manufact={0x4, 0x2, 0x800, "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"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r6, &(0x7f0000006540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="600000001000ffff27bd7800fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="170c0000000000003800128009000100766c616e00000000280002801c0003800c00010005000000070000000c0001000500000000000000060001000400000008000500", @ANYRES32=r5, @ANYBLOB="a15cb1ed9eae110d8002283cd04fa4674dcbf1a37ad8c62e437a6700"/43], 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 4.129070926s ago: executing program 4 (id=3599): listns(&(0x7f0000000080)={0x20, 0x0, 0x0, 0x40000000}, &(0x7f0000000000)=[0x0], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x34, r1, 0x1, 0x3, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x4e040) 3.950501012s ago: executing program 4 (id=3600): userfaultfd(0x80801) (async) userfaultfd(0x80801) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c1f"]) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) dup(r6) (async) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa41d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828eea399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f0e817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f0000000000)=0x3ff, 0x8) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='.\x00\x00'], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3.615513283s ago: executing program 4 (id=3601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000ffdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="050010000900000008000300", @ANYRES32=r5, @ANYBLOB="2500110002000000"], 0x44}, 0x1, 0x0, 0x0, 0x851}, 0x20004000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000004980)=""/196, 0xc4}], 0x1) close_range(r7, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 3.615116939s ago: executing program 5 (id=3602): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="2469a96632448800278134403b714de7", 0x10}], 0x1, 0x0, 0x0, 0x814}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/125, 0x7d}], 0x1}, 0x10100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x4e}, 0x37) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2620, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1ad}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 3.013906264s ago: executing program 1 (id=3604): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902"], 0x0) syz_usb_connect$uac3(0x0, 0xed, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x9, 0xe0, 0x2, {0x8, 0xb, 0x0, 0x0, 0x1, 0x1, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x29, 0xfffffffb}, [@output_terminal={0x13, 0x24, 0x3, 0x4, 0x305, 0x5, 0x5, 0xf7, 0x2, 0xff00, 0x334, 0x9}, @source_unit={0xc, 0x24, 0xb, 0x10, 0x0, 0x0, 0x8, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0xfc}, @as_header={0x17, 0x24, 0x1, 0x7, 0x9, 0x7, 0x1001, 0xc, 0x0, 0x6, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xed, 0x9, 0xe2, "11d747611048"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x8, 0x3, {0xa, 0x25, 0x25, 0x55b, 0xd3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc2, 0x1, 0x9, 0x1}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x0, 0x5, "5ab8f14afdb8ef"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xb, 0x6, 0x2, {0xa, 0x25, 0x25, 0x1, 0x9, 0x4}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x7, 0x0, 0x89, 0x20, 0xb}, 0x16e, &(0x7f0000000200)={0x5, 0xf, 0x16e, 0x5, [@generic={0x8b, 0x10, 0x2, "5bdb00a1d092ed9b39232be2fe6997abc8d3527e32f44316a94ce93229ee426bc4b33bcfc875677127ae5054b3734ab8139aaaea4b9ef251215f571ba777c41aef5b6f2a3cc1a5e935546ea83d08923df01d42f00a22496635efe4e9c30cbc0001ea61d91e8bde2064e430ae46c99382e1fe07c80c206174cb65a06cfc860a887952a42915ef959f"}, @generic={0xc6, 0x10, 0x4, "195e74d159313cc11e03763a8eec27693b027f93c2e67bb24f377314c44e597ffe189872bd04faa0652b9b41be7d11b914c9174b2498fa1d96f149b2c8cbc63567d3ce3a3b11865df40fefae60bc199a1aef868e7f79a21b0b79e5e07d0fd290879d54763e25b9de406def8c2d06a1b57ec4f7eb24f53c8f12964a246afa2c6936d78cd7466f7f0e4b918f77075b48f23542020e90ca308ee262d089846104bd7634ac386d5ef776ca4d18f4553bf7675c3478e183a1f84c84dfd2c7387bdfddc63b67"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0x2, 0xf801}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x5, 0xfffb}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x6, &(0x7f0000000400)=@string={0x6, 0x3, "76d5974a"}}]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.569402437s ago: executing program 3 (id=3605): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x50000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x840) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) 2.341751725s ago: executing program 5 (id=3606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r2 = socket$rds(0x15, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000340)={{0xffff, 0x8503}, 0x51}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x4, 0x1}}, 0x10, 0x0}, 0x0) unlink(&(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r5, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random="cf"}, {0x1f, 0x0, @random="392a5b48b2eb1da02e83aac1d6ee67f19dc9a3aef884291478dd87"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000003deaffffffffffffff00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 2.260234703s ago: executing program 5 (id=3607): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r8, 0x1) flock(r2, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0x1, 0x2}, 0x1c) recvmmsg$unix(r10, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000007000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000008c0)='syzkaller\x00', 0x348d, 0x66, &(0x7f0000000900)=""/102, 0x81e00, 0xc, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x1, 0xe, 0x101, 0x3ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[0xffffffffffffffff], &(0x7f0000000b80)=[{0x2, 0x5, 0x4, 0xb}, {0x5, 0x3, 0x8, 0x9}, {0x5, 0x4, 0xc, 0xb}], 0x10, 0x7fffffff}, 0x94) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="005dbd7db88b9d57fb739a73b503eacaa300cca2942e6c3ab33ee869fd3e43624b4d1846b348cf6899cf90bffff6585a62a45af32bd0c388b7958e412856c9f3be480685e67f071052f9cf72f5f7e953a4f931acd681b426b40c0310ed9dae0fe7c8aa991db50c7bf4753022877f11389738925ce95ad1c185d3461916d8da51328ad5b4fd3d7b3f881fb8654bcdf786330b35c060c128b93045b43f23e2a72a47f3ad0f5251cd82d72b329168c7493a2d5ee611351675b2c008650bbac44e375baf68d0aaa22b363c22476d30", 0xcd}, {&(0x7f0000000800)="bc4e6c5420e3fea0818c8b807f00000013aae7ca36f3967a7ce15958e60d4d0ca03fdc73e12bfdd08b84bf18594e7c242ee6aa5fb3ed9b00249e0b011a1fdeb2b508fe05ac6b4526598d7fdf1b28b6789ee410fb8040a0187dc4c017db1d9c0adeeff80109d466edc100887221de4ea1e659e8370bd2f9dd78fcf130003c2fbe95f4b570765c6b1b67e875cc22", 0x8d}, {&(0x7f0000000340)="44182252014d1eb70ab958a62e329e471eb7460a91180b2574a83d7f56aa41e845b649fadf9e917e65d80a3e169cda292dbde86d2c75ff740b7c2869e5b3be304074d488f59871788595615c43ff8d3e056962ef920220ae09d10524911db0f497c7", 0x62}, {&(0x7f00000003c0)="24803cf3b765ae0e1f30a38007000000000159", 0x13}, {&(0x7f0000000400)="63b7711ff765ee5069dc2b28ad00bf4c2845aad9c6441a9fc21a79c4e560c07d622124de975dc5fa4878c989f092ef7836a707c3f1e5c20c967a49c9c877bae47617bee094b3491f446efc5a789fa3eb4e2db544fdf688ff88fab7435d6d123bcb40743c4a88984a21529fac65f33be7169b", 0x72}], 0x5}}], 0x1, 0x4000801) flock(r1, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 2.010327846s ago: executing program 4 (id=3608): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) syz_open_procfs$pagemap(r3, &(0x7f0000000500)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) setreuid(0xee00, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @timestamp], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r6, 0x81, 0x3, &(0x7f0000000c40)="2318e7") read$char_usb(r7, &(0x7f0000000100)=""/242, 0xf2) 1.360101858s ago: executing program 5 (id=3609): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @remote, @empty}, &(0x7f0000000680)=0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xbf3]}, 0x8, 0x800) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000380)=@isdn={0x22, 0x1, 0xb, 0x81, 0x8}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@ipv6_newrule={0xa4, 0x20, 0x800, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x14, 0x1, 0x5, 0x0, 0x0, 0x4, 0x10}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8001}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x8}, @FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_DST={0x14, 0x1, @empty}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x20002013}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8042) ioprio_set$uid(0x3, 0x0, 0x0) r3 = open(&(0x7f0000000400)='./file1\x00', 0x145142, 0x122) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x101001a, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendfile(r3, r3, 0x0, 0x800000009) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) read(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1.359482653s ago: executing program 1 (id=3610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x6, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffa000/0x1000)=nil) 1.190255174s ago: executing program 3 (id=3611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x6000000, 0x0, 0x4000}, 0x4000) 1.189751594s ago: executing program 1 (id=3612): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x65) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r3 = userfaultfd(0x801) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000002980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.084549193s ago: executing program 3 (id=3613): socket$kcm(0x11, 0x3, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000001a40)=[{0x68d, 0x200, 0x0, 0x0}, {0xb0, 0x800, 0x0, 0x0}], 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) recvmmsg(r3, &(0x7f0000004300)=[{{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f00000003c0)=""/188, 0xbc}], 0x3}, 0xb}, {{&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/50, 0x32}], 0x3, &(0x7f00000007c0)=""/109, 0x6d}, 0x1}, {{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=""/170, 0xaa}, 0x9}, {{&(0x7f0000000980)=@tipc=@id, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/239, 0xef}, {&(0x7f0000000b00)=""/129, 0x81}], 0x2, &(0x7f0000001600)=""/4096, 0x1000}, 0xefae}, {{&(0x7f0000002600)=@xdp, 0x80, &(0x7f0000002940)=[{&(0x7f0000002680)=""/198, 0xc6}, {&(0x7f0000002780)=""/167, 0xa7}, {&(0x7f0000002840)=""/56, 0x38}, {&(0x7f0000002880)=""/143, 0x8f}], 0x4, &(0x7f0000002980)=""/78, 0x4e}, 0xd}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000002a00)=""/169, 0xa9}, {0x0}, {&(0x7f0000002b40)=""/235, 0xeb}, {&(0x7f0000002c40)=""/152, 0x98}, {&(0x7f0000002d00)=""/183, 0xb7}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000003e00)=@xdp, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003e80)=""/243, 0xf3}, {&(0x7f0000003f80)=""/112, 0x70}, {&(0x7f0000004000)=""/93, 0x5d}, {&(0x7f0000004080)=""/63, 0x3f}, {&(0x7f00000040c0)=""/116, 0x74}, {&(0x7f0000004140)=""/85, 0x55}], 0x6, &(0x7f0000004200)=""/195, 0xc3}, 0x4c8b}], 0x7, 0x20, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) faccessat(r0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) connect$qrtr(r0, &(0x7f0000000140)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11650}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r7}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff8000}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r8, 0xffffffffffffffff, 0x200000000000000) 788.296871ms ago: executing program 1 (id=3614): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="2469a96632448800278134403b714de7", 0x10}], 0x1, 0x0, 0x0, 0x814}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/125, 0x7d}], 0x1}, 0x10100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x4e}, 0x37) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2620, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1ad}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 254.925317ms ago: executing program 1 (id=3615): r0 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='*8{:@)(\x00', 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'poly1305-neon\x00'}}) 0s ago: executing program 1 (id=3616): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000006c0), 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000500)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) setreuid(0xee00, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @timestamp], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r6, 0x81, 0x3, &(0x7f0000000c40)="2318e7") read$char_usb(r7, &(0x7f0000000100)=""/242, 0xf2) kernel console output (not intermixed with test programs): interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 881.047306][ T5846] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 881.050311][ T5846] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.054150][ T5846] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 881.057056][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.277397][ T5846] usb 8-1: GET_CAPABILITIES returned 0 [ 881.279363][ T5846] usbtmc 8-1:16.0: can't read capabilities [ 881.481903][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 881.485735][T18044] usbtmc 8-1:16.0: Unable to send data, error -71 [ 881.495394][ T5846] usb 8-1: USB disconnect, device number 82 [ 881.875484][T18063] netlink: 'syz.1.3186': attribute type 1 has an invalid length. [ 881.897386][T18063] bond2: entered promiscuous mode [ 881.900363][T18063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 882.480854][T15285] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 882.493248][T15285] usb 9-1: USB disconnect, device number 27 [ 882.846603][T18070] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 883.989003][T15285] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 884.161257][T15285] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.169540][T15285] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 884.174855][T15285] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.181500][T15285] usb 10-1: config 0 descriptor?? [ 884.278367][ T5889] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 884.406035][T15285] usbhid 10-1:0.0: can't add hid device: -71 [ 884.407992][T15285] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 884.415731][T15285] usb 10-1: USB disconnect, device number 25 [ 884.428467][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 884.433013][ T5889] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 884.435757][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.439675][ T5889] usb 6-1: Product: syz [ 884.441058][ T5889] usb 6-1: Manufacturer: syz [ 884.442571][ T5889] usb 6-1: SerialNumber: syz [ 884.667883][ T5889] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 884.681972][ T5889] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 884.685163][ T5889] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 884.687679][ T5889] usb 6-1: media controller created [ 884.694006][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.909644][ T5889] zl10353_read_register: readreg error (reg=127, ret==-110) [ 884.918453][ T5829] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 885.068375][ T5829] usb 10-1: Using ep0 maxpacket: 32 [ 885.074736][ T5829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.079435][ T5889] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 885.083146][ T5829] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 885.101468][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.108418][ T5889] usb 6-1: USB disconnect, device number 96 [ 885.128000][ T5829] usb 10-1: config 0 descriptor?? [ 885.140006][ T5829] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 885.154547][ T5829] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 885.844365][T18115] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 886.915965][ T5889] usb 10-1: USB disconnect, device number 26 [ 886.921610][ T5889] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 887.050219][T18122] wg2 speed is unknown, defaulting to 1000 [ 887.134517][T18122] xfrm0 speed is unknown, defaulting to 1000 [ 888.608405][T15285] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 888.658101][T18136] 9pnet_virtio: no channels available for device syz [ 888.783631][T15285] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.797492][T15285] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 888.830099][T15285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.859786][T15285] usb 6-1: config 0 descriptor?? [ 889.089415][T15285] usbhid 6-1:0.0: can't add hid device: -71 [ 889.091719][T15285] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 889.104275][T15285] usb 6-1: USB disconnect, device number 97 [ 889.648356][ T5829] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 889.670102][T18138] syzkaller0: entered promiscuous mode [ 889.672489][T18138] syzkaller0: entered allmulticast mode [ 889.808626][ T5829] usb 6-1: Using ep0 maxpacket: 32 [ 889.813898][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.817520][ T5829] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 889.821417][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.825030][ T5829] usb 6-1: config 0 descriptor?? [ 889.830089][ T5829] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 889.835402][ T5829] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 890.229674][T18162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 890.237605][ T5829] usb 6-1: USB disconnect, device number 98 [ 890.251327][ T5829] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 890.547683][T18165] openvswitch: netlink: Flow actions attr not present in new flow. [ 890.828348][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3217'. [ 891.538626][T18179] binder: 18178:18179 ioctl c0306201 80000180 returned -14 [ 891.608500][ T5889] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 891.761741][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.766458][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.770805][ T5889] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 891.774620][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.783247][ T5889] usb 6-1: config 0 descriptor?? [ 891.948911][ T34] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 892.084597][T18176] binder: 18174:18176 ioctl c00c620f 800003c0 returned -22 [ 892.098632][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 892.112347][ T34] usb 10-1: config 0 has no interfaces? [ 892.121686][ T34] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 892.125296][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.128047][ T34] usb 10-1: Product: syz [ 892.130733][ T34] usb 10-1: Manufacturer: syz [ 892.133649][ T34] usb 10-1: SerialNumber: syz [ 892.147972][ T34] usb 10-1: config 0 descriptor?? [ 892.365744][T18183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.371724][T18183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.376549][T13869] Bluetooth: hci0: adv larger than maximum supported [ 892.376585][T13869] Bluetooth: hci0: adv larger than maximum supported [ 892.382262][T13869] Bluetooth: hci0: Unknown advertising packet type: 0x11 [ 892.384514][T13869] Bluetooth: hci0: Malformed LE Event: 0x0d [ 892.392746][T15286] usb 10-1: USB disconnect, device number 27 [ 892.858698][ T5821] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 893.049153][ T5821] usb 9-1: Using ep0 maxpacket: 8 [ 893.069699][ T5821] usb 9-1: config 0 has no interfaces? [ 893.077757][ T5821] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 893.081523][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.155224][ T5821] usb 9-1: Product: syz [ 893.156793][ T5821] usb 9-1: Manufacturer: syz [ 893.258382][ T5821] usb 9-1: SerialNumber: syz [ 893.688358][T15285] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 893.691155][ C2] raw-gadget.2 gadget.5: ignoring, device is not running [ 893.818505][T15285] usb 10-1: device descriptor read/64, error -32 [ 894.058543][T15285] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 894.065531][ C2] raw-gadget.2 gadget.5: ignoring, device is not running [ 894.198448][T15285] usb 10-1: device descriptor read/64, error -32 [ 894.309685][T15285] usb usb10-port1: attempt power cycle [ 894.537058][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 894.539275][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 894.550454][ T5889] usb 6-1: USB disconnect, device number 99 [ 894.555258][ T5821] usb 9-1: config 0 descriptor?? [ 894.648453][T15285] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 894.681660][T15285] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.696434][T15285] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 894.704465][T15285] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.716032][T15285] usb 10-1: config 0 descriptor?? [ 894.764961][T13869] Bluetooth: hci4: Malformed LE Event: 0x0d [ 894.767240][ T5889] usb 9-1: USB disconnect, device number 28 [ 894.838929][ T5821] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 895.011913][ T5821] usb 8-1: Using ep0 maxpacket: 16 [ 895.041341][ T5821] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 895.044880][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.050255][ T5821] usb 8-1: Product: syz [ 895.052123][ T5821] usb 8-1: Manufacturer: syz [ 895.053957][ T5821] usb 8-1: SerialNumber: syz [ 895.336821][ T5821] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 895.356032][T15285] usbhid 10-1:0.0: can't add hid device: -71 [ 895.359833][T15285] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 895.373503][T15285] usb 10-1: USB disconnect, device number 30 [ 895.376564][T18199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3229'. [ 895.396654][ T5821] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 895.408023][ T5821] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 895.413041][ T5821] usb 8-1: media controller created [ 895.526941][T18205] FAULT_INJECTION: forcing a failure. [ 895.526941][T18205] name failslab, interval 1, probability 0, space 0, times 0 [ 895.533943][T18205] CPU: 2 UID: 0 PID: 18205 Comm: syz.4.3230 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.533963][T18205] Tainted: [L]=SOFTLOCKUP [ 895.533968][T18205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 895.533976][T18205] Call Trace: [ 895.533980][T18205] [ 895.533985][T18205] dump_stack_lvl+0x100/0x190 [ 895.534009][T18205] should_fail_ex.cold+0x5/0xa [ 895.534025][T18205] should_failslab+0xc2/0x120 [ 895.534039][T18205] __kmalloc_cache_noprof+0x7a/0x6f0 [ 895.534057][T18205] ? nd_ioctl+0xcd9/0x1c20 [ 895.534076][T18205] nd_ioctl+0xcd9/0x1c20 [ 895.534097][T18205] ? __pfx_nd_ioctl+0x10/0x10 [ 895.534115][T18205] ? find_held_lock+0x2b/0x80 [ 895.534130][T18205] ? __fget_files+0x215/0x3d0 [ 895.534143][T18205] ? hook_file_ioctl_common+0x149/0x410 [ 895.534181][T18205] ? __fget_files+0x21f/0x3d0 [ 895.534196][T18205] ? __pfx_bus_ioctl+0x10/0x10 [ 895.534213][T18205] compat_ptr_ioctl+0x6e/0xa0 [ 895.534225][T18205] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 895.534236][T18205] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 895.534250][T18205] __do_fast_syscall_32+0xe7/0x970 [ 895.534269][T18205] ? lockdep_hardirqs_on+0x78/0x100 [ 895.534321][T18205] do_fast_syscall_32+0x32/0x70 [ 895.534339][T18205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.534355][T18205] RIP: 0023:0xf7fa8f7c [ 895.534364][T18205] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 895.534377][T18205] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 895.534389][T18205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008640a [ 895.534397][T18205] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 895.534404][T18205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 895.534411][T18205] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 895.534418][T18205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 895.534432][T18205] [ 895.542836][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 896.098929][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 896.135014][T18215] netlink: 'syz.1.3233': attribute type 21 has an invalid length. [ 896.310449][ T5821] zl10353_read_register: readreg error (reg=127, ret==-71) [ 896.369746][ T5889] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 896.477969][ T5821] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 896.492447][ T5821] usb 8-1: USB disconnect, device number 83 [ 896.518428][ T5889] usb 10-1: Using ep0 maxpacket: 32 [ 896.522688][ T5889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.526696][ T5889] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 896.530917][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.535142][ T5889] usb 10-1: config 0 descriptor?? [ 896.539915][ T5889] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 896.545467][ T5889] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 896.729632][T18219] input: syz1 as /devices/virtual/input/input40 [ 896.792012][T14875] udevd[14875]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 896.837411][ T5821] usb 10-1: USB disconnect, device number 31 [ 896.910555][ T5821] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 897.218496][T15285] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 897.368370][T15285] usb 9-1: Using ep0 maxpacket: 8 [ 897.372188][T15285] usb 9-1: config 0 has no interfaces? [ 897.376457][T15285] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 897.380392][T15285] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.383754][T15285] usb 9-1: Product: syz [ 897.385430][T15285] usb 9-1: Manufacturer: syz [ 897.387372][T15285] usb 9-1: SerialNumber: syz [ 897.404825][T15285] usb 9-1: config 0 descriptor?? [ 897.407593][T18233] random: crng reseeded on system resumption [ 897.623195][T13869] Bluetooth: hci4: Malformed LE Event: 0x0d [ 897.626608][T15285] usb 9-1: USB disconnect, device number 29 [ 897.839056][T18237] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3239'. [ 897.842391][T18237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 898.228561][ T5889] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 898.500935][ T5889] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 898.504231][ T5889] usb 6-1: can't read configurations, error -71 [ 898.608457][T15286] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 898.758573][T15286] usb 10-1: Using ep0 maxpacket: 8 [ 898.761867][T15286] usb 10-1: config 0 has no interfaces? [ 898.766129][T15286] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 898.770127][T15286] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.773620][T15286] usb 10-1: Product: syz [ 898.775240][T15286] usb 10-1: Manufacturer: syz [ 898.777038][T15286] usb 10-1: SerialNumber: syz [ 898.781039][T15286] usb 10-1: config 0 descriptor?? [ 898.990659][T13869] Bluetooth: hci0: Malformed LE Event: 0x0d [ 898.997190][T15286] usb 10-1: USB disconnect, device number 32 [ 899.269228][T18254] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 899.614593][T18263] netlink: 'syz.5.3249': attribute type 2 has an invalid length. [ 899.988753][ T5821] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 901.061592][T18270] random: crng reseeded on system resumption [ 901.078963][ T5821] usb 9-1: Using ep0 maxpacket: 8 [ 901.106619][ T5821] usb 9-1: config 0 has no interfaces? [ 901.127822][ T5821] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 901.137263][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.149246][ T5821] usb 9-1: Product: syz [ 902.138392][ T5889] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 902.139172][ T5821] usb 9-1: Manufacturer: syz [ 902.281687][ T5821] usb 9-1: SerialNumber: syz [ 902.312815][ T5821] usb 9-1: config 0 descriptor?? [ 902.338627][T15286] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 902.429652][ T5889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.433006][ T5889] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 902.435956][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.440499][ T5889] usb 10-1: config 0 descriptor?? [ 902.499750][T15286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.503838][T15286] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 902.507417][T15286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.514613][T15286] usb 6-1: config 0 descriptor?? [ 902.552254][T13869] Bluetooth: hci4: Malformed LE Event: 0x0d [ 902.560158][ T34] usb 9-1: USB disconnect, device number 30 [ 902.694225][ T5889] usbhid 10-1:0.0: can't add hid device: -71 [ 902.696358][ T5889] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 902.700715][ T5889] usb 10-1: USB disconnect, device number 33 [ 902.985446][T15286] usbhid 6-1:0.0: can't add hid device: -71 [ 902.987190][T15286] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 902.996127][T15286] usb 6-1: USB disconnect, device number 102 [ 903.138396][ T5889] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 903.299402][ T5889] usb 10-1: Using ep0 maxpacket: 32 [ 903.304022][ T5889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.309893][ T5889] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 903.318603][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.331308][ T5889] usb 10-1: config 0 descriptor?? [ 903.344453][ T5889] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 903.356877][ T5889] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 903.438518][ T5533] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 903.588354][ T5533] usb 6-1: Using ep0 maxpacket: 32 [ 903.594680][ T5533] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.604536][ T5456] veth0_vlan: left promiscuous mode [ 903.605202][ T5533] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 903.611244][ T5533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.619375][ T5456] veth0_vlan: entered promiscuous mode [ 903.623081][ T5533] usb 6-1: config 0 descriptor?? [ 903.641941][ T5533] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 903.650616][ T5533] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 903.857333][ T5533] usb 10-1: USB disconnect, device number 34 [ 903.866523][ T5533] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 904.064531][T15285] usb 6-1: USB disconnect, device number 103 [ 904.097035][T15285] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 904.952502][T18329] netlink: 'syz.1.3266': attribute type 10 has an invalid length. [ 905.342808][T18329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.368332][T18329] team0: Port device netdevsim1 added [ 905.371149][T18331] netlink: 'syz.1.3266': attribute type 10 has an invalid length. [ 905.758432][ T5533] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 905.918351][ T5533] usb 6-1: Using ep0 maxpacket: 8 [ 905.924933][ T5533] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 905.933803][ T5533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.938113][ T5533] usb 6-1: Product: 핶䪗 [ 905.942607][ T5533] usb 6-1: Manufacturer: ဇ [ 905.944367][ T5533] usb 6-1: SerialNumber: syz [ 906.191133][ T5533] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 906.411863][ T5533] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 906.438913][ T5533] usb 6-1: USB disconnect, device number 104 [ 906.507119][T14875] udevd[14875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.720154][T18342] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 906.860231][T18346] can0: slcan on ttyS3. [ 907.088538][T18346] can0 (unregistered): slcan off ttyS3. [ 907.105591][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 907.818988][ T5752] Bluetooth: hci0: command 0x0406 tx timeout [ 908.948474][T15286] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 909.104357][T15286] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.114180][T15286] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 909.124247][T15286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.175259][T15286] usb 10-1: config 0 descriptor?? [ 909.454609][T15286] usbhid 10-1:0.0: can't add hid device: -71 [ 909.456612][T15286] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 909.467036][T15286] usb 10-1: USB disconnect, device number 35 [ 909.778441][T15285] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 909.928421][T15285] usb 8-1: Using ep0 maxpacket: 8 [ 909.962595][T15285] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 909.971586][T15285] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.974931][T15285] usb 8-1: Product: 핶䪗 [ 909.976851][T15285] usb 8-1: Manufacturer: ဇ [ 909.996436][T15285] usb 8-1: SerialNumber: syz [ 910.161185][T18386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.240111][T15285] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 910.290336][T15285] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 910.300971][T15285] usb 8-1: USB disconnect, device number 84 [ 910.342295][T14875] udevd[14875]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.448341][ T5533] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 910.610468][ T5533] usb 10-1: Using ep0 maxpacket: 32 [ 910.616311][ T5533] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.620468][ T5533] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 910.623516][ T5533] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.627180][ T5533] usb 10-1: config 0 descriptor?? [ 910.630581][ T5533] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 910.634127][ T5533] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 911.140033][ T857] usb 10-1: USB disconnect, device number 36 [ 911.810940][ T857] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 912.674059][T18408] fuse: Bad value for 'fd' [ 912.689772][ T5752] Bluetooth: hci4: command 0x0406 tx timeout [ 913.665729][T18430] program syz.5.3292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.505975][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 915.570272][ T5846] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 915.728844][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 915.732528][ T5846] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 915.736000][ T5846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 915.739228][ T5846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 915.742511][ T5846] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 915.746423][ T5846] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 915.751973][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.975286][ T5846] usb 6-1: GET_CAPABILITIES returned 0 [ 915.977014][ T5846] usbtmc 6-1:16.0: can't read capabilities [ 916.083716][T18461] bridge_slave_0: left allmulticast mode [ 916.085654][T18461] bridge_slave_0: left promiscuous mode [ 916.087455][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.177626][T15286] usb 6-1: USB disconnect, device number 105 [ 916.244102][T18461] bridge_slave_1: left allmulticast mode [ 916.256130][T18461] bridge_slave_1: left promiscuous mode [ 916.258026][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.296983][T18461] bond0: (slave bond_slave_0): Releasing backup interface [ 916.322843][T18461] bond0: (slave bond_slave_1): Releasing backup interface [ 916.381530][T18461] team0: Port device team_slave_0 removed [ 916.398211][T18474] FAULT_INJECTION: forcing a failure. [ 916.398211][T18474] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 916.402985][T18474] CPU: 1 UID: 0 PID: 18474 Comm: syz.5.3301 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.403012][T18474] Tainted: [L]=SOFTLOCKUP [ 916.403018][T18474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 916.403028][T18474] Call Trace: [ 916.403034][T18474] [ 916.403041][T18474] dump_stack_lvl+0x100/0x190 [ 916.403072][T18474] should_fail_ex.cold+0x5/0xa [ 916.403090][T18474] ? prepare_alloc_pages+0x16d/0x5f0 [ 916.403113][T18474] should_fail_alloc_page+0xeb/0x140 [ 916.403144][T18474] prepare_alloc_pages+0x1f0/0x5f0 [ 916.403169][T18474] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 916.403201][T18474] ? __lock_acquire+0x4a5/0x2630 [ 916.403225][T18474] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 916.403248][T18474] ? is_bpf_text_address+0x94/0x1a0 [ 916.403270][T18474] ? kernel_text_address+0x8d/0x100 [ 916.403289][T18474] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 916.403319][T18474] ? irqentry_exit+0x24d/0x970 [ 916.403352][T18474] ? policy_nodemask+0x346/0x4f0 [ 916.403370][T18474] ? policy_nodemask+0x367/0x4f0 [ 916.403388][T18474] ? policy_nodemask+0x395/0x4f0 [ 916.403407][T18474] ? policy_nodemask+0xed/0x4f0 [ 916.403434][T18474] alloc_pages_mpol+0x1fb/0x540 [ 916.403455][T18474] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 916.403480][T18474] ? __pfx_bm_entry_read+0x10/0x10 [ 916.403503][T18474] alloc_pages_noprof+0x1a/0x160 [ 916.403525][T18474] get_free_pages_noprof+0x10/0xb0 [ 916.403543][T18474] bm_entry_read+0x80/0x690 [ 916.403568][T18474] ? __pfx_bm_entry_read+0x10/0x10 [ 916.403590][T18474] vfs_readv+0x5d8/0x8d0 [ 916.403613][T18474] ? __pfx_vfs_readv+0x10/0x10 [ 916.403648][T18474] ? __fget_files+0x21f/0x3d0 [ 916.403674][T18474] ? do_readv+0x13e/0x340 [ 916.403690][T18474] do_readv+0x13e/0x340 [ 916.403707][T18474] ? __pfx_do_readv+0x10/0x10 [ 916.403723][T18474] ? ksys_write+0x1ac/0x250 [ 916.403743][T18474] ? rcu_is_watching+0x12/0xc0 [ 916.403765][T18474] __do_fast_syscall_32+0xe7/0x970 [ 916.403788][T18474] ? lockdep_hardirqs_on+0x78/0x100 [ 916.403812][T18474] do_fast_syscall_32+0x32/0x70 [ 916.403836][T18474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 916.403856][T18474] RIP: 0023:0xf705ef7c [ 916.403870][T18474] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 916.403886][T18474] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000091 [ 916.403902][T18474] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800013c0 [ 916.403912][T18474] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 916.403922][T18474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 916.403931][T18474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.403940][T18474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 916.403963][T18474] [ 916.407484][T18461] team0: Port device team_slave_1 removed [ 916.523632][T18461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.525857][T18461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.535182][T18461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.540358][T18461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.552619][T18461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 916.558717][ T5846] wg2 speed is unknown, defaulting to 1000 [ 916.756513][T18480] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 916.894645][T18485] FAULT_INJECTION: forcing a failure. [ 916.894645][T18485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.900473][T18485] CPU: 2 UID: 0 PID: 18485 Comm: syz.1.3303 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.900500][T18485] Tainted: [L]=SOFTLOCKUP [ 916.900506][T18485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 916.900516][T18485] Call Trace: [ 916.900521][T18485] [ 916.900529][T18485] dump_stack_lvl+0x100/0x190 [ 916.900561][T18485] should_fail_ex.cold+0x5/0xa [ 916.900583][T18485] _copy_from_user+0x2e/0xd0 [ 916.900613][T18485] get_compat_msghdr+0xb3/0x4b0 [ 916.900634][T18485] ? __pfx_get_compat_msghdr+0x10/0x10 [ 916.900663][T18485] ___sys_sendmsg+0x1b6/0x1e0 [ 916.900687][T18485] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.900721][T18485] ? find_held_lock+0x2b/0x80 [ 916.900756][T18485] __sys_sendmsg+0x170/0x220 [ 916.900775][T18485] ? __pfx___sys_sendmsg+0x10/0x10 [ 916.900791][T18485] ? __fget_files+0x21f/0x3d0 [ 916.900817][T18485] ? ksys_write+0x1ac/0x250 [ 916.900861][T18485] ? rcu_is_watching+0x12/0xc0 [ 916.900884][T18485] __do_fast_syscall_32+0xe7/0x970 [ 916.900908][T18485] ? lockdep_hardirqs_on+0x78/0x100 [ 916.900933][T18485] do_fast_syscall_32+0x32/0x70 [ 916.900957][T18485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 916.900979][T18485] RIP: 0023:0xf6feef7c [ 916.900993][T18485] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 916.901009][T18485] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 916.901025][T18485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 916.901036][T18485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 916.901045][T18485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 916.901055][T18485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 916.901064][T18485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 916.901086][T18485] [ 918.340763][ T5829] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 918.488372][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 918.494989][ T5829] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 918.497866][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.501019][ T5829] usb 6-1: Product: 핶䪗 [ 918.502429][ T5829] usb 6-1: Manufacturer: ဇ [ 918.504402][ T5829] usb 6-1: SerialNumber: syz [ 918.716417][ T5829] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 918.736918][ T5829] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 918.745124][ T5829] usb 6-1: USB disconnect, device number 106 [ 918.771917][T14875] udevd[14875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.938501][T15285] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 919.360180][T15285] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.364494][T15285] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 919.367781][T15285] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.372147][T15285] usb 8-1: config 0 descriptor?? [ 919.808536][T15285] usbhid 8-1:0.0: can't add hid device: -71 [ 919.810968][T15285] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 919.819270][T15285] usb 8-1: USB disconnect, device number 85 [ 920.200493][T18506] fuse: Unknown parameter '0x0000000000000007' [ 920.211239][T18510] FAULT_INJECTION: forcing a failure. [ 920.211239][T18510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.216077][T18510] CPU: 0 UID: 0 PID: 18510 Comm: syz.5.3309 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.216095][T18510] Tainted: [L]=SOFTLOCKUP [ 920.216099][T18510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 920.216106][T18510] Call Trace: [ 920.216110][T18510] [ 920.216115][T18510] dump_stack_lvl+0x100/0x190 [ 920.216138][T18510] should_fail_ex.cold+0x5/0xa [ 920.216153][T18510] _copy_from_user+0x2e/0xd0 [ 920.216170][T18510] drm_ioctl+0x520/0xc60 [ 920.216187][T18510] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 920.216203][T18510] ? __pfx_drm_ioctl+0x10/0x10 [ 920.216227][T18510] drm_compat_ioctl+0x386/0x4c0 [ 920.216245][T18510] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 920.216262][T18510] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 920.216276][T18510] __do_fast_syscall_32+0xe7/0x970 [ 920.216293][T18510] ? lockdep_hardirqs_on+0x78/0x100 [ 920.216310][T18510] do_fast_syscall_32+0x32/0x70 [ 920.216327][T18510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 920.216342][T18510] RIP: 0023:0xf705ef7c [ 920.216351][T18510] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 920.216362][T18510] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 920.216374][T18510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 920.216381][T18510] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 920.216387][T18510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 920.216394][T18510] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 920.216401][T18510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 920.216415][T18510] [ 920.298512][ T5829] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 920.448372][ T5829] usb 8-1: Using ep0 maxpacket: 32 [ 920.452001][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.455868][ T5829] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 920.459600][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.471691][ T5829] usb 8-1: config 0 descriptor?? [ 920.486254][ T5829] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 920.497242][ T5829] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 920.891522][T15285] usb 8-1: USB disconnect, device number 86 [ 920.897848][T15285] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 921.620290][T18535] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 921.746504][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 921.762474][T18542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3319'. [ 921.828393][ T5829] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 921.978356][ T5829] usb 10-1: Using ep0 maxpacket: 8 [ 921.994356][ T5829] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 921.998570][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.008402][ T5829] usb 10-1: Product: 핶䪗 [ 922.022959][ T5829] usb 10-1: Manufacturer: ဇ [ 922.038410][ T5829] usb 10-1: SerialNumber: syz [ 922.319359][ T1482] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 922.468376][ T1482] usb 6-1: Using ep0 maxpacket: 16 [ 922.477155][ T1482] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 922.481750][ T1482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.484368][ T1482] usb 6-1: Product: syz [ 922.485609][ T1482] usb 6-1: Manufacturer: syz [ 922.487028][ T1482] usb 6-1: SerialNumber: syz [ 922.715799][ T1482] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 922.721301][ T1482] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 922.724666][ T1482] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 922.727241][ T1482] usb 6-1: media controller created [ 922.734625][ T1482] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 922.738877][ T34] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 922.888536][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 922.897153][ T34] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 922.900892][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.903513][ T34] usb 8-1: Product: syz [ 922.904989][ T34] usb 8-1: Manufacturer: syz [ 922.906688][ T34] usb 8-1: SerialNumber: syz [ 922.949713][ T1482] zl10353_read_register: readreg error (reg=127, ret==-110) [ 923.192188][ T5829] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 923.209871][ T5829] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 923.215482][ T5829] usb 10-1: USB disconnect, device number 37 [ 923.400058][ T1482] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 923.408442][ T5533] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 923.433646][ T34] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 923.600082][ T5533] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.737840][ T34] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 923.797023][ T34] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 923.814095][ T34] usb 8-1: media controller created [ 923.914142][ T5533] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 923.917088][ T5533] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.006747][ T5533] usb 9-1: config 0 descriptor?? [ 924.195771][T14816] udevd[14816]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.226083][ T5533] usbhid 9-1:0.0: can't add hid device: -71 [ 924.231692][ T5533] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 924.248787][ T5533] usb 9-1: USB disconnect, device number 31 [ 924.305584][ T1482] usb 6-1: USB disconnect, device number 107 [ 924.634142][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.688340][ T34] zl10353_read_register: readreg error (reg=127, ret==-71) [ 924.829610][ T34] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 924.849211][ T5533] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 924.849499][ T34] usb 8-1: USB disconnect, device number 87 [ 925.008330][ T5533] usb 9-1: Using ep0 maxpacket: 32 [ 925.011365][ T5533] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.014554][ T5533] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 925.017274][ T5533] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.021273][ T5533] usb 9-1: config 0 descriptor?? [ 925.025350][ T5533] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 925.028951][ T5533] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 925.528708][ T5533] usb 9-1: USB disconnect, device number 32 [ 925.536357][ T5533] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 925.838371][T15285] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 925.841110][ T1482] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 926.008509][ T1482] usb 8-1: Using ep0 maxpacket: 16 [ 926.015123][T15285] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.019955][T15285] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.024504][T15285] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 926.030235][T15285] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 926.035660][T15285] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.035804][ T1482] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 926.044281][ T1482] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.048597][T15285] usb 10-1: config 0 descriptor?? [ 926.051000][ T1482] usb 8-1: Product: syz [ 926.053256][ T1482] usb 8-1: Manufacturer: syz [ 926.058054][ T1482] usb 8-1: SerialNumber: syz [ 926.109977][T18573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3329'. [ 926.474522][T15285] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 926.526730][ T1482] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 926.539128][ T1482] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 926.542518][ T1482] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 926.545255][ T1482] usb 8-1: media controller created [ 926.552419][ T1482] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 926.561186][ T1482] zl10353_read_register: readreg error (reg=127, ret==-71) [ 926.586254][ T1482] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 926.602045][ T1482] usb 8-1: USB disconnect, device number 88 [ 926.721198][T18571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3328'. [ 926.724141][T18571] bridge_slave_1: entered promiscuous mode [ 927.770272][ C2] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1 [ 928.559545][ T5846] usb 10-1: USB disconnect, device number 38 [ 929.089216][T18644] 9pnet_virtio: no channels available for device syz [ 930.161007][T18669] xt_l2tp: missing protocol rule (udp|l2tpip) [ 930.199456][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3354'. [ 930.321063][T18672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3356'. [ 930.325116][T18672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3356'. [ 930.592662][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.596630][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.598877][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.601175][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.603258][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.605288][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.607392][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.609690][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.611843][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.613916][T18687] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 930.629881][T18682] netlink: 'syz.4.3359': attribute type 1 has an invalid length. [ 930.691296][ T5533] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 930.750572][T18682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 930.850180][ T5533] usb 10-1: Using ep0 maxpacket: 16 [ 930.872499][ T5533] usb 10-1: unable to get BOS descriptor or descriptor too short [ 930.875517][ T5533] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 930.877823][ T5533] usb 10-1: can't read configurations, error -71 [ 931.006635][T18682] bond1: (slave geneve2): making interface the new active one [ 931.066702][T18682] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 932.808460][ T1482] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 932.959281][ T1482] usb 6-1: Using ep0 maxpacket: 32 [ 932.964500][ T1482] usb 6-1: unable to get BOS descriptor or descriptor too short [ 932.967947][ T1482] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 932.973378][ T1482] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 932.976118][ T1482] usb 6-1: config 14 has no interface number 0 [ 932.978180][ T1482] usb 6-1: config 14 has no interface number 1 [ 932.980432][ T1482] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 932.983582][ T1482] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 932.986914][ T1482] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 932.991947][ T1482] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 932.995498][ T1482] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 933.000573][ T1482] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 933.004171][ T1482] usb 6-1: config 14 interface 57 has no altsetting 0 [ 933.006729][ T1482] usb 6-1: config 14 interface 228 has no altsetting 0 [ 933.011552][ T1482] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 933.014405][ T1482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.016721][ T1482] usb 6-1: Product: syz [ 933.018132][ T1482] usb 6-1: Manufacturer: syz [ 933.019791][ T1482] usb 6-1: SerialNumber: syz [ 933.238868][T18708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.241604][T18708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.258433][ T5533] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 933.431439][ T5533] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.438334][ T5533] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 933.448341][ T5533] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.459071][ T5533] usb 10-1: config 0 descriptor?? [ 933.497073][ T1482] legousbtower 6-1:14.57: interrupt endpoints not found [ 933.505851][T18711] kAFS: unable to lookup cell 'syz0' [ 933.520958][T18711] comedi comedi1: pcm3724: I/O base address not correctly aligned [ 933.750706][ T5533] usbhid 10-1:0.0: can't add hid device: -71 [ 933.752683][ T5533] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 933.757103][ T5533] usb 10-1: USB disconnect, device number 40 [ 933.905093][ T1482] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 933.912524][ T1482] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 934.029437][T15876] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 934.168610][T15876] usb 9-1: device descriptor read/64, error -71 [ 934.209150][ T5533] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 934.358325][ T5533] usb 10-1: Using ep0 maxpacket: 32 [ 934.362033][ T5533] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.365484][ T5533] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 934.368531][ T5533] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.375746][ T5533] usb 10-1: config 0 descriptor?? [ 934.379154][ T5533] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 934.383520][ T5533] ldusb 10-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 934.408870][T15876] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 934.548893][T15876] usb 9-1: device descriptor read/64, error -71 [ 934.664007][T15876] usb usb9-port1: attempt power cycle [ 934.788084][ T5533] usb 6-1: USB disconnect, device number 108 [ 934.790525][ C1] usb 6-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 934.809022][ T5533] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 934.850809][ T54] usb 10-1: USB disconnect, device number 41 [ 934.857528][ T54] ldusb 10-1:0.0: LD USB Device #1 now disconnected [ 935.018835][T15876] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 935.050949][T15876] usb 9-1: device descriptor read/8, error -71 [ 935.300879][T15876] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 935.326993][T15876] usb 9-1: device descriptor read/8, error -71 [ 935.353599][T18722] netlink: 'syz.3.3368': attribute type 1 has an invalid length. [ 935.449940][T15876] usb usb9-port1: unable to enumerate USB device [ 936.211529][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.214135][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.343355][ T857] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 936.599906][ T857] usb 8-1: Using ep0 maxpacket: 32 [ 936.753587][ T857] usb 8-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid maxpacket 1025, setting to 1024 [ 936.786915][ T857] usb 8-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 1024 [ 936.849142][ T857] usb 8-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 64 [ 936.870255][T18738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'. [ 936.873281][T18738] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 936.894923][ T857] usb 8-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.945620][ T857] usb 8-1: config 1 interface 0 has no altsetting 0 [ 937.054852][ T857] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 937.058969][ T857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.062571][ T857] usb 8-1: Product: 骲툅ྏܧ靀ꚇ㴓유䃒샢ꖛ骘생㇬页㦂 [ 937.065803][ T857] usb 8-1: Manufacturer: 㳋性局扯垸쏯鷎뜔蕇䖐ဲ蠉⫗ꭾ힬닶 [ 937.070402][ T857] usb 8-1: SerialNumber: ည [ 937.293114][T18733] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 937.302059][T18733] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 937.518340][ T5829] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 937.648393][ T5829] usb 10-1: device descriptor read/64, error -71 [ 937.760289][ T857] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 937.797940][ T857] usb 8-1: USB disconnect, device number 89 [ 937.968364][ T5829] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 938.098591][ T5829] usb 10-1: device descriptor read/64, error -71 [ 938.167728][T18758] wg2 speed is unknown, defaulting to 1000 [ 938.357322][T18758] xfrm0 speed is unknown, defaulting to 1000 [ 938.511688][ T5829] usb usb10-port1: attempt power cycle [ 939.291672][T18768] : renamed from bond_slave_0 [ 939.458344][ T5829] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 941.038397][ T5829] usb 10-1: device not accepting address 44, error -71 [ 944.529217][ T857] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 944.708396][ T857] usb 10-1: Using ep0 maxpacket: 16 [ 944.725994][ T857] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 944.729666][ T857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.732580][ T857] usb 10-1: Product: syz [ 944.734053][ T857] usb 10-1: Manufacturer: syz [ 944.735721][ T857] usb 10-1: SerialNumber: syz [ 944.987231][ T857] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 945.015636][ T857] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 945.025014][ T857] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 945.034122][ T857] usb 10-1: media controller created [ 945.135772][ T857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 945.419345][ T5846] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 945.568453][ T5846] usb 8-1: Using ep0 maxpacket: 16 [ 945.582800][ T5846] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 945.587383][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.591497][ T5846] usb 8-1: Product: syz [ 945.593753][ T5846] usb 8-1: Manufacturer: syz [ 945.595832][ T5846] usb 8-1: SerialNumber: syz [ 945.744158][ T857] zl10353_read_register: readreg error (reg=127, ret==-110) [ 945.849638][ T5846] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 945.858685][ T5846] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 945.863599][ T5846] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 945.867389][ T5846] usb 8-1: media controller created [ 945.893772][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.118869][ T5846] zl10353_read_register: readreg error (reg=127, ret==-110) [ 946.196340][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3390'. [ 946.200576][T18813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3390'. [ 946.730111][ T5846] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 948.474640][T18824] gfs2: error -5 reading superblock [ 949.858409][ T5846] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 950.008331][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 950.012848][ T5846] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 950.015316][ T5846] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 950.018306][ T5846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 950.021226][ T5846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 950.024174][ T5846] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.028061][ T5846] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 950.030863][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.427500][ T5533] usb 8-1: USB disconnect, device number 90 [ 950.575195][ T857] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 950.609441][ T857] usb 10-1: USB disconnect, device number 46 [ 950.832169][T18840] net_ratelimit: 3320 callbacks suppressed [ 950.832236][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.035561][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.038136][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.040548][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.043008][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.045332][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.047786][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.050218][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.052577][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.055063][T18840] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 951.986361][T18852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3401'. [ 952.723070][T18856] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3403'. [ 954.339034][ T5846] usb 6-1: usb_control_msg returned -71 [ 954.340752][ T5846] usbtmc 6-1:16.0: can't read capabilities [ 954.363480][ T5846] usb 6-1: USB disconnect, device number 109 [ 954.518548][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3408'. [ 956.638458][T18890] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3410'. [ 957.748369][ T5829] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 957.867316][T18901] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3413'. [ 957.899692][ T5829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.905334][ T5829] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 957.910426][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.916454][ T5829] usb 9-1: config 0 descriptor?? [ 958.167265][ T5829] usbhid 9-1:0.0: can't add hid device: -71 [ 958.175791][ T5829] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 958.181449][ T5829] usb 9-1: USB disconnect, device number 37 [ 959.389087][ T5829] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 960.420247][ T5829] usb 9-1: device descriptor read/64, error -71 [ 960.646879][T18919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3419'. [ 960.674953][ T5829] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 960.839768][ T5829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.848363][ T5829] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 960.852255][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.861509][ T5829] usb 9-1: config 0 descriptor?? [ 961.175274][ T5829] usbhid 9-1:0.0: can't add hid device: -71 [ 961.177421][ T5829] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 961.189558][ T5829] usb 9-1: USB disconnect, device number 39 [ 961.668470][ T5829] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 961.818407][ T5829] usb 9-1: Using ep0 maxpacket: 32 [ 961.822625][ T5829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.827195][ T5829] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 961.831314][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.845804][T18938] net_ratelimit: 1336 callbacks suppressed [ 961.845821][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 961.847533][ T5829] usb 9-1: config 0 descriptor?? [ 961.857372][ T5829] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 961.868982][ T5829] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 961.880825][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 961.883187][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 961.885690][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 961.888068][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 961.890529][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 961.893609][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 961.896001][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 961.899012][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 961.903244][T18938] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 962.305391][ T5829] usb 9-1: USB disconnect, device number 40 [ 962.313187][ T5829] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 963.138042][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'. [ 963.513300][T18949] binder: 18946:18949 unknown command 0 [ 963.515819][T18949] binder: 18946:18949 ioctl c0306201 80000080 returned -22 [ 963.572925][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3426'. [ 963.702186][ T1482] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 963.858372][ T1482] usb 9-1: Using ep0 maxpacket: 16 [ 963.863460][ T1482] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 963.866463][ T1482] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.869381][ T1482] usb 9-1: Product: syz [ 963.870829][ T1482] usb 9-1: Manufacturer: syz [ 963.872589][ T1482] usb 9-1: SerialNumber: syz [ 964.084362][ T1482] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 964.088369][ T1482] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 964.092503][ T1482] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 964.095108][ T1482] usb 9-1: media controller created [ 964.101744][ T1482] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 964.329773][ T1482] zl10353_read_register: readreg error (reg=127, ret==-110) [ 964.654385][ T1482] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 964.677773][ T1482] usb 9-1: USB disconnect, device number 41 [ 967.689499][ T34] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 967.894247][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 967.897973][ T34] usb 9-1: no configurations [ 967.900103][ T34] usb 9-1: can't read configurations, error -22 [ 968.078985][ T34] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 968.239028][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 968.247683][ T34] usb 9-1: no configurations [ 968.249611][ T34] usb 9-1: can't read configurations, error -22 [ 968.259378][ T34] usb usb9-port1: attempt power cycle [ 968.308410][ T5533] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 968.357814][T18992] net_ratelimit: 1591 callbacks suppressed [ 968.357882][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.378851][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.381347][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.383734][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.386067][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.388617][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.390982][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.393275][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.395566][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.398093][T18992] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 968.458370][ T5533] usb 6-1: Using ep0 maxpacket: 16 [ 968.463338][ T5533] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 968.466206][ T5533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.468933][ T5533] usb 6-1: Product: syz [ 968.470285][ T5533] usb 6-1: Manufacturer: syz [ 968.471767][ T5533] usb 6-1: SerialNumber: syz [ 968.646951][ T34] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 968.692843][ T5533] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 968.696901][ T5533] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 968.700427][ T5533] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 968.703044][ T5533] usb 6-1: media controller created [ 968.703104][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 968.709328][ T5533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 968.732042][ T34] usb 9-1: no configurations [ 968.733648][ T34] usb 9-1: can't read configurations, error -22 [ 968.918424][ T5533] zl10353_read_register: readreg error (reg=127, ret==-110) [ 968.961620][ T34] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 969.026828][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 969.068774][ T34] usb 9-1: no configurations [ 969.070446][ T34] usb 9-1: can't read configurations, error -22 [ 969.074248][ T34] usb usb9-port1: unable to enumerate USB device [ 969.530472][ T5533] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 969.695512][T19000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3439'. [ 969.798224][T19003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3439'. [ 969.801460][T19003] netlink: 'syz.5.3439': attribute type 7 has an invalid length. [ 969.804454][T19003] netlink: 'syz.5.3439': attribute type 8 has an invalid length. [ 969.807814][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3439'. [ 969.848644][T19003] ip6gretap0: entered promiscuous mode [ 969.854378][T19003] syz_tun: entered promiscuous mode [ 969.862536][T19003] ip6gretap0: left promiscuous mode [ 969.900220][T19003] syz_tun: left promiscuous mode [ 969.908642][ T34] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 970.088679][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 970.116790][ T34] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 970.124817][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.132752][ T34] usb 8-1: Product: syz [ 970.134391][ T34] usb 8-1: Manufacturer: syz [ 970.139077][ T34] usb 8-1: SerialNumber: syz [ 970.156640][T19000] veth3: entered allmulticast mode [ 970.255635][T19000] bond1: (slave veth3): Enslaving as an active interface with an up link [ 970.327170][T19002] bond1 (unregistering): (slave veth3): Releasing backup interface [ 970.331705][T19002] bond1 (unregistering): Released all slaves [ 970.712193][ T5533] usb 6-1: USB disconnect, device number 110 [ 970.733273][ T34] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 970.743416][T19010] syzkaller0: entered promiscuous mode [ 970.745309][T19010] syzkaller0: entered allmulticast mode [ 970.765456][ T34] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 970.776521][T19010] xt_ecn: cannot match TCP bits for non-tcp packets [ 970.960264][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 971.080397][ T34] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 971.587068][ T34] usb 8-1: media controller created [ 971.654575][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 971.823896][ T34] zl10353_read_register: readreg error (reg=127, ret==-71) [ 972.011103][ T34] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 972.034599][ T34] usb 8-1: USB disconnect, device number 91 [ 972.729095][T19029] xt_TPROXY: Can be used only with -p tcp or -p udp [ 972.740223][T19029] wg2 speed is unknown, defaulting to 1000 [ 972.768446][ T1482] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 972.819695][T19029] xfrm0 speed is unknown, defaulting to 1000 [ 973.033560][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3446'. [ 973.161621][ T40] audit: type=1326 audit(1780077190.048:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.1.3446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 973.191979][ T40] audit: type=1326 audit(1780077190.048:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.1.3446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 973.218835][ T40] audit: type=1326 audit(1780077190.048:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.1.3446" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 973.226862][ T40] audit: type=1326 audit(1780077190.048:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.1.3446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 973.234765][ T40] audit: type=1326 audit(1780077190.048:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.1.3446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 973.242494][ T40] audit: type=1326 audit(1780077190.048:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.1.3446" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 973.551800][ T40] audit: type=1326 audit(1780077190.868:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.1.3446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 973.591291][ T40] audit: type=1326 audit(1780077190.868:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.1.3446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 973.750910][ T1482] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.771751][ T1482] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 973.780068][ T1482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.789107][ T1482] usb 10-1: config 0 descriptor?? [ 973.958828][ T843] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 974.574839][ T1482] usb 10-1: can't set config #0, error -71 [ 974.624423][ T1482] usb 10-1: USB disconnect, device number 47 [ 974.688626][ T843] usb 9-1: Using ep0 maxpacket: 8 [ 974.699471][ T843] usb 9-1: no configurations [ 974.701240][ T843] usb 9-1: can't read configurations, error -22 [ 974.709926][T19053] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 974.848734][ T843] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 974.946095][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3451'. [ 975.019952][ T843] usb 9-1: Using ep0 maxpacket: 8 [ 975.033288][ T843] usb 9-1: no configurations [ 975.035351][ T843] usb 9-1: can't read configurations, error -22 [ 975.092384][ T843] usb usb9-port1: attempt power cycle [ 975.593674][ T843] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 975.674747][ T843] usb 9-1: Using ep0 maxpacket: 8 [ 975.728881][ T843] usb 9-1: no configurations [ 975.730582][ T843] usb 9-1: can't read configurations, error -22 [ 975.878530][ T843] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 975.910415][ T843] usb 9-1: Using ep0 maxpacket: 8 [ 975.918678][ T843] usb 9-1: no configurations [ 975.921001][ T843] usb 9-1: can't read configurations, error -22 [ 975.932407][ T843] usb usb9-port1: unable to enumerate USB device [ 976.502124][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3452'. [ 977.248635][ T843] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 977.408879][ T843] usb 6-1: Using ep0 maxpacket: 8 [ 977.417822][ T843] usb 6-1: no configurations [ 977.422477][ T843] usb 6-1: can't read configurations, error -22 [ 977.558667][ T843] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 977.728737][ T843] usb 6-1: Using ep0 maxpacket: 8 [ 977.732962][ T843] usb 6-1: no configurations [ 977.734602][ T843] usb 6-1: can't read configurations, error -22 [ 977.740175][ T843] usb usb6-port1: attempt power cycle [ 978.170302][ T843] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 978.189207][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3460'. [ 978.268178][ T843] usb 6-1: Using ep0 maxpacket: 8 [ 978.286533][ T843] usb 6-1: no configurations [ 978.289055][ T843] usb 6-1: can't read configurations, error -22 [ 978.496085][ T843] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 978.532004][ T843] usb 6-1: Using ep0 maxpacket: 8 [ 978.536494][ T843] usb 6-1: no configurations [ 978.538229][ T843] usb 6-1: can't read configurations, error -22 [ 978.547208][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3461'. [ 978.568541][ T843] usb usb6-port1: unable to enumerate USB device [ 979.651488][T19124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3465'. [ 979.718656][T15285] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 980.323809][T19126] net_ratelimit: 1399 callbacks suppressed [ 980.323862][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.375025][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.377340][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.379804][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.381889][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.384023][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.386124][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.388312][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.390342][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.392684][T19126] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 980.473762][T15285] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.478365][T15285] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 980.481180][T15285] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.485202][T15285] usb 8-1: config 0 descriptor?? [ 980.851385][T15285] usbhid 8-1:0.0: can't add hid device: -71 [ 980.853345][T15285] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 980.871361][T15285] usb 8-1: USB disconnect, device number 92 [ 981.128509][T12181] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 981.278395][T12181] usb 10-1: Using ep0 maxpacket: 8 [ 981.281372][T12181] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 981.284072][T12181] usb 10-1: config 0 has no interface number 0 [ 981.286487][T12181] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 981.291418][T12181] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 981.296464][T12181] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 981.301571][T12181] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 981.307144][T12181] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 981.311846][T12181] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.322597][T12181] usb 10-1: config 0 descriptor?? [ 981.336413][T12181] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 981.438779][ T34] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 981.554323][ C2] ldusb 10-1:0.55: usb_submit_urb failed (-1) [ 981.563925][T15285] usb 10-1: USB disconnect, device number 48 [ 981.567941][T15285] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 981.589314][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 981.604820][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.621824][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.625036][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 981.627299][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 981.635552][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.638428][T15297] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 981.679152][T12181] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 981.748969][ T34] usb 6-1: config 0 descriptor?? [ 981.788362][T15297] usb 8-1: Using ep0 maxpacket: 32 [ 981.791443][T15297] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.794947][T15297] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 981.798655][T15297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.802731][T15297] usb 8-1: config 0 descriptor?? [ 981.805855][T15297] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 981.809674][T15297] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 981.833448][T12181] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.837789][T12181] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 981.840607][T12181] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.846229][T12181] usb 9-1: config 0 descriptor?? [ 982.117435][T12181] usbhid 9-1:0.0: can't add hid device: -71 [ 982.119427][T12181] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 982.125107][T12181] usb 9-1: USB disconnect, device number 50 [ 982.202754][ T34] hid_parser_main: 5 callbacks suppressed [ 982.202851][ T34] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 982.207308][ T34] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 982.209732][ T34] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 982.210960][T15297] usb 8-1: USB disconnect, device number 93 [ 982.219806][T15297] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 982.225104][ T34] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 982.239944][ T34] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 982.246397][ T34] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 982.391173][T19133] 8021q: VLANs not supported on sit0 [ 982.428597][ T34] usb 6-1: USB disconnect, device number 115 [ 982.558439][ T5533] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 982.708448][ T5533] usb 9-1: Using ep0 maxpacket: 32 [ 982.715215][ T5533] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.728948][ T5533] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 982.738767][ T5533] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.750058][ T5533] usb 9-1: config 0 descriptor?? [ 982.758722][ T5533] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 982.778358][ T5533] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 983.170333][ T5533] usb 9-1: USB disconnect, device number 51 [ 983.183777][ T5533] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 983.271309][T19147] netlink: 'syz.1.3473': attribute type 10 has an invalid length. [ 983.278612][T19147] ipvlan0: entered allmulticast mode [ 983.280267][T19147] veth0_vlan: entered allmulticast mode [ 983.291896][T19147] team0: Device ipvlan0 failed to register rx_handler [ 983.678965][ T843] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 983.848806][ T843] usb 8-1: Using ep0 maxpacket: 8 [ 983.858344][ T843] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 983.860963][ T843] usb 8-1: can't read configurations, error -61 [ 983.998886][ T843] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 984.158835][ T843] usb 8-1: Using ep0 maxpacket: 8 [ 984.281060][ T843] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 984.285652][ T843] usb 8-1: can't read configurations, error -61 [ 984.289417][ T843] usb usb8-port1: attempt power cycle [ 984.662430][ T843] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 984.699622][ T843] usb 8-1: Using ep0 maxpacket: 8 [ 984.794288][ T843] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 984.801139][ T843] usb 8-1: can't read configurations, error -61 [ 985.408742][ T843] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 985.781879][ T843] usb 8-1: Using ep0 maxpacket: 8 [ 985.791348][ T843] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 985.793976][ T843] usb 8-1: can't read configurations, error -61 [ 985.798230][ T843] usb usb8-port1: unable to enumerate USB device [ 985.808412][ T5533] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 985.960619][ T5533] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.965482][ T5533] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 985.969946][ T5533] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.976288][ T5533] usb 10-1: config 0 descriptor?? [ 986.332029][ T5533] usbhid 10-1:0.0: can't add hid device: -71 [ 986.337303][ T5533] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 986.343956][ T5533] usb 10-1: USB disconnect, device number 49 [ 986.769338][ T5533] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 986.903009][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 986.930478][ T5533] usb 10-1: Using ep0 maxpacket: 32 [ 986.942495][ T5533] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.955606][ T5533] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 986.968050][ T5533] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.997098][ T5533] usb 10-1: config 0 descriptor?? [ 987.013107][ T5533] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 987.038072][ T5533] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 987.437703][ T5533] usb 10-1: USB disconnect, device number 50 [ 987.456854][ T5533] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 987.606708][T19185] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 987.649055][T19185] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 987.968127][T19190] syzkaller0: entered promiscuous mode [ 988.030558][T19190] syzkaller0: entered allmulticast mode [ 988.382068][ T34] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 988.576356][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.581368][ T34] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 988.588155][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.613616][ T34] usb 9-1: config 0 descriptor?? [ 988.854595][ T34] usbhid 9-1:0.0: can't add hid device: -71 [ 988.859216][ T34] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 988.894216][ T34] usb 9-1: USB disconnect, device number 52 [ 988.944413][T19200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.569880][ T34] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 989.759122][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 989.764593][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.774258][ T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 989.777832][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.801032][ T34] usb 9-1: config 0 descriptor?? [ 989.821773][ T34] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 989.835243][ T34] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 990.239846][T12181] usb 9-1: USB disconnect, device number 53 [ 990.245595][T12181] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 990.803306][ T1482] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 990.969459][ T1482] usb 10-1: Using ep0 maxpacket: 16 [ 990.995162][ T1482] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 990.998762][ T1482] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.001186][ T1482] usb 10-1: Product: syz [ 991.002489][ T1482] usb 10-1: Manufacturer: syz [ 991.003901][ T1482] usb 10-1: SerialNumber: syz [ 991.231037][ T1482] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 991.242874][ T1482] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 991.248472][ T1482] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 991.253492][ T1482] usb 10-1: media controller created [ 991.264381][ T1482] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.494010][ T1482] zl10353_read_register: readreg error (reg=127, ret==-110) [ 991.752420][ T1482] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 991.758189][ T1482] usb 10-1: USB disconnect, device number 51 [ 992.501237][T19223] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3495'. [ 992.769099][T12181] usb 8-1: new low-speed USB device number 98 using dummy_hcd [ 992.941031][T12181] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 992.949888][T12181] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 992.962462][T12181] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 992.975314][T12181] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 992.986538][T12181] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 993.014591][T12181] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 993.025259][T12181] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 993.039991][T12181] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 993.056392][T12181] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 993.069052][T12181] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 993.074106][T19236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3499'. [ 993.083223][T12181] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 993.086994][T12181] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 993.097587][T12181] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 993.114377][T12181] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 993.131253][T12181] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 993.152582][T12181] usb 8-1: string descriptor 0 read error: -22 [ 993.157199][T12181] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 993.171826][T12181] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.219331][T12181] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 995.423345][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3502'. [ 995.573342][T12181] usb 8-1: USB disconnect, device number 98 [ 996.881115][T19281] syzkaller0: entered promiscuous mode [ 996.883098][T19281] syzkaller0: entered allmulticast mode [ 997.233090][T19281] could not allocate digest TFM handle poly1305-neon [ 997.655249][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.657716][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.297243][T19283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'. [ 999.817550][T19292] wg2 speed is unknown, defaulting to 1000 [ 1000.078446][T15297] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1000.161033][T19304] net_ratelimit: 3320 callbacks suppressed [ 1000.161047][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.199171][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.201264][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.201304][T19310] syzkaller0: entered promiscuous mode [ 1000.203255][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.207019][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.209170][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.211236][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.213278][T19310] syzkaller0: entered allmulticast mode [ 1000.213305][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.217063][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.219173][T19304] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1000.248767][T15297] usb 8-1: Using ep0 maxpacket: 8 [ 1000.254185][T15297] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1000.258417][T15297] usb 8-1: can't read configurations, error -61 [ 1000.316026][T19292] xfrm0 speed is unknown, defaulting to 1000 [ 1000.398325][T15297] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1000.548353][T15297] usb 8-1: Using ep0 maxpacket: 8 [ 1000.558896][T15297] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1000.561257][T15297] usb 8-1: can't read configurations, error -61 [ 1000.563372][T15297] usb usb8-port1: attempt power cycle [ 1000.908374][T15297] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1000.948340][T15297] usb 8-1: Using ep0 maxpacket: 8 [ 1000.953912][T15297] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1000.956488][T15297] usb 8-1: can't read configurations, error -61 [ 1001.088754][T15297] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1001.489124][T15297] usb 8-1: Using ep0 maxpacket: 8 [ 1001.821959][T15297] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1001.824301][T15297] usb 8-1: can't read configurations, error -61 [ 1001.826446][T15297] usb usb8-port1: unable to enumerate USB device [ 1002.193211][T19322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.368462][ T5533] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1002.520248][ T5533] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.524775][ T5533] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1002.528200][ T5533] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.534470][ T5533] usb 9-1: config 0 descriptor?? [ 1002.782114][ T5533] usbhid 9-1:0.0: can't add hid device: -71 [ 1002.784013][ T5533] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1002.789978][ T5533] usb 9-1: USB disconnect, device number 54 [ 1003.045246][T19335] Bluetooth: MGMT ver 1.23 [ 1003.268374][ T5533] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1003.418344][ T5533] usb 9-1: Using ep0 maxpacket: 32 [ 1003.421349][ T5533] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.424587][ T5533] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1003.427330][ T5533] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.431604][ T5533] usb 9-1: config 0 descriptor?? [ 1003.435020][ T5533] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1003.438762][ T5533] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1003.905577][T19349] /dev/nullb0: Can't open blockdev [ 1003.949401][T19349] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3527'. [ 1003.953046][T19349] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3527'. [ 1003.982301][T19349] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3527'. [ 1003.985254][T19349] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3527'. [ 1004.003455][ T40] audit: type=1326 audit(1780077221.198:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.045465][ T40] audit: type=1326 audit(1780077221.198:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.054631][ T40] audit: type=1326 audit(1780077221.208:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.062920][ T40] audit: type=1326 audit(1780077221.208:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.072249][ T40] audit: type=1326 audit(1780077221.208:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.080627][ T40] audit: type=1326 audit(1780077221.218:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.083827][ T843] usb 9-1: USB disconnect, device number 55 [ 1004.088883][ T40] audit: type=1326 audit(1780077221.218:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.088909][ T40] audit: type=1326 audit(1780077221.218:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.088931][ T40] audit: type=1326 audit(1780077221.228:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.088957][ T40] audit: type=1326 audit(1780077221.238:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1004.502028][ T843] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1004.739250][T15297] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1004.828831][T15876] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1004.859895][T19380] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1004.908329][T15297] usb 6-1: Using ep0 maxpacket: 8 [ 1004.911165][T15297] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.914454][T15297] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1004.917212][T15297] usb 6-1: config 1 has no interface number 0 [ 1004.919152][T15297] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1004.924407][T15297] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1004.927137][T15297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.929699][T15297] usb 6-1: Product: syz [ 1004.930984][T15297] usb 6-1: Manufacturer: syz [ 1004.932558][T15297] usb 6-1: SerialNumber: syz [ 1004.978652][T15876] usb 8-1: Using ep0 maxpacket: 8 [ 1004.984317][T15876] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1004.987040][T15876] usb 8-1: can't read configurations, error -61 [ 1005.118835][T15876] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1005.138357][ T1482] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1005.268622][T15876] usb 8-1: Using ep0 maxpacket: 8 [ 1005.275965][T15876] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1005.278976][T15876] usb 8-1: can't read configurations, error -61 [ 1005.282712][T15876] usb usb8-port1: attempt power cycle [ 1005.288315][ T1482] usb 9-1: Using ep0 maxpacket: 32 [ 1005.291680][ T1482] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.294941][ T1482] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1005.299421][ T1482] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1005.302511][ T1482] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1005.305067][ T1482] usb 9-1: Product: syz [ 1005.306375][ T1482] usb 9-1: Manufacturer: syz [ 1005.307851][ T1482] usb 9-1: SerialNumber: syz [ 1005.312284][ T1482] usb 9-1: config 0 descriptor?? [ 1005.415986][T15297] usb 6-1: USB disconnect, device number 116 [ 1005.527822][T18773] udevd[18773]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.638598][T15876] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1005.661143][T15876] usb 8-1: Using ep0 maxpacket: 8 [ 1005.667975][T15876] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1005.670536][T15876] usb 8-1: can't read configurations, error -61 [ 1005.801935][T15876] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 1005.824745][T15876] usb 8-1: Using ep0 maxpacket: 8 [ 1005.830613][T15876] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1005.833296][T15876] usb 8-1: can't read configurations, error -61 [ 1005.836050][T15876] usb usb8-port1: unable to enumerate USB device [ 1006.027483][T19383] syzkaller0: entered promiscuous mode [ 1006.029418][T19383] syzkaller0: entered allmulticast mode [ 1006.041185][T19383] tipc: Started in network mode [ 1006.042919][T19383] tipc: Node identity ae2a726f6597, cluster identity 4711 [ 1006.047178][T19383] tipc: Enabled bearer , priority 0 [ 1006.052223][T19382] tipc: Resetting bearer [ 1006.067257][T19382] tipc: Disabling bearer [ 1007.218805][T18981] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1007.398345][T18981] usb 6-1: Using ep0 maxpacket: 16 [ 1007.408634][T18981] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1007.412043][T18981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.414666][T18981] usb 6-1: Product: syz [ 1007.416204][T18981] usb 6-1: Manufacturer: syz [ 1007.419416][T18981] usb 6-1: SerialNumber: syz [ 1007.650701][T18981] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1007.670362][T18981] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1007.674820][T18981] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1007.677704][T18981] usb 6-1: media controller created [ 1007.838102][T18981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1008.461404][T18981] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1008.973038][T12181] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 1008.995845][ T1482] usb 9-1: USB disconnect, device number 56 [ 1009.205050][T12181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.209518][T12181] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1009.212499][T12181] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.228709][T12181] usb 8-1: config 0 descriptor?? [ 1009.466036][T19419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3541'. [ 1009.523905][T12181] usbhid 8-1:0.0: can't add hid device: -71 [ 1009.533940][T12181] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1009.545213][T12181] usb 8-1: USB disconnect, device number 107 [ 1010.088427][T12181] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 1010.238413][T12181] usb 8-1: Using ep0 maxpacket: 32 [ 1010.241279][T12181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.244985][T12181] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1010.247779][T12181] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.254116][T12181] usb 8-1: config 0 descriptor?? [ 1010.260155][T12181] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1010.268830][T12181] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1010.324487][T18981] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1010.358276][T18981] usb 6-1: USB disconnect, device number 117 [ 1011.528918][T12181] usb 8-1: USB disconnect, device number 108 [ 1011.610456][T12181] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 1011.837280][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3541'. [ 1012.544366][T19438] net_ratelimit: 5369 callbacks suppressed [ 1012.544379][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.436241][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.439292][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.442135][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.444979][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.447080][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.449334][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.451442][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.453619][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.455684][T19438] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1013.965031][T19446] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1013.972774][T19446] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 1013.976247][T19446] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1013.979631][T19446] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 1016.968724][T19468] syzkaller0: entered promiscuous mode [ 1016.970459][T19468] syzkaller0: entered allmulticast mode [ 1017.162713][T19473] syz_tun: entered allmulticast mode [ 1017.216334][T19475] netlink: 'syz.4.3553': attribute type 58 has an invalid length. [ 1017.219083][T19475] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3553'. [ 1017.291843][T19475] 9pnet_virtio: no channels available for device syz [ 1017.304668][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 1017.304683][ T40] audit: type=1800 audit(1780077234.628:1517): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3553" name="bus" dev="9p" ino=72877511 res=0 errno=0 [ 1017.329081][ T40] audit: type=1804 audit(1780077234.648:1518): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3553" name="/newroot/142/file0/bus" dev="9p" ino=72877511 res=1 errno=0 [ 1019.218390][T15297] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1019.370142][T15297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.374777][T15297] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1019.378065][T15297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.385472][T15297] usb 10-1: config 0 descriptor?? [ 1020.315878][T15297] usbhid 10-1:0.0: can't add hid device: -71 [ 1020.318004][T15297] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1020.431276][T15297] usb 10-1: USB disconnect, device number 52 [ 1020.678449][T12181] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 1020.836089][T12181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.838550][T18981] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1020.841133][T12181] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1020.846392][T12181] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.848471][T15297] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1020.851192][T12181] usb 8-1: config 0 descriptor?? [ 1020.998419][T15297] usb 10-1: Using ep0 maxpacket: 32 [ 1021.003778][T15297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.008482][T15297] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1021.012289][T15297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.023041][T18981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.025048][T15297] usb 10-1: config 0 descriptor?? [ 1021.027431][T18981] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1021.031524][T18981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.034307][T15297] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1021.043097][T15297] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1021.049419][T18981] usb 6-1: config 0 descriptor?? [ 1021.058926][ T34] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1021.133698][T12181] usbhid 8-1:0.0: can't add hid device: -71 [ 1021.139898][T12181] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1021.146994][T12181] usb 8-1: USB disconnect, device number 109 [ 1021.314787][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.322087][ T34] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1021.326977][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.413583][ T34] usb 9-1: config 0 descriptor?? [ 1021.435963][ T54] usb 10-1: USB disconnect, device number 53 [ 1021.451620][ T54] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1021.503272][T18981] usbhid 6-1:0.0: can't add hid device: -71 [ 1021.506907][T18981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1021.528831][T18981] usb 6-1: USB disconnect, device number 118 [ 1021.638836][T15876] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 1021.689690][ T34] usbhid 9-1:0.0: can't add hid device: -71 [ 1021.692084][ T34] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1021.706927][ T34] usb 9-1: USB disconnect, device number 57 [ 1021.811035][T15876] usb 8-1: Using ep0 maxpacket: 32 [ 1021.829979][T15876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.833584][T15876] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1021.836757][T15876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.854913][T15876] usb 8-1: config 0 descriptor?? [ 1021.873069][T15876] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1021.883848][T15876] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1022.030392][T18981] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1022.271902][ T34] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1022.279075][T18981] usb 6-1: Using ep0 maxpacket: 32 [ 1022.284218][T18981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.288550][T18981] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1022.302865][T18981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.320695][T17751] usb 8-1: USB disconnect, device number 110 [ 1022.371354][T17751] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 1022.375218][T18981] usb 6-1: config 0 descriptor?? [ 1022.427097][T18981] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1022.433154][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 1022.441382][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.451540][ T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1022.458553][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.510062][T18981] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1022.532120][ T34] usb 9-1: config 0 descriptor?? [ 1022.586615][ T34] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1022.615289][ T34] ldusb 9-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1022.824931][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1022.825010][ T34] usb 6-1: USB disconnect, device number 119 [ 1022.855943][ T34] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1022.945191][T19489] ldusb: No device or device unplugged -19 [ 1022.959975][T15285] usb 9-1: USB disconnect, device number 58 [ 1022.995650][T15285] ldusb 9-1:0.0: LD USB Device #1 now disconnected [ 1023.908412][T19527] net_ratelimit: 55 callbacks suppressed [ 1023.908424][T19527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1024.399738][T19535] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1024.491042][T19540] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3570'. [ 1024.864003][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3572'. [ 1024.909280][T19556] lo speed is unknown, defaulting to 1000 [ 1024.931290][T19556] lo speed is unknown, defaulting to 1000 [ 1024.935155][T19556] lo speed is unknown, defaulting to 1000 [ 1025.075372][T19556] infiniband syz0: set active [ 1025.076936][T15297] lo speed is unknown, defaulting to 1000 [ 1025.078837][T19556] infiniband syz0: added lo [ 1025.089687][T19556] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1025.094201][T19556] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1025.099483][T19556] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1025.159801][T19556] RDS/IB: syz0: added [ 1025.164522][T19556] smc: adding ib device syz0 with port count 1 [ 1025.169491][T19556] smc: ib device syz0 port 1 has no pnetid [ 1025.173181][T12181] lo speed is unknown, defaulting to 1000 [ 1025.176651][T19556] lo speed is unknown, defaulting to 1000 [ 1025.387871][T19556] lo speed is unknown, defaulting to 1000 [ 1025.529516][T19556] lo speed is unknown, defaulting to 1000 [ 1025.629148][T19556] lo speed is unknown, defaulting to 1000 [ 1025.713813][T19556] lo speed is unknown, defaulting to 1000 [ 1025.788337][T15285] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 1025.948490][T15285] usb 8-1: Using ep0 maxpacket: 8 [ 1025.956687][T15285] usb 8-1: config 0 has no interfaces? [ 1025.961686][T15285] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1025.968349][T15285] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.968363][T15285] usb 8-1: Product: syz [ 1025.979370][T15285] usb 8-1: Manufacturer: syz [ 1025.980852][T15285] usb 8-1: SerialNumber: syz [ 1025.984472][T15285] usb 8-1: config 0 descriptor?? [ 1026.025362][T19573] netlink: 'syz.1.3579': attribute type 1 has an invalid length. [ 1026.028404][T19573] netlink: 'syz.1.3579': attribute type 3 has an invalid length. [ 1026.032405][T19573] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3579'. [ 1026.063045][T19573] Invalid logical block size (4194304) [ 1026.078937][T19573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3579'. [ 1026.251234][T19566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.264441][T19566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.279414][ T34] usb 8-1: USB disconnect, device number 111 [ 1026.358375][T13869] Bluetooth: hci1: adv larger than maximum supported [ 1026.358393][T13869] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1026.898948][ T34] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1026.928335][T15285] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1027.053110][T19582] syzkaller0: create flow: hash 1423714866 index 2 [ 1027.068632][T12181] syzkaller0: tun_net_xmit 76 [ 1027.088511][T15285] usb 10-1: Using ep0 maxpacket: 32 [ 1027.092939][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.094717][T15285] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1027.099955][ T34] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1027.101024][T15285] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 1027.105410][T15285] usb 10-1: config 8 has no interface number 0 [ 1027.107131][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.107355][T15285] usb 10-1: config 8 interface 188 has no altsetting 0 [ 1027.117030][T15285] usb 10-1: string descriptor 0 read error: -22 [ 1027.119066][T15285] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 1027.127103][T15285] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.146751][T15285] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 1027.152666][T15285] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1027.157885][T15285] dvb-usb: bulk message failed: -22 (2/0) [ 1027.163197][ T34] usb 6-1: config 0 descriptor?? [ 1027.165308][T15285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1027.175453][T15285] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 1027.181363][T15285] usb 10-1: media controller created [ 1027.184373][T15285] dvb-usb: bulk message failed: -22 (6/0) [ 1027.189278][T15285] dw2102: i2c transfer failed. [ 1027.197466][T15285] dvb-usb: bulk message failed: -22 (6/0) [ 1027.201251][T15285] dw2102: i2c transfer failed. [ 1027.204220][T15285] dvb-usb: bulk message failed: -22 (6/0) [ 1027.207655][T15285] dw2102: i2c transfer failed. [ 1027.210562][T15285] dvb-usb: bulk message failed: -22 (6/0) [ 1027.212457][T15285] dw2102: i2c transfer failed. [ 1027.214016][T15285] dvb-usb: bulk message failed: -22 (6/0) [ 1027.215853][T15285] dw2102: i2c transfer failed. [ 1027.217447][T15285] dvb-usb: bulk message failed: -22 (6/0) [ 1027.219402][T12181] syzkaller0: tun_net_xmit 76 [ 1027.222775][T15285] dw2102: i2c transfer failed. [ 1027.224681][T15285] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1027.231688][T15285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1027.249386][T15285] dvb-usb: bulk message failed: -22 (3/0) [ 1027.251644][T15285] dw2102: command 0x0e transfer failed. [ 1027.253488][T15285] dvb-usb: bulk message failed: -22 (3/0) [ 1027.255357][T15285] dw2102: command 0x0e transfer failed. [ 1027.259088][T19583] syzkaller0: delete flow: hash 1423714866 index 2 [ 1027.298467][T12181] syzkaller0: tun_net_xmit 76 [ 1027.520118][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 1027.522547][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1027.556297][ T34] usb 6-1: USB disconnect, device number 120 [ 1027.558497][T15285] dvb-usb: bulk message failed: -22 (3/0) [ 1027.558524][T15285] dw2102: command 0x0e transfer failed. [ 1027.558532][T15285] dvb-usb: bulk message failed: -22 (3/0) [ 1027.558540][T15285] dw2102: command 0x0e transfer failed. [ 1027.558544][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1027.558552][T15285] dw2102: command 0x51 transfer failed. [ 1027.579379][T19584] dvb-usb: bulk message failed: -22 (27/0) [ 1027.581283][T19584] dw2102: i2c transfer failed. [ 1027.583522][T19585] dvb-usb: bulk message failed: -22 (20/0) [ 1027.585680][T19585] dw2102: i2c transfer failed. [ 1027.682772][T15285] DVB: Unable to find symbol ds3000_attach() [ 1027.684668][T15285] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 1027.767104][T13869] block nbd5: Receive control failed (result -107) [ 1027.805282][T19584] syz.5.3581 (19584): drop_caches: 2 [ 1027.807358][T19584] syz.5.3581 (19584): drop_caches: 2 [ 1027.948383][T15285] rc_core: IR keymap rc-su3000 not found [ 1027.950212][T15285] Registered IR keymap rc-empty [ 1027.954877][T15285] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 1027.964804][T15285] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input42 [ 1027.973395][T15285] dvb-usb: schedule remote query interval to 150 msecs. [ 1027.978349][T15285] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1027.984248][T15285] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 1028.164337][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1028.169078][T15285] dw2102: i2c transfer failed. [ 1028.328418][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1028.330644][T15285] dw2102: i2c transfer failed. [ 1028.416614][ T34] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1028.492523][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1028.502706][T15285] dw2102: i2c transfer failed. [ 1028.588849][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 1028.596186][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.610017][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1028.619358][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.709176][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1028.711672][T15285] dw2102: i2c transfer failed. [ 1028.868464][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1028.870520][T15285] dw2102: i2c transfer failed. [ 1028.929064][T19602] overlayfs: overlapping lowerdir path [ 1029.028334][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1029.030152][T15285] dw2102: i2c transfer failed. [ 1029.188461][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1029.190986][T15285] dw2102: i2c transfer failed. [ 1029.264743][ T34] usb 6-1: config 0 descriptor?? [ 1029.297830][ T34] usb 6-1: can't set config #0, error -71 [ 1029.323201][ T34] usb 6-1: USB disconnect, device number 121 [ 1029.376634][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1029.379188][T15285] dw2102: i2c transfer failed. [ 1029.545417][T15285] dvb-usb: bulk message failed: -22 (1/0) [ 1029.547212][T15285] dw2102: i2c transfer failed. [ 1029.642219][T19586] block nbd5: shutting down sockets [ 1029.663168][ T5533] usb 10-1: USB disconnect, device number 54 [ 1029.750253][ T5533] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 1032.148400][ T5533] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1032.298477][ T5533] usb 10-1: Using ep0 maxpacket: 8 [ 1032.302566][ T5533] usb 10-1: config 0 has no interfaces? [ 1032.306781][ T5533] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1032.310720][ T5533] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.314012][ T5533] usb 10-1: Product: syz [ 1032.315618][ T5533] usb 10-1: Manufacturer: syz [ 1032.317204][ T5533] usb 10-1: SerialNumber: syz [ 1032.320416][ T5533] usb 10-1: config 0 descriptor?? [ 1032.485585][T19626] overlayfs: missing 'lowerdir' [ 1032.551206][T19615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.562636][T19615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.575787][T13869] Bluetooth: hci0: adv larger than maximum supported [ 1032.575803][T13869] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1032.586839][ T54] usb 10-1: USB disconnect, device number 55 [ 1032.698558][ T5533] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1032.848353][ T5533] usb 9-1: Using ep0 maxpacket: 8 [ 1032.852828][ T5533] usb 9-1: config 0 has no interfaces? [ 1032.859606][ T5533] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1032.863409][ T5533] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.866675][ T5533] usb 9-1: Product: syz [ 1032.868385][ T5533] usb 9-1: Manufacturer: syz [ 1032.870874][ T5533] usb 9-1: SerialNumber: syz [ 1032.887486][ T5533] usb 9-1: config 0 descriptor?? [ 1033.151011][T19622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.163660][T19622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.187917][T13869] Bluetooth: hci4: adv larger than maximum supported [ 1033.187936][T13869] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1033.197028][ T5533] usb 9-1: USB disconnect, device number 59 [ 1034.880922][T19662] program syz.4.3600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.883578][T19662] ata1.00: invalid command format 31 [ 1034.898237][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1035.045920][T19665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3601'. [ 1036.145243][T17751] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1036.428892][T17751] usb 6-1: Using ep0 maxpacket: 8 [ 1036.490074][ T40] audit: type=1800 audit(1780077253.818:1519): pid=19685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3606" name=06 dev="tmpfs" ino=1157 res=0 errno=0 [ 1036.495252][T17751] usb 6-1: config 0 has no interfaces? [ 1036.566590][T17751] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1036.570198][T17751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.573243][T17751] usb 6-1: Product: syz [ 1036.577144][T17751] usb 6-1: Manufacturer: syz [ 1036.581504][T17751] usb 6-1: SerialNumber: syz [ 1036.630519][T17751] usb 6-1: config 0 descriptor?? [ 1036.921803][T19675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.938333][T19675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.941557][T13869] Bluetooth: hci2: adv larger than maximum supported [ 1036.941571][T13869] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1036.942083][ T1482] usb 6-1: USB disconnect, device number 122 [ 1037.329657][T15285] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1037.485702][T15285] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.495868][T15285] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1037.499373][T15285] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.504845][T15285] usb 9-1: config 0 descriptor?? [ 1037.772607][T15285] usbhid 9-1:0.0: can't add hid device: -71 [ 1037.774612][T15285] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1037.801680][T15285] usb 9-1: USB disconnect, device number 60 [ 1037.959087][T15297] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1038.018601][ T5533] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 1038.108398][T15297] usb 10-1: Using ep0 maxpacket: 16 [ 1038.116756][T15297] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1038.119722][T15297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.122512][T15297] usb 10-1: Product: syz [ 1038.123876][T15297] usb 10-1: Manufacturer: syz [ 1038.125457][T15297] usb 10-1: SerialNumber: syz [ 1038.128954][T15297] usb 10-1: config 0 descriptor?? [ 1038.178390][ T5533] usb 8-1: Using ep0 maxpacket: 16 [ 1038.183906][ T5533] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1038.187078][ T5533] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.190648][ T5533] usb 8-1: Product: syz [ 1038.192424][ T5533] usb 8-1: Manufacturer: syz [ 1038.194497][ T5533] usb 8-1: SerialNumber: syz [ 1038.338549][ T5829] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1038.534100][ T5829] usb 9-1: Using ep0 maxpacket: 32 [ 1038.539204][ T5533] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1038.546182][ T5829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.552306][ T5829] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1038.556953][ T5533] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1038.560877][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.564681][ T5533] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1038.577599][ T5533] usb 8-1: media controller created [ 1038.580206][ T5829] usb 9-1: config 0 descriptor?? [ 1038.588015][ T5829] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1038.600293][ T5829] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1038.603887][ T5533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1038.655460][T15297] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1038.668455][T15297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1038.671845][T15297] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1038.674346][T15297] usb 10-1: media controller created [ 1038.683601][T15297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1038.745040][T19715] could not allocate digest TFM handle poly1305-neon [ 1038.838647][ T5533] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1038.880794][T19705] ------------[ cut here ]------------ [ 1038.882851][T19705] usb 8-1: BOGUS control dir, pipe 80007080 doesn't match bRequestType c0 [ 1038.885500][T19705] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#1: syz.5.3609/19705 [ 1038.888786][T19705] Modules linked in: [ 1038.890535][T19705] CPU: 1 UID: 0 PID: 19705 Comm: syz.5.3609 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.893993][T19705] Tainted: [L]=SOFTLOCKUP [ 1038.895541][T19705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1038.898716][T19705] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 1038.900478][T19705] Code: d2 74 5d 48 89 54 24 40 e8 9f 67 b2 fa 4c 89 ef e8 47 aa dd fe 48 89 c6 48 8d 3d dd 9f 8e 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 73 67 b2 fa 89 ee bf ff 00 00 00 [ 1038.906350][T19705] RSP: 0000:ffffc900072877a8 EFLAGS: 00010283 [ 1038.908185][T19705] RAX: ffffffff8c82da40 RBX: ffff88804b431c00 RCX: 0000000080007080 [ 1038.910714][T19705] RDX: ffff88804371eaa0 RSI: ffffffff8c82da40 RDI: ffffffff90e43550 [ 1038.913157][T19705] RBP: ffff888057ba7058 R08: 00000000000000c0 R09: 0000000000000000 [ 1038.916050][T19705] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057ee5400 [ 1038.918525][T19705] R13: ffff888057ba70b0 R14: 0000000080007080 R15: 00000000000000c0 [ 1038.920965][T19705] FS: 0000000000000000(0000) GS:ffff88809728b000(0063) knlGS:00000000f542cb40 [ 1038.923679][T19705] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1038.925978][T19705] CR2: 00000000f73c1538 CR3: 0000000076115000 CR4: 0000000000352ef0 [ 1038.928477][T19705] Call Trace: [ 1038.929599][T19705] [ 1038.930561][T19705] ? __init_swait_queue_head+0xca/0x150 [ 1038.932341][T19705] usb_start_wait_urb+0x10e/0x580 [ 1038.934003][T19705] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1038.935756][T19705] ? __asan_memset+0x23/0x50 [ 1038.937251][T19705] usb_control_msg+0x328/0x4b0 [ 1038.938859][T19705] ? __pfx_usb_control_msg+0x10/0x10 [ 1038.940529][T19705] gl861_ctrl_msg+0x1a5/0x4a0 [ 1038.942143][T19705] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1038.943804][T19705] ? __lock_acquire+0x4a5/0x2630 [ 1038.945912][T19705] gl861_i2c_master_xfer+0x545/0x690 [ 1038.947836][T19705] __i2c_transfer+0x5e9/0x1780 [ 1038.949446][T19705] ? __pfx___i2c_transfer+0x10/0x10 [ 1038.951072][T19705] ? rt_mutex_slowtrylock+0x93/0x100 [ 1038.952778][T19705] i2c_transfer+0x15f/0x380 [ 1038.954371][T19705] i2c_transfer_buffer_flags+0x10c/0x190 [ 1038.956269][T19705] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1038.958180][T19705] ? apparmor_file_permission+0x13f/0x1c0 [ 1038.959971][T19705] i2cdev_read+0x111/0x2b0 [ 1038.961399][T19705] ? __pfx_i2cdev_read+0x10/0x10 [ 1038.962972][T19705] vfs_read+0x1e4/0xb30 [ 1038.964495][T19705] ? __pfx_vfs_read+0x10/0x10 [ 1038.966052][T19705] ? find_held_lock+0x2b/0x80 [ 1038.967562][T19705] ? __fget_files+0x215/0x3d0 [ 1038.969146][T19705] ? __fget_files+0x215/0x3d0 [ 1038.970648][T19705] ? __fget_files+0x21f/0x3d0 [ 1038.972145][T19705] ksys_read+0x12a/0x250 [ 1038.973522][T19705] ? __pfx_ksys_read+0x10/0x10 [ 1038.975100][T19705] ? rcu_is_watching+0x12/0xc0 [ 1038.976680][T19705] __do_fast_syscall_32+0xe7/0x970 [ 1038.978339][T19705] ? lockdep_hardirqs_on+0x78/0x100 [ 1038.979976][T19705] do_fast_syscall_32+0x32/0x70 [ 1038.981537][T19705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1038.983524][T19705] RIP: 0023:0xf705ef7c [ 1038.984854][T19705] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1038.990749][T19705] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1038.993319][T19705] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000000 [ 1038.995832][T19705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1038.998331][T19705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1039.000702][T19705] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1039.003133][T19705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1039.005800][T19705] [ 1039.006851][T19705] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1039.009088][T19705] CPU: 1 UID: 0 PID: 19705 Comm: syz.5.3609 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.012355][T19705] Tainted: [L]=SOFTLOCKUP [ 1039.013645][T19705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1039.016743][T19705] Call Trace: [ 1039.017787][T19705] [ 1039.018711][T19705] dump_stack_lvl+0x100/0x190 [ 1039.020163][T19705] vpanic+0x552/0x970 [ 1039.021415][T19705] ? __pfx_vpanic+0x10/0x10 [ 1039.022834][T19705] panic+0xd1/0xe0 [ 1039.024081][T19705] ? __pfx_panic+0x10/0x10 [ 1039.025839][T19705] check_panic_on_warn.cold+0x19/0x34 [ 1039.027494][T19705] ? usb_submit_urb+0x1573/0x1910 [ 1039.029038][T19705] __warn.cold+0x191/0x328 [ 1039.030364][T19705] __report_bug+0x296/0x3d0 [ 1039.031745][T19705] ? usb_submit_urb+0x1573/0x1910 [ 1039.033301][T19705] ? __pfx___report_bug+0x10/0x10 [ 1039.035094][T19705] ? lockdep_hardirqs_on+0x78/0x100 [ 1039.036750][T19705] ? usb_submit_urb+0x157e/0x1910 [ 1039.038318][T19705] report_bug_entry+0xe1/0x290 [ 1039.039783][T19705] ? usb_submit_urb+0x157e/0x1910 [ 1039.041329][T19705] handle_bug+0x1cd/0x2a0 [ 1039.042692][T19705] exc_invalid_op+0x17/0x50 [ 1039.044250][T19705] asm_exc_invalid_op+0x1a/0x20 [ 1039.045740][T19705] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 1039.047481][T19705] Code: d2 74 5d 48 89 54 24 40 e8 9f 67 b2 fa 4c 89 ef e8 47 aa dd fe 48 89 c6 48 8d 3d dd 9f 8e 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 73 67 b2 fa 89 ee bf ff 00 00 00 [ 1039.053352][T19705] RSP: 0000:ffffc900072877a8 EFLAGS: 00010283 [ 1039.055669][T19705] RAX: ffffffff8c82da40 RBX: ffff88804b431c00 RCX: 0000000080007080 [ 1039.058429][T19705] RDX: ffff88804371eaa0 RSI: ffffffff8c82da40 RDI: ffffffff90e43550 [ 1039.060853][T19705] RBP: ffff888057ba7058 R08: 00000000000000c0 R09: 0000000000000000 [ 1039.063274][T19705] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057ee5400 [ 1039.065708][T19705] R13: ffff888057ba70b0 R14: 0000000080007080 R15: 00000000000000c0 [ 1039.068124][T19705] ? usb_submit_urb+0x1569/0x1910 [ 1039.069679][T19705] ? __init_swait_queue_head+0xca/0x150 [ 1039.071356][T19705] usb_start_wait_urb+0x10e/0x580 [ 1039.072924][T19705] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1039.074881][T19705] ? __asan_memset+0x23/0x50 [ 1039.076497][T19705] usb_control_msg+0x328/0x4b0 [ 1039.077969][T19705] ? __pfx_usb_control_msg+0x10/0x10 [ 1039.079572][T19705] gl861_ctrl_msg+0x1a5/0x4a0 [ 1039.080959][T19705] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1039.082559][T19705] ? __lock_acquire+0x4a5/0x2630 [ 1039.084013][T19705] gl861_i2c_master_xfer+0x545/0x690 [ 1039.085612][T19705] __i2c_transfer+0x5e9/0x1780 [ 1039.087102][T19705] ? __pfx___i2c_transfer+0x10/0x10 [ 1039.088715][T19705] ? rt_mutex_slowtrylock+0x93/0x100 [ 1039.090344][T19705] i2c_transfer+0x15f/0x380 [ 1039.091734][T19705] i2c_transfer_buffer_flags+0x10c/0x190 [ 1039.093446][T19705] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1039.095389][T19705] ? apparmor_file_permission+0x13f/0x1c0 [ 1039.097143][T19705] i2cdev_read+0x111/0x2b0 [ 1039.098508][T19705] ? __pfx_i2cdev_read+0x10/0x10 [ 1039.100013][T19705] vfs_read+0x1e4/0xb30 [ 1039.101289][T19705] ? __pfx_vfs_read+0x10/0x10 [ 1039.102761][T19705] ? find_held_lock+0x2b/0x80 [ 1039.104258][T19705] ? __fget_files+0x215/0x3d0 [ 1039.105703][T19705] ? __fget_files+0x215/0x3d0 [ 1039.107232][T19705] ? __fget_files+0x21f/0x3d0 [ 1039.108716][T19705] ksys_read+0x12a/0x250 [ 1039.110033][T19705] ? __pfx_ksys_read+0x10/0x10 [ 1039.111502][T19705] ? rcu_is_watching+0x12/0xc0 [ 1039.112985][T19705] __do_fast_syscall_32+0xe7/0x970 [ 1039.114773][T19705] ? lockdep_hardirqs_on+0x78/0x100 [ 1039.116428][T19705] do_fast_syscall_32+0x32/0x70 [ 1039.117924][T19705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1039.120121][T19705] RIP: 0023:0xf705ef7c [ 1039.121834][T19705] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1039.128643][T19705] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1039.132020][T19705] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000000 [ 1039.135266][T19705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1039.138553][T19705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1039.141636][T19705] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1039.144167][T19705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1039.147168][T19705] [ 1039.148954][T19705] Kernel Offset: disabled [ 1039.150295][T19705] Rebooting in 86400 seconds..